Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/LTERtMPRuPEfy5jfar-56zpl-r0.roa
File: LTERtMPRuPEfy5jfar-56zpl-r0.roa (raw, json)
Hash identifier: IqTlFUCbHr9bokrdj/Ye+OfoO1wc3SsrX4iqm8VonC4=
Subject key identifier: 2D:31:11:B4:C3:D1:B8:F1:1F:CB:98:DF:6A:BF:B9:EB:3A:65:FA:BD
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 01856FF033ACE4594EE674863FB9298D090C
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/LTERtMPRuPEfy5jfar-56zpl-r0.roa
Signing time: Mon 02 Jan 2023 00:44:50 +0000
ROA not before: Mon 02 Jan 2023 00:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44211
IP address blocks: 195.93.136.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:33:ac:e4:59:4e:e6:74:86:3f:b9:29:8d:09:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Jan 2 00:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d3111b4c3d1b8f11fcb98df6abfb9eb3a65fabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:74:63:02:92:e1:21:00:b1:3f:41:2b:d5:0b:
80:13:2a:65:cc:d7:32:cb:47:82:02:e5:c1:e5:a6:
c1:56:b6:b9:50:83:df:17:bd:e7:4c:23:5c:fe:48:
6e:c9:85:58:69:8e:aa:49:11:b4:62:99:46:03:f6:
04:8a:6e:ec:ce:5d:1c:9c:a9:78:ee:b2:be:5f:49:
f4:35:48:d4:d5:fa:2b:3c:91:60:7f:10:c3:78:a6:
b2:3d:e6:84:10:79:52:75:5f:38:14:4d:e8:97:7f:
c6:bd:98:fc:50:67:96:4a:f6:7c:a1:8b:e8:2c:06:
fc:7f:29:43:d5:31:40:73:33:14:70:34:c6:eb:4f:
5e:37:c6:31:01:88:a3:9c:b8:c1:94:e1:37:9f:06:
91:e1:8f:c8:0c:cc:1c:c6:22:58:10:20:ac:72:b2:
52:96:51:e7:f0:c4:1d:e0:7c:79:d4:11:d0:58:c4:
69:c8:0c:38:98:9e:39:b4:3a:c0:bc:21:7d:b4:06:
76:de:19:1b:e1:7c:5d:1a:3a:7f:96:10:7a:7f:58:
e5:7a:49:5a:f3:1b:8b:af:3d:70:8c:00:f3:a3:2d:
b6:42:82:41:c5:5d:b9:17:72:e2:40:08:e5:a7:3e:
d3:0b:d6:c1:f9:e1:c6:a6:62:21:1a:4b:6e:c8:12:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:31:11:B4:C3:D1:B8:F1:1F:CB:98:DF:6A:BF:B9:EB:3A:65:FA:BD
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/LTERtMPRuPEfy5jfar-56zpl-r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.136.0/23
Signature Algorithm: sha256WithRSAEncryption
45:16:6c:7e:24:05:44:df:9b:a7:2b:d7:fb:52:c0:1c:30:d5:
4e:ee:ad:31:0b:33:b1:bf:cc:1c:ba:56:76:8f:52:48:e2:98:
5b:0c:7b:f7:14:53:a6:6e:ec:ff:f9:9b:1f:94:76:86:79:ad:
95:8b:1e:35:3c:b2:cc:aa:66:2e:da:c3:d2:c0:5c:7a:2d:63:
b6:ad:7a:b0:6a:06:c0:d2:04:80:6b:ab:7a:13:f0:06:9b:88:
78:38:dc:9c:41:01:a1:8d:0b:3a:9e:69:8b:09:b7:f4:ad:f2:
91:dd:d3:c0:7f:c6:2f:bb:8f:ee:c0:51:64:2b:18:7e:2e:b4:
8c:2b:4f:ab:d0:41:af:e0:0b:c3:52:a6:48:69:83:b2:76:3a:
6c:13:4e:fb:ea:a9:86:38:b5:8d:b3:64:94:69:c0:54:06:65:
c2:ab:f2:7e:3f:ef:d6:fa:46:5f:ef:c0:8a:82:7d:9e:26:78:
2d:70:4f:a9:18:16:e3:6a:95:3f:e9:9a:51:53:a2:62:8f:b3:
11:bc:d4:21:ba:55:2c:9e:37:4a:1f:82:d2:40:86:33:fd:0e:
f9:af:47:ca:ea:d3:6b:16:09:d1:e0:74:22:2f:6f:a1:c3:dc:
9f:7e:f5:28:4c:dc:f2:c7:e8:99:5e:bb:20:d6:e8:76:45:e3:
b4:a6:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:16 2024 by rpki-client on console-fra.rpki-client.org