Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/lLwyjYcxdxuPka6cMi3vFTPwHLM.roa
File: lLwyjYcxdxuPka6cMi3vFTPwHLM.roa (raw, json)
Hash identifier: yr8rf8ZG0I20jqaK1Hi3ic5cERXH0fwO14n0j/nJHEY=
Subject key identifier: 94:BC:32:8D:87:31:77:1B:8F:91:AE:9C:32:2D:EF:15:33:F0:1C:B3
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 019150C083E458E8B1DA3829AA31D483FF65
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/lLwyjYcxdxuPka6cMi3vFTPwHLM.roa
Signing time: Wed 14 Aug 2024 11:57:59 +0000
ROA not before: Wed 14 Aug 2024 11:57:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 93.177.114.0/23 maxlen: 24
185.251.80.0/24 maxlen: 24
185.251.81.0/24 maxlen: 24
194.4.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 14:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:50:c0:83:e4:58:e8:b1:da:38:29:aa:31:d4:83:ff:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Aug 14 11:57:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94bc328d8731771b8f91ae9c322def1533f01cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:1b:d7:cd:d7:3a:e6:dc:fa:48:56:08:ef:
6d:45:48:be:e2:ac:00:c5:2b:7e:c0:18:88:78:fb:
39:c3:e3:4b:e0:96:d3:1d:3a:fa:cb:73:fb:61:94:
2f:04:b8:15:79:a6:06:45:51:91:73:b8:f6:ec:69:
ae:74:b4:d4:5c:8f:fe:71:2b:bf:ad:a0:39:47:3c:
a1:37:40:07:0c:f8:b1:b3:f5:f4:32:c8:3d:f6:c1:
00:41:aa:70:14:35:9b:de:b6:01:31:f3:72:10:ce:
e6:69:c7:6d:2b:ab:43:9b:e0:f9:8f:21:67:06:c7:
0e:ea:d4:12:6d:3a:cc:ce:eb:b7:42:bf:d4:fc:ad:
15:48:f4:96:d5:f8:cd:ea:38:2e:cc:dc:40:6b:a2:
9a:14:f6:bb:23:99:71:c1:05:8c:f5:52:3a:c5:83:
7b:8b:fc:53:34:1d:d6:2d:1e:8e:28:8b:e8:8f:aa:
eb:4e:4f:84:37:63:9c:87:79:2a:9f:6a:14:db:60:
80:3d:c9:69:6e:8e:ee:26:6a:cf:5b:5e:f0:7d:41:
75:a9:93:6d:07:76:8d:be:32:30:83:41:77:79:50:
a1:cd:97:2a:6d:30:e7:34:00:5e:44:a9:5a:14:56:
cd:e8:90:a6:05:a0:65:50:57:49:9b:eb:f5:a6:d0:
3c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BC:32:8D:87:31:77:1B:8F:91:AE:9C:32:2D:EF:15:33:F0:1C:B3
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/lLwyjYcxdxuPka6cMi3vFTPwHLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.114.0/23
185.251.80.0/23
194.4.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:95:db:d7:56:25:e3:98:7c:3e:71:1a:e7:6b:06:44:7e:c0:
70:71:09:85:d1:de:a9:1e:66:43:0e:0c:17:66:0e:16:06:47:
2c:f2:5d:0a:86:a3:86:1a:cb:a3:a0:f2:6c:20:e3:c4:0e:4e:
ba:c1:46:b8:1e:6d:85:a3:ee:7f:03:2a:c1:f5:9b:2f:3d:f6:
d8:99:55:92:24:86:13:e3:96:e7:f9:ba:b6:6f:1f:d4:03:9e:
8b:91:a9:b6:be:75:2d:40:43:83:cc:d1:07:42:8d:52:b3:de:
7d:6e:39:1b:06:be:0c:9b:73:0b:28:cf:59:69:88:bc:19:3d:
0d:45:1e:89:40:f0:0b:41:99:38:8a:99:ff:73:91:be:1d:0f:
1f:04:01:48:01:5e:c9:61:4b:31:ff:e7:2d:0d:9e:c0:96:82:
7e:c1:39:bb:ed:d0:6d:df:9d:48:b3:28:58:7a:40:90:b2:8e:
5a:db:9d:74:e2:7c:2c:80:5f:68:a1:12:2e:ae:e4:50:4b:b5:
31:db:e8:1a:4a:72:08:c3:33:a2:58:54:58:22:be:68:4c:e6:
30:96:a3:4c:8b:26:5d:8f:b7:57:ae:68:93:24:3b:1d:49:fc:
8b:4f:37:f5:0e:93:1b:c3:7d:c3:d8:d1:04:2d:10:72:23:f9:
c3:6a:74:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 19:41:06 2024 by rpki-client on console-fra.rpki-client.org