Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/LGDJi8QvzL_u3d68uzpZhsCXays.roa
File: LGDJi8QvzL_u3d68uzpZhsCXays.roa (raw, json)
Hash identifier: /4O9ZhN3uaa1o8cNQv8gRNo2gjGScJOeRDmZwnFIeZ8=
Subject key identifier: 2C:60:C9:8B:C4:2F:CC:BF:EE:DD:DE:BC:BB:3A:59:86:C0:97:6B:2B
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0188C3C89CEEC7722AD0182C6DCE85B1B988
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/LGDJi8QvzL_u3d68uzpZhsCXays.roa
Signing time: Fri 16 Jun 2023 10:38:04 +0000
ROA not before: Fri 16 Jun 2023 10:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.105.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jun 2023 21:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:c8:9c:ee:c7:72:2a:d0:18:2c:6d:ce:85:b1:b9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jun 16 10:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c60c98bc42fccbfeedddebcbb3a5986c0976b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:20:ae:ca:a1:a5:f4:67:2d:34:23:93:ce:
4b:7a:5d:7f:b4:b1:1e:a2:02:4c:e9:bc:e2:77:1a:
33:fb:fd:c7:f2:17:d6:2e:1e:90:0d:32:d5:55:67:
dc:da:37:0e:5f:69:cd:f3:70:3f:fb:d7:df:79:89:
8c:16:b6:3f:05:61:5e:fd:43:c0:63:16:76:0d:2f:
25:f5:59:64:20:5a:33:e7:ef:b7:30:ae:25:ef:26:
bb:a6:f7:cd:a8:9c:d6:ae:84:57:f7:21:99:e7:7a:
a0:9c:2a:41:d8:18:3b:98:a0:2d:ec:01:49:2c:54:
9b:54:e1:cc:47:21:16:ce:91:50:79:29:0f:86:21:
e0:5f:0f:43:00:c2:59:04:75:92:00:7b:76:aa:b9:
bb:d4:da:70:b8:1f:a3:d2:95:de:47:12:26:43:a9:
92:eb:fb:ed:5d:e5:9c:7f:78:ef:ab:2a:24:3d:46:
1e:e0:56:39:56:35:4b:69:0b:f6:c6:76:bf:4b:02:
45:21:bc:0b:64:80:08:e5:1a:1b:19:23:4d:33:cf:
f6:84:49:15:50:00:97:70:62:11:ae:31:c0:66:f3:
65:25:eb:a4:ea:3d:fb:04:a7:3e:2f:3e:82:52:66:
57:8a:18:89:5e:56:e1:24:95:be:5e:85:1f:34:4c:
b5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:60:C9:8B:C4:2F:CC:BF:EE:DD:DE:BC:BB:3A:59:86:C0:97:6B:2B
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/LGDJi8QvzL_u3d68uzpZhsCXays.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.193.0/24
Signature Algorithm: sha256WithRSAEncryption
65:3c:aa:db:5e:ff:93:04:cf:4d:b6:2a:68:f9:8c:49:0f:78:
04:10:5a:fc:80:9b:d4:56:ed:7b:0d:21:ba:7c:d4:b4:66:7c:
8e:2f:42:dc:1d:33:6d:39:92:f5:e4:e2:b4:3b:57:72:d6:3f:
b2:1f:b4:c1:31:7a:22:af:94:ab:64:07:3e:94:2f:15:1c:37:
7d:1e:71:62:75:59:f0:c2:7b:04:2a:ba:d6:95:2f:d8:2a:e8:
19:97:47:e8:6a:59:fa:2c:ec:c5:32:cd:c4:3c:1d:7a:83:44:
0b:7f:ed:32:02:79:f7:38:b5:3a:4b:a1:4e:73:30:b0:6c:ad:
e8:68:ca:e9:45:6f:5d:16:76:82:3b:11:8d:f5:3c:ee:30:5b:
61:86:e1:91:54:7d:72:17:25:3b:12:e2:7b:48:34:51:f0:ff:
f9:30:14:2f:e6:b6:b5:75:a8:e8:93:e4:4e:e0:46:d8:78:49:
a8:97:d5:2e:59:cb:29:08:9c:2f:81:76:df:a2:54:04:46:d5:
78:e3:da:6b:ea:36:34:58:57:34:ec:c2:9d:54:e9:40:18:1b:
7a:37:58:40:01:0d:ad:8e:d4:65:88:62:24:1d:a4:95:08:ae:
c7:27:07:22:f4:db:be:c9:37:d2:a9:fd:af:0a:ea:0f:23:7f:
4c:c7:4b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org