Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/LgMZuaDr06Tqy65Si2QC13VxH7U.roa
File: LgMZuaDr06Tqy65Si2QC13VxH7U.roa (raw, json)
Hash identifier: MMSNXeTVDQ/ftcEr8wvEsDC8busV/7fU9fegrRP32cI=
Subject key identifier: 2E:03:19:B9:A0:EB:D3:A4:EA:CB:AE:52:8B:64:02:D7:75:71:1F:B5
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 01856C4A4DFB4CF0806B5A5B8FFA7F363BA0
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/LgMZuaDr06Tqy65Si2QC13VxH7U.roa
Signing time: Sun 01 Jan 2023 07:44:46 +0000
ROA not before: Sun 01 Jan 2023 07:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204013
IP address blocks: 94.126.50.0/24 maxlen: 24
94.126.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:4d:fb:4c:f0:80:6b:5a:5b:8f:fa:7f:36:3b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Jan 1 07:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e0319b9a0ebd3a4eacbae528b6402d775711fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fe:3a:ab:f8:2a:e4:cb:7e:23:a6:a9:92:8e:
71:71:ec:52:09:f2:a8:df:86:ae:6b:78:4a:ab:d9:
a5:1f:1c:18:06:65:20:29:aa:40:82:18:9d:88:df:
72:6d:80:e6:3e:30:71:40:84:cc:ce:f7:19:71:6b:
eb:8c:43:7e:a6:b9:c7:b3:98:3a:bf:e2:aa:19:a6:
37:e3:13:46:5a:2f:7a:a6:79:74:89:c7:73:ae:58:
e6:05:33:7d:e4:35:ee:42:5d:aa:06:39:87:76:5c:
0d:40:2f:8c:33:22:65:33:b4:4d:78:44:ea:31:69:
80:13:72:ec:85:78:22:ee:3a:88:0e:45:6f:27:22:
98:fe:a1:f4:db:a9:1c:31:66:46:53:97:45:38:1c:
00:09:45:49:67:a0:24:8d:84:c0:8c:fa:0f:78:0b:
b0:05:a5:5b:08:0e:d0:bf:49:5e:8a:30:fe:36:56:
8e:67:75:93:e5:c1:91:90:1e:03:c8:d9:66:b6:7d:
40:46:88:73:1b:67:7d:35:7f:4c:ef:7b:ab:91:76:
8c:59:30:f9:63:04:93:80:41:4b:b8:06:b9:63:f9:
7e:a9:23:ae:69:b0:04:d7:24:25:80:97:bd:9d:43:
f2:36:5b:bd:d4:03:71:c3:1d:e6:93:be:e1:93:d8:
dd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:03:19:B9:A0:EB:D3:A4:EA:CB:AE:52:8B:64:02:D7:75:71:1F:B5
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/LgMZuaDr06Tqy65Si2QC13VxH7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.50.0/23
Signature Algorithm: sha256WithRSAEncryption
11:a8:87:95:0a:dd:5b:79:a4:b3:14:e5:0e:51:36:f3:1c:f6:
2b:3e:2f:9c:0e:18:25:57:5c:58:91:55:90:11:3e:10:aa:83:
ca:74:19:16:59:83:b6:c8:e3:b4:04:18:53:25:86:fc:ec:0c:
e6:5c:b5:fe:e5:8e:b0:6f:1a:47:81:f0:58:0f:20:03:90:b2:
aa:76:7b:6d:a4:23:97:f9:77:4c:a5:c1:a4:6e:10:e9:f0:94:
50:e4:b7:89:60:c6:04:4f:0d:d0:97:4c:78:e2:c9:f3:f4:a3:
aa:94:ef:f1:1c:06:e5:ae:f0:49:5d:08:9b:86:fa:80:20:1e:
5b:c8:3c:21:f7:1b:84:67:6c:ba:25:f6:38:0e:69:4b:0b:fc:
f6:dd:45:75:f3:16:0b:29:18:d3:c4:f6:15:d1:5a:ed:d7:44:
ac:2a:55:aa:dd:1d:36:8d:c9:ec:31:30:7a:7d:89:eb:0c:c7:
1d:72:2f:9a:c2:f0:de:d3:e9:1c:34:13:f9:a4:21:d6:34:c7:
10:73:80:11:6b:2c:60:4d:e5:8d:75:be:a3:74:e1:55:d2:79:
ac:eb:5f:1f:2e:22:1a:ee:41:f2:b9:c2:89:b7:f2:49:08:a7:
dd:16:24:ea:85:d2:41:f4:c5:41:a3:42:a9:77:52:6a:e9:8e:
49:a0:1f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:22 2024 by rpki-client on console-fra.rpki-client.org