Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/LpTqTV19NHACuVjJMyej2OJoo2U.roa
File: LpTqTV19NHACuVjJMyej2OJoo2U.roa (raw, json)
Hash identifier: IjtsCLbMj3vVpLs9oo6Nq3bbXZMIuRqIGhWDzvp6smQ=
Subject key identifier: 2E:94:EA:4D:5D:7D:34:70:02:B9:58:C9:33:27:A3:D8:E2:68:A3:65
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 018571556E22990644882ED15F49F0B42ED4
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/LpTqTV19NHACuVjJMyej2OJoo2U.roa
Signing time: Mon 02 Jan 2023 07:15:02 +0000
ROA not before: Mon 02 Jan 2023 07:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197328
IP address blocks: 178.171.110.0/23 maxlen: 23
178.171.36.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 12 Apr 2023 15:52:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:6e:22:99:06:44:88:2e:d1:5f:49:f0:b4:2e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jan 2 07:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e94ea4d5d7d347002b958c93327a3d8e268a365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:55:b1:06:31:c0:8b:80:e9:fe:b4:4b:8a:cf:
20:03:51:8d:99:7c:1b:f3:80:cf:fb:e3:12:54:c6:
7e:f1:a5:1c:c0:f8:dd:0d:45:23:a3:bb:64:ac:c3:
75:b2:2d:4d:f1:89:4b:1f:b6:f4:bc:f8:1f:cc:ab:
30:5e:b9:7d:4f:6b:a3:54:46:de:5e:da:b2:a2:ec:
ce:41:a9:7d:ad:ff:a7:c7:f5:da:8c:ee:37:7e:39:
db:3c:f8:95:54:9c:e6:3d:9b:10:a2:0c:af:2c:e5:
dd:69:e0:43:7b:78:29:b7:4e:22:7f:26:da:d0:b7:
67:e5:48:25:e7:e7:cc:5b:ff:c6:7e:3b:f9:09:cd:
3f:f3:9a:05:63:15:8e:68:f5:bf:06:48:c8:48:e1:
a3:40:b5:88:2e:2d:15:cf:27:b6:5b:64:e7:99:0f:
9e:e6:ae:41:2a:d1:a3:ec:a2:4d:f5:77:6b:c0:f9:
2a:79:61:03:0e:65:96:04:34:4a:6e:bd:c5:c2:63:
f0:cb:c6:e7:b1:aa:1d:ab:2c:9f:42:ed:85:e5:37:
8d:e4:87:53:b0:a3:80:fb:fb:e2:dd:ce:5a:cc:81:
c4:16:32:fe:57:9f:81:06:62:c8:52:54:41:4a:37:
98:22:a1:0a:0c:1b:01:03:1d:7b:9b:ef:14:f6:41:
99:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:94:EA:4D:5D:7D:34:70:02:B9:58:C9:33:27:A3:D8:E2:68:A3:65
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/LpTqTV19NHACuVjJMyej2OJoo2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.171.36.0/23
178.171.110.0/23
Signature Algorithm: sha256WithRSAEncryption
22:1e:60:16:e6:5f:bf:f5:3e:dc:ed:5e:11:31:56:c0:12:97:
a4:1d:50:9e:95:94:eb:00:21:a5:61:61:45:9b:b0:d6:4a:dc:
2b:87:0e:33:50:d2:1c:2e:63:40:bc:67:a4:b2:06:5e:e9:a8:
9f:b0:2b:20:05:27:77:cb:cf:f3:0f:2f:3c:c7:45:0e:5b:bb:
bb:eb:3c:5e:30:6c:22:6d:8c:89:ae:2b:af:32:34:11:f6:8a:
99:eb:a6:86:9e:60:01:fa:80:d9:77:79:57:d8:2a:8f:ce:36:
99:f2:9c:7f:fd:ea:8b:bd:3a:d4:a9:4d:a6:c7:32:89:d6:02:
b3:57:1f:10:01:a5:85:3e:10:91:53:b5:04:27:14:66:b2:a1:
14:d1:52:2d:7d:e7:02:07:eb:44:91:f6:0a:e7:e7:8a:69:b1:
56:d6:7d:cd:1b:ee:92:4e:a7:91:db:b8:85:f5:74:3e:73:46:
5e:53:cc:b5:9b:5e:ad:a5:03:1e:4e:ed:cd:b8:bc:63:53:a5:
34:a8:af:00:45:c8:fd:99:24:b4:c0:c7:ec:7a:be:31:53:7b:
3e:8e:29:15:f4:b7:5c:f9:d7:f0:9c:97:6f:38:ba:f0:a1:db:
3a:93:86:27:f0:24:98:45:4a:ee:3a:19:b9:16:d4:3d:c0:b7:
ed:82:1f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:39 2024 by rpki-client on console-fra.rpki-client.org