Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LkmZJYT9_2ULheieE_EOo_msDTU.roa
File: LkmZJYT9_2ULheieE_EOo_msDTU.roa (raw, json)
Hash identifier: ISv8qnEOFHWjJwcaSz0+UTIrp1cPAVK00K03OFQBk9w=
Subject key identifier: 2E:49:99:25:84:FD:FF:65:0B:85:E8:9E:13:F1:0E:A3:F9:AC:0D:35
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188582321C729983EADD602CA843BECC6C8
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LkmZJYT9_2ULheieE_EOo_msDTU.roa
Signing time: Fri 26 May 2023 12:57:57 +0000
ROA not before: Fri 26 May 2023 12:57:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 79.175.67.0/24 maxlen: 24
77.105.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Jun 2023 12:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:58:23:21:c7:29:98:3e:ad:d6:02:ca:84:3b:ec:c6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 26 12:57:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e49992584fdff650b85e89e13f10ea3f9ac0d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:fe:46:fa:20:c2:1c:01:a6:2a:f0:db:53:
13:b6:79:b0:60:16:fd:c9:c9:6c:87:b2:61:bd:18:
6f:ad:af:41:fd:9d:44:f5:ff:27:18:98:8d:41:4c:
b4:36:af:41:f1:81:00:3d:c7:f5:16:9c:d1:fd:0f:
84:30:8b:90:dc:20:90:d7:68:5a:8e:e7:2b:09:37:
85:28:83:d6:a6:af:64:fe:bd:83:01:35:03:db:1e:
ec:19:50:a2:7a:e4:7e:d7:2f:60:9f:ce:7d:e1:26:
db:e8:f3:9a:a9:ed:e4:df:fd:f2:46:7d:2d:3d:af:
84:ab:65:9a:86:e4:66:c1:6b:b2:e7:9e:2d:0d:4d:
50:a3:97:4e:de:bd:67:be:fd:38:64:1d:c9:19:3d:
ed:55:e2:77:d6:b0:e2:60:c1:d3:df:9f:24:49:b1:
f7:1c:e2:55:7f:48:88:d1:6f:9a:82:c1:06:de:7a:
be:00:60:2a:8c:b9:d0:42:c0:97:6b:ce:8b:6c:bd:
8d:ac:a3:4f:30:2b:58:46:5c:89:ed:38:91:6c:5c:
e4:a9:81:83:4e:a7:cf:2f:7b:b4:9e:2c:2e:b2:9f:
ba:27:dd:43:b0:3b:68:5b:d4:53:e5:0f:80:c2:65:
ec:fd:e2:dc:eb:a9:48:78:e6:f9:a7:54:e7:3a:a6:
4d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:49:99:25:84:FD:FF:65:0B:85:E8:9E:13:F1:0E:A3:F9:AC:0D:35
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LkmZJYT9_2ULheieE_EOo_msDTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
79.175.67.0/24
Signature Algorithm: sha256WithRSAEncryption
68:8a:e0:e0:fe:eb:73:2f:55:49:d2:0c:b1:75:bd:e3:ce:0c:
e9:9f:e6:c1:92:cd:00:f4:b1:ea:00:24:1a:05:d7:88:4a:57:
3c:30:f1:89:8d:c3:8c:ae:8a:76:69:d5:77:7f:3e:53:a1:3e:
88:2f:40:3d:19:81:32:66:a3:8a:b0:97:ca:6d:c6:e5:72:22:
c1:9c:ef:0b:5e:85:4b:3c:90:5d:6c:0d:11:2c:d4:9b:c7:f7:
08:f8:95:b8:ba:c6:8f:41:8b:b9:0f:d5:7c:b8:cf:f7:70:ff:
28:cb:3b:28:45:9c:ea:51:ad:ce:fa:00:6d:35:78:e9:4d:9b:
7c:7c:2b:1d:b3:67:11:4b:e3:f3:47:e6:82:6d:5a:f2:5c:79:
48:6a:a1:66:7e:0c:e5:31:57:8d:74:01:74:35:8e:f5:83:2c:
b9:f3:48:c4:05:3e:6d:91:00:37:13:2b:16:89:77:7c:1c:79:
64:03:34:65:a0:d9:b2:4f:c6:f6:ea:85:aa:fa:80:65:44:d5:
30:47:82:36:f8:f0:bb:50:c8:9c:47:30:9b:58:07:f5:7a:85:
4f:e7:72:eb:97:8b:d9:f0:17:2b:f0:9d:e4:e5:87:66:68:7e:
3e:10:23:04:43:95:92:59:8c:00:a1:bc:47:5e:18:cd:d8:e8:
c4:e7:eb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org