Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/LTeVW_vClq5bhAjiSEftcSk9480.roa
File: LTeVW_vClq5bhAjiSEftcSk9480.roa (raw, json)
Hash identifier: 7xZ2OZSCJS+bIdZ+w5oa1NYqaJijoDYREqDwA10a7Wk=
Subject key identifier: 2D:37:95:5B:FB:C2:96:AE:5B:84:08:E2:48:47:ED:71:29:3D:E3:CD
Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial: 0185712763BFA9B84E615FBFC2C26C3932A5
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/LTeVW_vClq5bhAjiSEftcSk9480.roa
Signing time: Mon 02 Jan 2023 06:24:44 +0000
ROA not before: Mon 02 Jan 2023 06:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42926
IP address blocks: 91.216.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:63:bf:a9:b8:4e:61:5f:bf:c2:c2:6c:39:32:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Validity
Not Before: Jan 2 06:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d37955bfbc296ae5b8408e24847ed71293de3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:d8:82:5a:3b:f3:90:53:76:b6:39:e1:c0:
28:78:bc:86:ee:0f:6a:28:ba:92:bf:b9:8a:1a:fe:
fd:2d:1e:d8:85:ad:38:2c:3d:6c:99:28:87:0d:3a:
96:36:6c:36:26:e3:9d:89:44:4b:d2:cf:7b:2f:b2:
7b:be:18:19:66:f8:a1:4c:04:5a:a4:5b:a7:ea:f1:
ff:d2:08:49:5a:c2:5f:2d:4f:49:c4:39:8f:47:54:
d3:67:07:8a:ae:b0:fa:5b:bc:ec:7c:a2:9e:1e:ca:
d4:22:2f:98:63:7f:a4:f6:ba:f4:36:23:49:cb:3d:
3e:42:8d:f5:54:e7:b0:d8:5b:38:7b:19:43:ba:9f:
5f:31:f3:0a:3c:fb:bc:3b:0a:69:6c:fd:b5:cf:2e:
0c:4b:5b:78:4f:89:4f:91:5c:bd:b1:4d:cb:4e:42:
77:dc:22:7c:e3:56:34:06:4f:87:ce:b4:37:c7:3c:
bb:52:96:aa:89:54:14:c5:9a:9a:76:ef:8a:22:f7:
3f:73:24:fb:68:58:a4:d7:c0:93:4b:67:0a:87:6b:
d2:4e:4b:87:7d:82:e0:3a:b3:68:e4:e0:bb:1b:55:
e9:91:24:0a:7a:f2:02:d3:c1:66:3e:01:42:dc:8a:
96:af:c1:77:5c:c1:a2:5c:7f:30:51:0f:3f:74:4b:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:37:95:5B:FB:C2:96:AE:5B:84:08:E2:48:47:ED:71:29:3D:E3:CD
X509v3 Authority Key Identifier:
keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/LTeVW_vClq5bhAjiSEftcSk9480.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.119.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a1:d1:a1:3d:f0:8d:46:49:f7:1d:02:51:62:3d:24:6f:b5:
8e:a9:1d:64:92:93:01:e6:3d:c2:4d:12:53:ce:0b:9f:0b:6f:
7d:0d:ad:3b:c7:f3:15:8a:e9:49:e4:56:1a:7e:5b:5c:15:18:
4e:73:9b:cb:18:eb:1c:e9:c6:56:15:6f:18:99:91:7f:93:57:
06:2f:5c:9b:6a:4c:09:67:c1:1c:73:bc:85:78:16:fb:0d:15:
ec:c1:e2:8f:51:1a:3f:ba:b9:4f:17:d6:76:91:64:65:35:41:
74:c1:e4:d5:7a:39:68:10:c2:db:75:3c:94:ab:c7:ae:71:ff:
f0:de:f0:c2:e6:07:c6:be:85:d4:7c:1e:fe:29:30:6d:95:6d:
e6:16:0a:8f:4f:9e:7e:d8:ac:09:da:ac:e3:ac:0f:8d:f7:aa:
96:58:5b:92:a1:ab:52:f3:c6:0f:c9:19:84:36:6b:a7:ce:1a:
10:25:60:28:38:ec:55:8b:03:cd:ae:43:c2:fe:c3:32:67:ba:
05:26:ba:5e:26:b4:c2:2c:de:19:81:d9:90:34:7b:51:f0:ab:
ff:d9:07:ec:d9:9a:5d:1f:f2:51:0d:04:db:70:e8:5c:4b:98:
86:4d:d0:2c:af:ea:b3:7a:ea:a1:17:93:b7:51:dc:c1:61:fc:
76:ae:10:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:27 2024 by rpki-client on console-fra.rpki-client.org