Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/lmyk99GyfN0LiIyHZA2Qe9bc4aU.roa
File: lmyk99GyfN0LiIyHZA2Qe9bc4aU.roa (raw, json)
Hash identifier: 2nQbITE93KyV3rTJ0YFCq/BEPeEuq9Cm6scwrdDgu8c=
Subject key identifier: 96:6C:A4:F7:D1:B2:7C:DD:0B:88:8C:87:64:0D:90:7B:D6:DC:E1:A5
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018D97436F6DF1998CB794DED1BFE74DA0E9
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/lmyk99GyfN0LiIyHZA2Qe9bc4aU.roa
Signing time: Sun 11 Feb 2024 08:23:15 +0000
ROA not before: Sun 11 Feb 2024 08:23:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.251.28.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 21:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:97:43:6f:6d:f1:99:8c:b7:94:de:d1:bf:e7:4d:a0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Feb 11 08:23:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=966ca4f7d1b27cdd0b888c87640d907bd6dce1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:b9:40:d7:81:f3:fa:21:a4:f0:b4:dc:ca:
63:6a:53:cb:f4:ca:30:cf:15:55:5f:40:94:cb:fa:
26:36:6b:15:61:d7:af:d4:71:d3:1f:2d:6d:02:43:
e6:98:e6:fa:9e:d0:e3:4c:e2:60:03:6a:4e:92:ba:
09:df:0d:a0:bf:3f:11:b5:07:c3:a2:79:1a:95:aa:
6b:79:25:dc:fc:39:03:02:78:dd:cd:80:63:e6:68:
96:8e:c5:b1:8d:f0:48:3b:e4:cb:c8:45:1f:60:28:
09:e5:bf:73:bf:ce:c7:ce:ff:cd:5b:46:9f:86:b6:
ab:6a:12:ed:f0:5b:39:7b:99:5d:95:a6:d7:e1:48:
7d:83:8b:b5:4e:41:fe:9d:c4:6b:e3:1f:c9:35:b1:
63:9c:9a:69:5a:b7:23:47:4e:cd:42:28:d2:0b:7b:
5c:ca:29:06:05:35:0d:39:8f:d1:26:eb:85:35:f4:
50:7e:85:40:20:92:9b:55:c3:51:a4:ca:c1:b5:46:
06:c7:74:d3:b5:32:83:0c:b9:4e:1f:00:6a:2b:61:
38:c7:17:ad:2b:83:f3:e1:f4:1f:86:d2:16:76:1d:
81:a1:76:3e:8b:69:bc:f3:58:08:3d:de:d7:b4:86:
a7:83:c0:3e:e3:4d:0d:2d:bd:ae:72:a5:90:bc:fd:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6C:A4:F7:D1:B2:7C:DD:0B:88:8C:87:64:0D:90:7B:D6:DC:E1:A5
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/lmyk99GyfN0LiIyHZA2Qe9bc4aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.28.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:db:b2:02:0e:62:cf:f8:10:cd:8b:52:fa:7e:a3:47:31:c1:
6d:5d:6b:e0:bd:2c:da:3f:fb:76:47:43:74:9b:39:df:df:ab:
2c:c7:6c:dc:a5:3a:db:43:04:1d:15:f3:53:58:ac:b8:c9:7a:
9c:83:57:31:00:f8:8d:41:d1:49:ba:9c:aa:cc:cd:62:0d:bd:
1b:df:ee:f3:30:94:b7:b5:61:39:5f:eb:ee:df:47:1e:13:61:
7b:aa:04:51:4f:be:50:33:ea:e7:d2:98:30:5d:54:f0:fc:25:
74:3c:f3:f0:6a:51:46:a6:ef:0b:a5:0b:70:91:35:99:59:d6:
5a:8f:dc:97:30:3c:ea:28:02:43:62:e9:91:b5:5c:96:44:b3:
28:12:ef:0d:ca:c0:0e:9e:53:b0:e0:0e:9b:37:8f:95:a4:be:
05:a8:ce:1e:ab:d4:a2:8a:8c:8c:17:0f:03:b1:79:a1:da:08:
79:0b:17:d8:6c:64:c4:22:a0:22:3b:4d:4d:17:ab:81:ea:c3:
8a:af:cd:38:73:43:33:27:c7:4f:3f:be:c8:cb:48:c0:35:d1:
62:2d:6e:43:90:a5:3f:59:6e:dc:8c:b8:1b:97:d8:8d:65:7c:
41:0b:d1:28:e2:59:d9:b2:ef:3e:e8:5f:b7:09:84:68:f7:f2:
13:b6:50:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org