Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/L_AG6bmA5KWbsjUrujfSLxekEuM.roa
File: L_AG6bmA5KWbsjUrujfSLxekEuM.roa (raw, json)
Hash identifier: y22vb/DJXr4ZzqFlej41sy0uhv11xtl/0GBGxyEdv8c=
Subject key identifier: 2F:F0:06:E9:B9:80:E4:A5:9B:B2:35:2B:BA:37:D2:2F:17:A4:12:E3
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 0190594910747A7970291F831ABDE95D2A83
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/L_AG6bmA5KWbsjUrujfSLxekEuM.roa
Signing time: Thu 27 Jun 2024 10:41:18 +0000
ROA not before: Thu 27 Jun 2024 10:41:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208324
IP address blocks: 31.133.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jun 2024 10:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:59:49:10:74:7a:79:70:29:1f:83:1a:bd:e9:5d:2a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jun 27 10:41:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ff006e9b980e4a59bb2352bba37d22f17a412e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a9:38:97:da:62:b5:01:ea:0f:46:59:87:67:
a1:96:aa:50:15:12:82:c3:c8:be:3c:b2:90:e8:cf:
15:b4:41:c3:fa:bd:1a:37:47:75:12:bf:50:d2:0a:
bd:cf:bb:ce:85:6c:39:ea:cb:c6:3a:64:81:af:7c:
e6:e0:37:4b:4b:62:0b:33:a6:54:ec:96:8e:e7:ed:
d0:e1:e6:12:fc:39:17:50:37:97:55:a1:4c:52:50:
7c:8d:92:4c:7a:28:8f:63:81:73:48:03:49:d1:ff:
9e:7d:8e:f0:a7:39:cc:6c:29:02:08:56:3b:f6:34:
3c:27:50:d6:25:f4:a1:98:f1:36:cb:9a:fa:21:b4:
28:ba:ec:49:fb:1d:50:89:a8:f0:8d:12:a9:45:fb:
fc:dd:99:a3:9e:a6:27:0f:76:db:3e:d9:d5:18:be:
e9:68:98:be:bc:42:87:25:36:cd:2e:9f:b6:7e:6c:
aa:51:0b:72:15:d7:52:19:99:c0:1e:a4:9e:3d:5d:
cb:cc:45:46:e0:d8:49:3b:21:7f:d4:a9:a9:fe:aa:
a8:5c:d1:b5:a4:03:95:98:3c:29:6d:99:d3:02:81:
4b:8f:77:34:cb:56:f8:2c:f5:8d:d7:07:db:fe:c8:
99:80:a6:12:c5:1a:aa:6a:96:e9:53:e8:c7:ef:5e:
4a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F0:06:E9:B9:80:E4:A5:9B:B2:35:2B:BA:37:D2:2F:17:A4:12:E3
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/L_AG6bmA5KWbsjUrujfSLxekEuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0/22
Signature Algorithm: sha256WithRSAEncryption
80:af:81:37:9c:15:11:2d:5f:14:b7:3f:2d:b8:04:fb:f9:5a:
23:50:87:a3:ac:e3:57:cb:60:6c:80:7c:c2:ca:2f:74:8d:40:
9c:c3:51:f2:e6:bb:cc:ad:20:0c:6d:1a:f8:ac:53:90:12:bf:
be:61:00:11:fa:f2:08:8a:eb:c5:e3:0d:98:62:eb:37:d5:74:
39:5e:9c:52:63:15:5e:2c:13:90:a7:56:7a:55:39:3d:36:d4:
ff:30:ca:96:4b:97:d1:fe:fb:e1:ad:af:f4:ac:39:c1:f4:75:
2b:5e:24:b1:a0:45:06:53:45:cd:63:6f:a5:38:ba:ca:45:cf:
91:ee:b6:95:dd:58:59:0b:c0:f9:a6:d8:73:11:78:8d:13:59:
e4:cd:ad:cb:09:80:ae:bc:fd:25:04:4b:e8:5b:ca:2e:6c:98:
83:ed:a6:ce:7e:f4:11:83:24:d9:9d:25:a1:34:33:52:c7:2b:
34:70:c0:58:5a:66:6b:59:04:cc:4f:ec:84:16:6e:02:6e:82:
57:4e:38:97:6b:82:ab:5f:0e:0b:c0:74:26:38:3e:5c:81:a2:
87:19:cd:5b:95:db:3a:b4:3b:34:c0:5e:f6:4c:3a:e9:3e:3f:
7a:56:b7:dd:d7:79:68:fb:2a:6a:a7:69:2e:09:5c:f1:7a:06:
aa:d9:80:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 17:22:27 2024 by rpki-client on console-fra.rpki-client.org