Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/LebhPP1CZDCn5Mm84d5Lfq2E3q8.roa
File: LebhPP1CZDCn5Mm84d5Lfq2E3q8.roa (raw, json)
Hash identifier: thbt6Mm1mRtlIhGW9io2XfDtEBr947P/bF2If8SSFjA=
Subject key identifier: 2D:E6:E1:3C:FD:42:64:30:A7:E4:C9:BC:E1:DE:4B:7E:AD:84:DE:AF
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 0191CD01F3B0F5838A1575846328085376B7
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/LebhPP1CZDCn5Mm84d5Lfq2E3q8.roa
Signing time: Sat 07 Sep 2024 15:02:22 +0000
ROA not before: Sat 07 Sep 2024 15:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206271
IP address blocks: 195.93.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 16:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cd:01:f3:b0:f5:83:8a:15:75:84:63:28:08:53:76:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Sep 7 15:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2de6e13cfd426430a7e4c9bce1de4b7ead84deaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:4e:33:1a:d6:39:45:08:f0:e2:c4:0e:e6:
c4:48:d4:a0:67:49:f7:20:2f:68:9d:85:82:4b:e0:
da:2c:6a:21:f9:58:28:0e:5f:15:21:0b:ae:92:a7:
35:f8:5f:1b:f3:67:2f:d3:b1:ef:1c:7c:ca:31:18:
83:5f:c8:b9:16:d6:65:1e:59:11:27:f4:ea:64:3f:
c7:9a:cf:9e:7d:a4:78:22:a1:c8:3f:9a:ed:ea:b2:
94:6d:da:9b:01:d7:a0:03:f0:36:0f:73:2d:dd:e1:
17:25:59:07:71:25:7e:47:a9:23:ab:53:19:5a:28:
2a:cd:83:fc:d6:59:73:0a:50:8c:0c:59:20:de:24:
4b:3f:3f:d4:2c:8a:26:6b:31:ae:98:c8:fe:08:0d:
d6:bd:9f:fd:77:f8:b4:9e:90:61:56:b1:d8:aa:3f:
bc:aa:54:8f:00:2e:07:4e:4b:00:aa:ff:f1:ad:08:
ac:d4:44:f4:4a:ea:de:e2:7e:a1:db:2f:81:80:cf:
26:e3:15:87:10:b4:69:83:f9:b2:d3:e9:d4:b9:90:
15:a9:33:ad:80:36:64:77:b6:64:6a:d5:d5:e1:65:
0e:b4:66:cf:45:e2:13:9f:84:4a:84:10:c4:e9:fd:
df:40:5e:55:ef:22:e9:40:33:e6:0f:a6:f3:71:bc:
a0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E6:E1:3C:FD:42:64:30:A7:E4:C9:BC:E1:DE:4B:7E:AD:84:DE:AF
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/LebhPP1CZDCn5Mm84d5Lfq2E3q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.226.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:6e:21:e2:09:a0:60:5d:6b:24:53:03:c3:db:45:fc:3e:b3:
42:85:fe:d2:b7:ea:09:bf:38:6b:6d:48:bf:d7:0d:f5:7b:99:
9e:9a:e0:4b:b2:04:c8:78:61:b1:68:fc:28:1e:88:f8:37:33:
3b:86:4f:3c:18:76:af:5a:c6:c7:4b:11:31:85:4d:76:00:9f:
bb:e9:9f:ca:9c:19:57:2d:b5:6a:30:61:6f:4b:5c:6a:aa:3d:
a5:42:f6:3a:ee:2a:95:2a:dd:c7:4d:3b:93:c0:6d:5c:0d:cc:
a8:f7:00:38:67:b8:19:ff:60:1f:d4:e8:7d:8d:f2:46:81:84:
1e:0f:b3:ff:eb:2e:2b:50:2c:04:58:ff:17:e7:86:ce:4b:ec:
0f:79:37:af:81:1c:a5:2d:e3:54:11:60:b9:45:30:93:1c:ab:
82:47:15:d1:d0:bf:49:d7:32:dc:0f:ed:2d:84:72:93:27:a0:
e0:44:a1:e4:90:0d:b9:3b:97:64:79:43:53:93:41:d3:19:77:
0b:ed:c8:b1:2f:ff:17:6f:24:7b:db:0e:bc:f4:c5:ef:92:4c:
8a:b5:d3:e0:45:b7:de:5a:c7:6c:b4:36:55:87:bb:77:6d:ef:
71:d1:90:e9:dd:cb:75:fb:ee:0e:20:fc:43:51:85:09:15:bd:
7d:19:87:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 19:24:41 2024 by rpki-client on console-fra.rpki-client.org