Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/LPGuQXhQRrUUZNyj6NffVnTvJWs.roa
File: LPGuQXhQRrUUZNyj6NffVnTvJWs.roa (raw, json)
Hash identifier: RVQdVrWZNx6Wl5o0Aspbp7k0Vn4nIGge18h/v5xH2nA=
Subject key identifier: 2C:F1:AE:41:78:50:46:B5:14:64:DC:A3:E8:D7:DF:56:74:EF:25:6B
Certificate issuer: /CN=bd175e878d33b47d806f2cf3e04628220935123d
Certificate serial: 01856F2FD4A3CFEF010BA58F187A78DAF553
Authority key identifier: BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/LPGuQXhQRrUUZNyj6NffVnTvJWs.roa
Signing time: Sun 01 Jan 2023 21:14:43 +0000
ROA not before: Sun 01 Jan 2023 21:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12586
IP address blocks: 91.199.8.0/24 maxlen: 32
2001:67c:2f84::/48 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:d4:a3:cf:ef:01:0b:a5:8f:18:7a:78:da:f5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd175e878d33b47d806f2cf3e04628220935123d
Validity
Not Before: Jan 1 21:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cf1ae41785046b51464dca3e8d7df5674ef256b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:5f:5a:3f:93:44:66:ad:f1:6e:2b:d6:72:
ec:1a:2d:b2:59:d2:80:33:b4:03:cc:3c:20:74:a1:
2c:4f:eb:b4:e1:fc:49:e7:db:5b:48:70:df:fe:a2:
b4:57:ac:ff:12:96:b7:33:df:ce:3c:14:d1:3b:75:
e8:3b:ea:e1:40:7e:d0:34:aa:5b:91:b3:34:47:f4:
13:aa:fd:d2:0f:c7:84:85:02:22:83:dc:0e:85:13:
37:f3:43:62:20:18:e5:72:4d:dd:76:29:98:88:6e:
6a:69:81:4e:0a:08:ce:78:4f:67:26:e3:55:41:a4:
3c:02:c8:5c:6d:93:a4:ac:d5:21:b2:91:23:b0:4d:
d2:8f:be:a4:fc:17:c9:65:f8:56:4d:00:82:bf:ed:
35:b5:c9:f9:b7:a3:13:c1:ea:2a:85:60:bb:e6:3d:
03:9d:ef:83:1e:3a:2d:b5:4b:a7:46:90:4a:cd:1e:
df:7a:e7:17:43:2f:8b:01:49:9f:23:86:c8:16:fc:
06:88:a3:81:53:7f:06:c6:8a:a3:40:60:b0:0a:dc:
f2:54:c3:f2:91:74:ea:e5:0f:a8:f9:bd:25:dd:96:
c8:94:c0:95:d5:1b:f4:e7:58:54:83:e5:c3:4a:8b:
c3:e5:d6:54:ec:d9:75:15:69:21:69:37:81:cd:e3:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F1:AE:41:78:50:46:B5:14:64:DC:A3:E8:D7:DF:56:74:EF:25:6B
X509v3 Authority Key Identifier:
keyid:BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/LPGuQXhQRrUUZNyj6NffVnTvJWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.8.0/24
IPv6:
2001:67c:2f84::/48
Signature Algorithm: sha256WithRSAEncryption
2f:82:0a:1f:6a:d6:1c:3c:39:31:8b:27:69:3a:66:b1:83:d5:
74:e7:15:cb:6f:f6:ce:5b:d6:ad:04:7a:8a:85:33:22:d5:0f:
bf:99:6f:10:2e:2a:20:4b:0a:3c:17:06:c2:fe:46:37:32:13:
87:6d:94:70:76:fd:97:dd:44:e1:08:85:9f:ba:db:9c:4d:dc:
ea:d9:ea:fc:51:92:ce:0d:52:da:b5:52:f5:a1:c6:9a:89:29:
ca:dd:a8:cb:3a:1f:53:8a:0c:ff:97:67:b1:73:80:ab:00:e3:
93:95:f8:01:d4:4c:1f:2b:74:81:f7:6d:01:81:44:49:21:a6:
07:4d:43:9d:ef:86:9a:2a:be:8d:bb:d7:38:c6:0d:17:aa:51:
02:e6:0b:7b:5d:bd:d7:c1:a0:4d:53:b3:fb:87:83:b9:5f:66:
6c:9d:06:8b:b5:60:42:f9:b5:ee:ed:98:a3:4c:a8:e6:a1:3a:
ef:a4:10:38:f6:4c:93:55:95:56:1b:4e:a9:54:e8:ba:b0:2d:
96:4e:21:ff:7d:0f:2e:2c:0d:9f:4a:fc:01:ca:3e:2d:f1:79:
f7:7e:6e:aa:aa:8c:88:c5:6d:b1:82:31:c0:43:3c:e9:23:84:
40:63:03:d5:b8:b3:92:b7:08:61:e0:2a:05:52:95:6c:73:8f:
5c:c5:83:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:46 2024 by rpki-client on console-ams.rpki-client.org