Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/LuZ1mfuV-0bWNJBxoGaCvYXrB_8.roa
File: LuZ1mfuV-0bWNJBxoGaCvYXrB_8.roa (raw, json)
Hash identifier: BjmoytcivhfCQd+awEn225Bed32UbAuRnEWhYdZ4bEs=
Subject key identifier: 2E:E6:75:99:FB:95:FB:46:D6:34:90:71:A0:66:82:BD:85:EB:07:FF
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CCA2A3309ACAF7FEC2AAF95233D67AF1D
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/LuZ1mfuV-0bWNJBxoGaCvYXrB_8.roa
Signing time: Tue 02 Jan 2024 12:33:32 +0000
ROA not before: Tue 02 Jan 2024 12:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14445
IP address blocks: 193.176.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 15:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:33:09:ac:af:7f:ec:2a:af:95:23:3d:67:af:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ee67599fb95fb46d6349071a06682bd85eb07ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6f:5e:25:3d:a3:b3:ce:ea:31:1e:d2:9b:16:
53:f0:c8:76:87:0e:98:ff:9f:20:50:47:e8:59:70:
5c:74:13:bf:09:cc:79:44:71:c2:80:af:0b:4b:af:
fd:4d:6d:6f:9b:96:cd:fb:ed:d9:72:95:3c:c3:5b:
be:93:29:7b:06:bb:08:b5:c3:19:c7:58:e6:28:3b:
33:d6:c0:a2:03:cc:0c:71:68:37:74:fd:75:a7:a9:
81:4e:94:ad:2e:59:88:96:3b:e8:75:b8:38:bc:02:
b5:71:11:ec:ea:e2:31:b2:30:71:b8:cf:f9:74:3b:
6a:94:bc:f6:20:24:ee:95:dc:59:fa:6d:90:e5:b0:
f5:06:62:c1:b7:c3:29:84:c1:c7:7a:18:f7:24:8e:
24:b0:78:e1:a9:89:be:cd:44:6c:80:1c:ca:67:eb:
9d:6f:d8:36:03:4d:c0:21:76:ee:8f:9f:af:f3:f3:
4e:fe:71:91:2b:53:37:cf:bc:18:8f:de:29:5f:3e:
24:87:39:fb:5b:d3:7c:f5:73:c6:f7:62:ea:5f:65:
f7:97:76:b2:4a:10:a5:a6:e0:81:c0:15:18:de:5e:
3c:a7:6f:6e:7e:13:8d:94:bf:80:8b:e6:32:f2:e8:
5a:73:08:3c:61:e3:c0:a4:20:fe:1b:e1:ba:78:a0:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E6:75:99:FB:95:FB:46:D6:34:90:71:A0:66:82:BD:85:EB:07:FF
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/LuZ1mfuV-0bWNJBxoGaCvYXrB_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.96.0/24
Signature Algorithm: sha256WithRSAEncryption
52:9a:3b:4c:bf:a6:97:66:da:d7:15:99:67:5b:03:5c:63:35:
b4:28:a2:d6:98:1e:07:c0:de:3b:9a:25:ed:16:17:9c:a9:8e:
de:d1:99:cd:13:98:a7:35:0e:20:c1:90:1f:e7:7b:1f:b5:76:
71:c4:ed:e1:a8:4e:7b:3c:4f:25:01:b0:40:d1:64:f0:33:bb:
04:9c:d1:bd:fc:09:d2:6c:34:61:da:e5:71:50:69:fc:af:5c:
69:c6:f9:d7:c6:a4:13:b5:d5:52:f2:d1:ff:e3:7c:bc:ba:d6:
8e:f4:ff:51:ad:f2:4b:62:2f:3d:32:75:09:e2:7a:63:8c:ac:
4e:49:86:1c:49:bb:9f:a4:91:a2:ea:aa:8a:d6:f8:cf:89:f1:
ff:a3:0c:49:6e:28:8e:8f:f9:3c:2b:1f:85:52:71:4e:17:f1:
b7:88:86:d8:46:f0:9e:bb:d5:c6:15:ac:14:43:73:fc:db:07:
17:b7:ec:7c:87:83:b3:f2:3f:24:3b:ae:17:05:c4:79:17:86:
a8:dd:40:3c:c9:a1:63:e1:57:57:b9:c0:1a:75:66:c1:12:a5:
b7:64:74:10:8c:5d:5d:9f:3d:94:64:e7:76:95:0b:ae:aa:f6:
d9:0f:19:27:f4:1c:33:ed:29:df:01:34:a1:81:e6:5b:64:fd:
44:cf:db:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:54 2025 by rpki-client