Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/ltK1wJEGm0yziU-aHpKtWXpVEdo.roa
File: ltK1wJEGm0yziU-aHpKtWXpVEdo.roa (raw, json)
Hash identifier: w6/V2PMjw7rfV+e3uVmHX42/H8R2atTvGTedo+q7QS8=
Subject key identifier: 96:D2:B5:C0:91:06:9B:4C:B3:89:4F:9A:1E:92:AD:59:7A:55:11:DA
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 019006E7367E359D69B6981CA3B4D5ECBF1C
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/ltK1wJEGm0yziU-aHpKtWXpVEdo.roa
Signing time: Tue 11 Jun 2024 10:45:34 +0000
ROA not before: Tue 11 Jun 2024 10:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59432
IP address blocks: 185.251.80.0/24 maxlen: 24
185.251.81.0/24 maxlen: 24
194.4.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 06:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:e7:36:7e:35:9d:69:b6:98:1c:a3:b4:d5:ec:bf:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jun 11 10:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96d2b5c091069b4cb3894f9a1e92ad597a5511da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:df:a6:e6:f2:48:ed:1a:b4:3b:e1:34:9d:
ac:8d:c1:ab:d5:24:98:50:e7:66:9e:7a:37:0a:0f:
28:9a:aa:7f:ab:85:c9:73:99:1e:7e:64:db:a0:f0:
be:bf:39:d0:bc:b4:31:cc:72:24:92:b4:32:98:22:
6a:41:d2:8c:63:c9:05:97:a6:46:20:5a:72:04:99:
cf:dd:e7:30:e2:73:e1:a9:cd:38:3c:01:70:ed:dd:
a0:bb:fd:49:bf:5d:2d:77:66:93:54:b8:a2:97:e6:
4c:42:98:bf:f3:23:c8:75:4e:3f:43:eb:4c:d8:0c:
32:d3:47:65:aa:f4:05:e0:69:86:dd:cb:19:e2:4e:
22:75:06:77:97:cc:b4:3b:2d:97:eb:50:87:a3:a6:
7a:ae:86:f2:23:bb:fc:8f:2f:89:4f:31:8f:47:d3:
5c:93:18:53:af:ab:82:9b:37:14:ed:47:66:48:e7:
da:c8:be:28:a5:38:64:a7:ce:48:76:fe:0e:78:37:
92:b7:c9:c1:2a:9d:77:b8:51:ec:43:1b:e9:ea:69:
3b:41:1d:ba:5d:c3:38:a1:f5:ef:fd:48:b1:ab:1c:
a8:7f:79:98:ee:3c:75:4e:93:dc:68:7a:cf:83:a4:
0f:07:98:fb:30:96:cd:32:df:d9:12:b2:39:94:d4:
7f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D2:B5:C0:91:06:9B:4C:B3:89:4F:9A:1E:92:AD:59:7A:55:11:DA
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/ltK1wJEGm0yziU-aHpKtWXpVEdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.80.0/23
194.4.55.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d9:d1:77:92:4c:f9:4e:cf:60:20:f7:c6:09:46:bb:b6:90:
ee:5d:fe:9f:e6:5c:56:50:6f:d3:ca:d8:90:76:2b:26:c1:94:
a8:31:8b:00:e9:7e:75:57:59:b4:65:c4:7d:10:d2:65:9d:9e:
d5:79:7a:47:06:6a:80:43:b8:7d:b0:3a:b7:2b:27:a1:8a:aa:
c8:d8:53:c4:9a:29:b7:7f:29:18:3a:3f:e7:55:89:f7:a6:d3:
37:df:92:f6:f4:48:49:56:fc:b9:34:52:57:13:80:c2:08:ce:
ab:0d:bd:a3:e8:83:b6:68:73:8b:96:12:9c:cd:2e:d7:ca:3f:
78:54:3d:16:23:ef:54:3b:f3:2d:36:b9:89:62:16:ec:41:e8:
84:5f:53:3a:6f:51:9c:60:63:bc:49:e7:d7:7a:63:ce:1d:e4:
fc:91:5c:0f:97:cc:8e:56:48:41:6b:d5:32:5a:b6:b8:06:b6:
42:83:d3:9c:3d:d6:ec:9d:07:89:6d:11:a2:0e:7d:4d:f5:c3:
0c:9a:0a:22:5a:d4:d4:6e:77:68:e2:7a:03:61:71:06:3a:4d:
ae:05:c7:2c:69:86:5a:0d:ca:25:90:72:29:75:1b:1d:2b:aa:
85:2d:f9:28:18:16:d5:bd:f9:dd:53:f2:61:5b:8e:f9:72:67:
d6:13:81:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 09:11:35 2024 by rpki-client on console-fra.rpki-client.org