Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LzLSH0kN0JHmBd0IUt3LaKpaxu4.roa
File: LzLSH0kN0JHmBd0IUt3LaKpaxu4.roa (raw, json)
Hash identifier: /j6K02cMrkx+b3kwxudsNQ6XIVP1JTBxD/ktsGNNFAY=
Subject key identifier: 2F:32:D2:1F:49:0D:D0:91:E6:05:DD:08:52:DD:CB:68:AA:5A:C6:EE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018A9904BBD798030F8FCDC20C214570FEBE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LzLSH0kN0JHmBd0IUt3LaKpaxu4.roa
Signing time: Fri 15 Sep 2023 13:25:38 +0000
ROA not before: Fri 15 Sep 2023 13:25:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211826
IP address blocks: 176.223.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Oct 2023 08:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:99:04:bb:d7:98:03:0f:8f:cd:c2:0c:21:45:70:fe:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 15 13:25:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f32d21f490dd091e605dd0852ddcb68aa5ac6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:04:5a:32:f3:f2:d4:02:d0:35:34:c6:74:
a4:a9:c4:bb:8e:3f:53:c1:b7:e9:90:2c:2c:14:27:
90:3a:64:f5:31:26:95:8b:7b:c3:41:da:26:f6:08:
2d:ce:d4:90:bb:8b:ff:85:6d:59:4a:76:83:e9:53:
1b:5a:c1:c5:8c:c4:44:9d:d4:14:0d:47:2b:d7:8a:
ac:30:c8:61:68:d1:2f:2a:95:ed:1d:4e:a1:29:f5:
b3:17:1e:3c:fb:66:cf:4d:10:e4:b7:62:a0:15:76:
b7:02:c7:30:98:0a:35:2e:c0:42:66:29:1b:d6:5c:
d9:99:c8:10:bf:b4:0d:9d:25:77:09:64:1d:09:b7:
2e:8b:d3:62:a4:9a:17:bb:f0:37:37:9d:9e:ad:bd:
54:fb:2e:13:76:fa:0f:d2:da:d9:b7:13:64:f5:e2:
a1:e8:8e:c8:ec:8a:fc:9b:63:e2:5d:68:a1:71:1a:
08:ec:25:5d:21:74:86:86:1d:cf:20:9f:f5:fc:ca:
6e:e4:f0:56:cd:09:3c:00:48:ee:46:00:a9:fe:87:
22:6e:82:a6:5d:08:e8:3c:4b:af:c6:40:f5:01:c1:
f1:36:21:03:0c:aa:fc:12:76:a8:9c:55:5c:81:05:
53:a4:e8:82:bc:8a:79:07:31:48:3a:7b:bd:d1:23:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:32:D2:1F:49:0D:D0:91:E6:05:DD:08:52:DD:CB:68:AA:5A:C6:EE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LzLSH0kN0JHmBd0IUt3LaKpaxu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.223.188.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:41:cd:62:4b:78:10:af:9f:44:b6:40:4d:e9:e9:2d:0c:e6:
05:f2:69:d6:04:44:97:a1:cc:19:22:ee:56:2f:c8:07:19:7c:
fb:1a:41:cb:e0:5f:b8:49:af:b9:a2:e3:c8:89:37:b1:c3:2f:
75:73:5a:42:a8:18:84:a3:b4:bb:98:c0:96:39:7b:ba:3f:82:
7a:67:b5:e1:59:1c:1e:a0:c2:b4:41:58:3c:5e:19:ce:b5:a4:
ae:18:87:ae:52:c4:fe:5f:88:bf:81:34:2d:96:6c:4d:e4:d9:
3d:7a:28:88:97:cd:3a:40:e4:ec:57:db:50:d5:80:60:5b:08:
70:12:7e:0c:57:af:7a:39:01:11:c6:31:61:44:a0:3b:7c:07:
fe:0e:f3:05:05:5c:07:08:1b:af:4f:cf:4c:a7:de:a7:1c:7b:
c4:96:3a:32:7b:4a:c7:95:52:1a:6c:82:9f:f5:3b:13:2d:17:
a2:90:2c:14:c8:fc:c1:6c:47:06:32:3d:71:01:24:b8:d2:33:
4e:a4:09:06:60:cd:1a:69:be:2c:9e:fb:2b:14:03:72:d9:c7:
50:f6:c3:bf:e0:14:2b:78:c4:19:4f:5b:f3:19:01:67:34:dd:
59:20:e1:e7:bf:57:76:fb:33:84:12:89:0a:b9:78:65:c7:1d:
76:7a:90:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org