Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/lLZcUHmk0Lm47UsagtGOBr4M6_c.roa
File: lLZcUHmk0Lm47UsagtGOBr4M6_c.roa (raw, json)
Hash identifier: hRL4Op426PvEOpjnQZsZesy1gWbe21tZ9M7aqrnUtwQ=
Subject key identifier: 94:B6:5C:50:79:A4:D0:B9:B8:ED:4B:1A:82:D1:8E:06:BE:0C:EB:F7
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 0185719E7907FFEEBD730D0EFC78F906308B
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/lLZcUHmk0Lm47UsagtGOBr4M6_c.roa
Signing time: Mon 02 Jan 2023 08:34:49 +0000
ROA not before: Mon 02 Jan 2023 08:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197886
IP address blocks: 79.120.244.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:79:07:ff:ee:bd:73:0d:0e:fc:78:f9:06:30:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 2 08:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94b65c5079a4d0b9b8ed4b1a82d18e06be0cebf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:0a:ad:24:65:72:2c:7d:71:3e:cd:f2:e2:
21:dd:49:11:75:5d:c5:d6:fc:23:63:14:31:22:f0:
e6:02:6e:93:43:62:c0:c3:8c:30:45:5a:44:c3:75:
e4:b6:95:23:32:07:29:d4:09:c1:80:fc:ca:31:42:
f4:ce:81:cd:8e:b3:2e:aa:ad:43:05:d6:7f:41:a2:
9b:68:f8:a2:1c:83:39:63:ca:d8:dc:35:dc:e3:0e:
c4:b6:24:19:bc:dd:6d:1e:3e:7b:66:1c:e8:3b:67:
0d:be:27:32:c9:56:a4:2d:40:75:55:29:c1:9b:ad:
4d:e2:50:17:1f:6a:c1:86:ec:0a:fd:19:e7:21:e2:
85:5a:cb:49:4f:7a:37:6e:23:41:b4:7f:a0:9a:c3:
48:61:06:0e:d9:00:ff:e0:79:0b:af:c7:ad:ce:25:
9b:04:9f:12:f4:fb:39:98:77:de:30:c4:30:48:5f:
ad:a5:38:6c:6c:d3:c7:ff:e5:9a:75:df:91:01:71:
43:58:32:fc:8d:12:de:15:d2:ca:a0:b9:52:42:6a:
16:56:57:f1:ac:27:85:99:44:7a:79:93:48:70:9b:
fc:99:d1:43:43:40:a7:80:95:f0:8b:b1:96:43:1d:
b1:7a:61:22:e2:cc:31:5c:39:57:21:4e:8a:9f:da:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B6:5C:50:79:A4:D0:B9:B8:ED:4B:1A:82:D1:8E:06:BE:0C:EB:F7
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/lLZcUHmk0Lm47UsagtGOBr4M6_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.120.244.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:79:32:c5:40:20:d0:c6:ec:30:b3:9e:d2:14:ae:7c:59:d0:
93:38:d6:dc:5b:6f:54:39:6d:95:a0:5b:68:d6:ee:a7:86:10:
3c:35:22:fa:73:53:e6:14:b8:1b:c7:f0:cb:64:b2:35:4b:d2:
7e:3f:4b:d7:4b:9e:8b:35:0a:1c:73:28:ff:ce:38:19:fb:dc:
a1:d0:8f:ff:09:7d:42:1f:55:8d:f2:87:12:f4:b9:2e:e7:16:
90:b3:db:40:8a:14:f4:ae:d0:c2:33:7b:0e:d1:33:bb:6d:b4:
5e:8b:63:a4:cc:5b:92:29:48:e2:42:e2:7d:ea:81:ab:57:61:
cb:66:e4:2b:8f:44:1a:c3:18:48:52:f8:e6:27:d6:b8:3d:c1:
de:fa:05:74:34:92:7b:52:c3:7a:51:df:a7:19:f6:bb:1a:ba:
f5:f8:0d:12:09:bd:49:e5:43:e0:bb:4b:c6:98:e2:53:89:37:
d3:b9:b7:b4:52:5b:2c:da:95:2c:49:37:2a:f7:00:13:88:50:
10:f2:20:62:37:c8:6f:08:be:8e:26:23:7d:16:05:98:8d:87:
ae:96:43:86:27:28:59:43:8e:d7:59:3b:ef:d7:bb:1c:41:11:
0e:21:c8:9d:b5:6a:13:11:b3:e0:90:f9:d0:ff:69:93:a3:85:
38:d8:63:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:16 2024 by rpki-client on console-ams.rpki-client.org