Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/LfkxlPhm8CNy3jyZ4pP5n5itIss.roa
File: LfkxlPhm8CNy3jyZ4pP5n5itIss.roa (raw, json)
Hash identifier: /t3DjvO90VMaeqATzoZu970U1WLGwwg+hO39Kh3WJ2c=
Subject key identifier: 2D:F9:31:94:F8:66:F0:23:72:DE:3C:99:E2:93:F9:9F:98:AD:22:CB
Certificate issuer: /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Certificate serial: 018571831CE405C57E28478B29E624446F84
Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/LfkxlPhm8CNy3jyZ4pP5n5itIss.roa
Signing time: Mon 02 Jan 2023 08:04:56 +0000
ROA not before: Mon 02 Jan 2023 08:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 193.109.53.0/24 maxlen: 24
193.109.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:1c:e4:05:c5:7e:28:47:8b:29:e6:24:44:6f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Validity
Not Before: Jan 2 08:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2df93194f866f02372de3c99e293f99f98ad22cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fd:5e:bf:6b:e9:4f:ce:f5:a8:97:57:8f:e8:
11:f4:15:4b:71:ac:6c:33:20:93:77:0e:49:f5:29:
bf:7a:31:6e:bb:be:bc:ad:1c:18:05:03:9f:2d:b0:
ea:9f:e9:0d:4f:c9:e4:bd:1c:4f:d7:49:2c:5b:79:
10:33:0e:e0:ad:6f:e4:ef:a4:92:cd:68:74:e8:2c:
fa:be:6d:12:53:d8:1e:b8:c1:a7:06:cc:cc:53:76:
74:35:53:cd:86:11:fd:c1:bb:f7:4e:05:9e:aa:87:
c7:59:3b:4c:83:5f:39:e7:6b:85:07:30:8b:47:ed:
6a:b2:37:7e:78:00:ef:52:b8:2a:8c:01:7b:85:7f:
21:67:59:16:7e:0f:71:7e:7c:a7:8c:eb:b0:26:a2:
a3:76:21:2a:92:5a:63:3e:40:1e:68:84:3e:c0:38:
9a:e7:a5:77:eb:96:1b:6e:9f:bc:3e:d8:00:b9:b0:
b5:39:e0:47:cd:29:60:15:86:75:6e:fa:2b:c2:5d:
ba:01:9c:6f:be:8e:25:90:4e:60:40:cc:47:42:0f:
cc:ad:3d:1c:1f:cc:61:11:7d:a6:2a:29:a6:ad:94:
fc:98:2e:f0:04:c8:45:4e:16:f8:ef:0c:0f:14:f2:
7d:a7:eb:10:44:75:c3:b0:81:49:eb:a3:9b:8d:be:
db:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F9:31:94:F8:66:F0:23:72:DE:3C:99:E2:93:F9:9F:98:AD:22:CB
X509v3 Authority Key Identifier:
keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/LfkxlPhm8CNy3jyZ4pP5n5itIss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.52.0/23
Signature Algorithm: sha256WithRSAEncryption
75:68:2e:24:9f:2c:ff:ec:6e:f1:a9:8e:31:4c:99:2f:e8:52:
fc:fd:11:be:49:1c:0b:28:94:50:bb:d1:9e:77:2d:fd:3d:f5:
17:96:5f:cc:00:e3:09:9f:92:78:b9:25:a1:68:8a:96:af:e8:
dd:73:c3:eb:78:0a:5d:76:e3:e2:7a:2f:66:f7:d6:eb:65:5f:
8a:6e:d0:6e:47:fa:a0:c2:00:03:5b:94:12:9f:4e:7e:80:7e:
ee:23:74:2b:1e:9d:7c:d9:44:58:67:28:b8:a1:c4:fa:06:36:
90:c9:e2:3a:b1:73:96:f7:12:21:4a:58:50:ae:84:2b:6a:95:
b7:b5:79:8c:56:ea:bd:52:34:d9:42:76:e8:df:2b:74:c2:cc:
a2:78:62:23:37:53:e3:c4:95:51:76:a1:18:1c:c9:62:7a:32:
50:a5:8b:ee:9c:db:32:a1:8e:e6:36:e6:f6:d1:0a:f6:db:60:
32:7c:9d:31:f2:35:27:81:87:b5:2e:46:bf:c5:33:7f:c7:3a:
51:69:63:33:a6:0c:56:b7:05:79:53:ad:72:24:b2:bf:28:b6:
b3:95:8e:40:6c:91:3f:90:9f:2f:83:a2:5f:4e:06:cd:21:64:
18:2a:a7:ec:f4:a2:ab:3b:67:04:7d:3e:4b:6a:e3:34:a6:24:
1e:e0:01:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:18 2024 by rpki-client on console-ams.rpki-client.org