Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/LPMItV_cxui0j1kSUeloKpbZNkI.roa
File: LPMItV_cxui0j1kSUeloKpbZNkI.roa (raw, json)
Hash identifier: jqIiIAqYTTyk5c6FtKr8vAxELqYzkj/JZaWj7qXyrL8=
Subject key identifier: 2C:F3:08:B5:5F:DC:C6:E8:B4:8F:59:12:51:E9:68:2A:96:D9:36:42
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 018CC49377063D8102B7DF6F5F256DF2208E
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/LPMItV_cxui0j1kSUeloKpbZNkI.roa
Signing time: Mon 01 Jan 2024 10:30:47 +0000
ROA not before: Mon 01 Jan 2024 10:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57126
IP address blocks: 91.230.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:77:06:3d:81:02:b7:df:6f:5f:25:6d:f2:20:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: Jan 1 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cf308b55fdcc6e8b48f591251e9682a96d93642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:29:d4:f0:06:db:f2:b3:6a:ae:35:2f:88:
a9:33:df:85:d6:2d:38:32:44:b4:bb:37:98:d0:f6:
de:22:50:28:8d:01:55:b1:0d:58:93:18:6b:44:43:
38:0f:91:32:32:7d:35:cb:ff:91:7f:41:17:87:b3:
28:b2:2f:6f:19:22:cb:03:4d:dd:39:f2:a8:78:4a:
2c:82:ec:5d:58:1f:2d:7c:47:76:3e:d2:33:35:52:
46:98:58:10:db:4f:2c:ed:e3:e4:82:3f:e3:2d:c1:
2a:34:ba:d5:cc:bf:99:34:0a:5f:1b:10:1b:8c:71:
1a:4e:ac:80:5b:27:cc:b1:aa:20:d0:d6:5d:91:b6:
78:eb:ab:d2:f8:d8:e4:cd:11:0a:33:d1:80:16:17:
1e:91:59:fc:15:7b:1e:85:43:ba:0d:43:d6:97:64:
99:30:ce:b1:4b:1b:49:5c:a7:87:6f:58:90:84:a5:
7a:1a:48:5c:46:6c:00:95:5f:f3:0d:45:4b:4f:b9:
9e:82:b9:3c:af:09:d0:2c:9c:81:d5:04:34:73:b8:
39:5d:0d:82:5c:fc:18:5e:cb:ef:93:26:46:3c:b3:
7a:49:ab:cf:0a:01:6f:20:23:2d:f7:77:91:4e:fb:
c5:60:4f:14:75:a0:cd:47:74:9e:e6:51:41:4c:35:
00:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F3:08:B5:5F:DC:C6:E8:B4:8F:59:12:51:E9:68:2A:96:D9:36:42
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/LPMItV_cxui0j1kSUeloKpbZNkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.234.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b2:91:5f:34:59:37:d4:5c:ff:b2:20:02:2e:bd:83:37:33:
2e:b8:fb:a2:f5:58:5b:ca:b0:b4:ae:be:d8:7b:9c:85:7b:b7:
51:7c:61:4c:33:13:a1:36:f9:d5:01:04:aa:5d:f0:34:59:25:
6c:4a:22:40:32:cb:57:a7:60:f1:5d:05:d5:dd:2d:fb:78:25:
02:ad:35:6b:b0:db:4e:51:b5:e6:5c:05:3d:a9:7f:7c:2e:1d:
7b:46:e7:99:71:ec:0a:53:06:77:40:42:c2:b6:17:46:9c:d3:
c5:90:70:f5:51:89:38:cd:4c:ca:2c:da:5b:a5:c2:cd:94:fd:
20:83:ee:fe:21:8f:67:b4:02:1d:40:5f:e9:ff:9b:4e:22:63:
a5:13:b5:81:73:68:c9:43:84:ab:bf:83:20:db:bc:9d:18:c7:
6f:7f:c9:63:48:7b:de:1d:95:ff:cc:ae:3c:28:f0:5c:33:0a:
4e:bb:1f:44:1d:ab:28:3f:a4:ca:6a:cb:4f:1d:30:a4:93:6a:
29:8f:2b:43:b2:95:6a:32:4a:a0:08:30:af:39:f6:0f:7d:7d:
b2:24:01:d6:c7:c5:c2:fb:9e:bf:76:be:fa:ae:9b:88:2b:cd:
10:fe:34:d0:7a:ce:6d:5f:b9:dd:7d:57:84:60:59:9e:4b:cb:
69:1e:7c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:35 2025 by rpki-client