Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/LzAXDtPM9nU1JYVGMeO4pfT-p4Y.roa
File: LzAXDtPM9nU1JYVGMeO4pfT-p4Y.roa (raw, json)
Hash identifier: 33LGRi0NxTwUf4bEIbDZHmxIzJG1WbebPOf2lE0D9/I=
Subject key identifier: 2F:30:17:0E:D3:CC:F6:75:35:25:85:46:31:E3:B8:A5:F4:FE:A7:86
Certificate issuer: /CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Certificate serial: 0185711E7E2C78A21742A0B4B9F447DD4810
Authority key identifier: 1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/LzAXDtPM9nU1JYVGMeO4pfT-p4Y.roa
Signing time: Mon 02 Jan 2023 06:15:01 +0000
ROA not before: Mon 02 Jan 2023 06:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48594
IP address blocks: 94.124.81.0/24 maxlen: 24
94.124.85.0/24 maxlen: 24
94.124.82.0/24 maxlen: 24
94.124.83.0/24 maxlen: 24
94.124.80.0/24 maxlen: 24
94.124.84.0/24 maxlen: 24
94.124.86.0/24 maxlen: 24
94.124.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:7e:2c:78:a2:17:42:a0:b4:b9:f4:47:dd:48:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Validity
Not Before: Jan 2 06:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f30170ed3ccf6753525854631e3b8a5f4fea786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:00:8b:48:3b:8d:3a:6c:21:b9:6f:fb:4d:
ac:70:25:5c:1f:c6:ac:ca:c9:eb:c4:e1:56:74:23:
24:d1:a2:6c:31:c0:a4:30:54:34:7e:7b:27:cd:3f:
d1:80:94:d9:a9:a6:83:34:9c:4c:79:c8:66:f0:81:
3e:fa:b1:c4:d7:52:c7:f2:76:a9:04:32:3a:5b:a4:
5b:98:00:e6:ce:15:59:e5:f2:aa:ea:d0:18:a5:1b:
5b:76:da:bb:90:4d:36:e0:f1:d5:10:54:78:0a:b1:
cc:d4:f1:cc:1f:32:4a:0b:7f:ba:4c:c3:21:df:44:
07:ec:16:ce:9e:08:c0:cf:15:cb:eb:4f:72:78:f0:
91:30:8b:fa:ff:ee:1a:29:f3:d5:df:f1:9c:99:79:
fc:08:82:f4:c3:45:2b:a3:09:a1:03:b6:4a:73:98:
e9:a2:e4:6f:69:8f:0f:03:53:67:7d:07:c3:be:b5:
4b:a0:e5:db:75:97:7b:f9:bb:2e:75:09:e9:ba:4e:
c3:a6:aa:d4:dc:7b:be:f7:d9:c5:cc:75:b8:a4:2e:
7e:22:51:92:d5:6d:1e:46:a9:4f:50:1b:ea:4e:12:
d0:e6:fd:e5:d8:b4:4f:93:da:57:e6:35:c6:41:75:
c7:18:5f:ae:88:29:bf:9e:39:f5:c0:b3:a4:db:67:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:30:17:0E:D3:CC:F6:75:35:25:85:46:31:E3:B8:A5:F4:FE:A7:86
X509v3 Authority Key Identifier:
keyid:1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/LzAXDtPM9nU1JYVGMeO4pfT-p4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.80.0/21
Signature Algorithm: sha256WithRSAEncryption
94:7a:b3:e4:30:c7:ca:44:2d:00:74:74:7a:4a:a1:dc:f7:7f:
d2:04:6d:b0:1f:af:0a:1f:6b:20:d8:e1:f3:35:01:e6:77:0d:
bd:c8:62:51:b2:66:07:5c:a9:57:34:87:67:e3:c1:3e:04:e0:
2c:73:f9:17:db:24:fa:bf:22:5e:57:ed:24:e5:41:3b:2c:53:
52:bd:99:e0:c3:91:e7:ab:06:4c:ff:ce:2c:ba:15:ab:b5:2e:
11:7f:27:7a:9b:92:04:96:54:1b:6d:df:d8:77:f8:f0:55:e4:
13:b5:a6:79:a2:58:74:34:49:b0:ae:bf:d3:71:bd:c5:7d:d0:
e6:21:5c:74:03:a9:b4:df:d9:a4:4c:47:95:7e:4e:76:af:14:
77:9b:b2:74:8d:94:59:66:31:38:61:49:29:32:f8:31:5a:aa:
dc:cd:b1:76:26:27:d4:be:45:33:c8:5c:5e:c1:8e:8c:9e:65:
a0:3d:89:cd:39:7e:c6:9e:c9:70:8d:03:d2:05:cf:24:da:44:
52:99:b9:0d:96:26:ae:63:5d:a1:76:d5:46:a2:fb:68:02:5f:
1a:b4:dc:0d:d3:79:ee:04:4e:28:cb:f6:4d:31:79:51:92:d0:
44:8a:b7:5b:63:a0:aa:db:af:74:bb:69:b8:e4:08:2c:c0:b4:
50:16:bd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:19 2024 by rpki-client on console-fra.rpki-client.org