Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/LBtoJIJe_q2yPklDJM3LUzdbj1M.roa
File: LBtoJIJe_q2yPklDJM3LUzdbj1M.roa (raw, json)
Hash identifier: JagCN5Etht8ZtQSQeZQ/nZ/svLXRSPZhPTS5YIm3Vd0=
Subject key identifier: 2C:1B:68:24:82:5E:FE:AD:B2:3E:49:43:24:CD:CB:53:37:5B:8F:53
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 01856F4B721CF369CBD679908E3505FA6B41
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/LBtoJIJe_q2yPklDJM3LUzdbj1M.roa
Signing time: Sun 01 Jan 2023 21:44:53 +0000
ROA not before: Sun 01 Jan 2023 21:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12859
IP address blocks: 82.150.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:72:1c:f3:69:cb:d6:79:90:8e:35:05:fa:6b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 1 21:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c1b6824825efeadb23e494324cdcb53375b8f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:df:91:9a:03:61:f0:75:b9:ac:25:c1:48:3a:
3f:ba:4c:cc:44:24:28:97:38:14:56:32:3e:47:e0:
8a:48:e4:01:e4:2d:6d:d7:2b:53:1c:41:fc:7e:44:
1e:be:87:56:00:c6:eb:f7:82:b8:eb:ff:67:30:a2:
24:d7:dd:a1:eb:18:f2:94:39:c2:dd:15:cd:a6:28:
8e:fb:57:4c:c9:4d:b4:f6:bc:19:98:8e:24:06:57:
29:6b:8d:60:4b:fc:a0:1e:75:98:9c:a8:39:7a:2e:
a5:48:6e:93:87:6d:f4:2a:a1:56:4e:55:ad:9c:36:
4a:b2:f3:92:1f:d3:52:3a:ac:97:a2:99:50:c0:70:
50:ec:00:93:85:77:81:35:fc:a4:54:d3:ba:3e:44:
ff:76:b4:66:fb:8b:83:62:28:a2:e5:61:20:ad:05:
80:4b:8d:be:29:e2:8a:d9:35:b9:35:af:d3:e4:72:
9a:a5:33:00:75:1b:48:97:01:ec:b3:09:a2:50:26:
88:c1:51:10:a9:79:a4:67:1a:51:8b:82:7f:d4:e7:
86:d2:73:0d:93:cd:02:b6:9b:35:70:4c:47:2e:cf:
63:22:83:54:9b:c7:00:e7:38:cd:d8:a7:fe:7c:35:
34:1b:6d:62:04:4e:35:c3:81:c1:ec:ce:ff:51:47:
3f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1B:68:24:82:5E:FE:AD:B2:3E:49:43:24:CD:CB:53:37:5B:8F:53
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/LBtoJIJe_q2yPklDJM3LUzdbj1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.137.0/24
Signature Algorithm: sha256WithRSAEncryption
01:2f:99:9e:eb:94:bf:0d:cd:d1:10:82:f4:79:20:5f:5d:b4:
f5:ad:27:41:0e:c2:8c:89:5c:b1:a4:0c:60:96:d1:94:e1:f1:
5f:a1:18:bf:80:e9:b0:3d:df:e7:41:3b:7d:bb:7e:0b:af:0c:
4e:c3:42:0d:de:40:cc:63:a0:6b:85:9a:8f:68:49:79:cf:f7:
14:57:a9:91:6a:34:1d:01:5c:c4:15:60:12:62:64:d2:d6:85:
b0:ac:5c:8b:2b:86:46:47:a8:a9:e0:f3:38:10:c9:e7:50:15:
a6:01:f1:c7:31:4c:73:10:23:46:f3:a5:c4:dd:e4:49:01:08:
e4:58:82:a0:ad:2b:ad:f6:9a:76:cc:a0:bc:90:f6:8d:ac:28:
95:9c:39:4f:89:5d:64:96:1e:61:43:d2:c6:64:e6:48:98:01:
28:f9:ef:57:05:7c:bf:d5:9f:f0:9f:7d:bd:80:d8:c1:82:b9:
ff:0a:19:7b:fd:20:a5:48:f0:0c:c7:b0:41:55:44:36:e0:6c:
24:1e:cb:93:68:f1:f8:a0:5b:7e:cf:8b:75:f0:8c:d3:55:ab:
9c:43:1e:3b:ed:d0:13:52:ba:da:aa:dc:c8:57:8d:19:39:42:
db:fa:68:24:40:e9:7e:68:45:ef:39:5a:82:d7:d1:b9:5a:f7:
a2:45:d4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:00 2024 by rpki-client on console-fra.rpki-client.org