Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/LAtOOwI9WHR_vSzQ5QybJwJTA1c.roa
File: LAtOOwI9WHR_vSzQ5QybJwJTA1c.roa (raw, json)
Hash identifier: q+ss32EYZcOn3hnAQrBANE42HrN83eb4juHeJ/NCAwM=
Subject key identifier: 2C:0B:4E:3B:02:3D:58:74:7F:BD:2C:D0:E5:0C:9B:27:02:53:03:57
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0C69F36CA9395EDE9CF84D1010F22
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/LAtOOwI9WHR_vSzQ5QybJwJTA1c.roa
Signing time: Mon 02 Jan 2023 05:25:05 +0000
ROA not before: Mon 02 Jan 2023 05:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206526
IP address blocks: 82.177.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:c6:9f:36:ca:93:95:ed:e9:cf:84:d1:01:0f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c0b4e3b023d58747fbd2cd0e50c9b2702530357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8b:a6:e5:2d:1c:37:ab:d9:e1:12:f6:1a:72:
1f:25:b4:5a:58:0f:bb:6f:5f:9d:69:a8:74:17:71:
ac:4a:1b:c1:38:8e:c8:ef:03:9b:d6:37:33:9a:8a:
1b:03:5c:04:3b:df:c2:5e:6d:63:05:8a:6e:c4:b0:
2c:a1:9e:2b:b5:4b:ae:eb:4a:44:f8:60:a9:79:c2:
c7:69:87:98:70:cf:ee:35:64:b8:56:11:2c:a2:ce:
a2:9e:6d:8a:68:4f:52:8c:e6:0e:be:c4:4d:4e:26:
ea:5d:ea:32:5a:1d:4c:0f:50:1a:da:7c:27:e8:ec:
53:e6:25:3d:f7:44:a2:39:8f:21:77:18:63:b7:ed:
86:0e:d3:4b:c8:b6:aa:98:71:80:70:63:b0:67:01:
53:5c:d3:d1:12:e4:9c:00:4b:14:ed:dc:2b:9e:30:
10:96:74:7c:43:f9:a4:aa:1e:a0:a1:b9:19:6f:05:
03:63:d2:16:30:79:59:da:24:6a:94:93:fa:2f:99:
42:4d:51:ac:25:6f:b2:c5:1e:c7:fa:59:51:ad:d0:
32:14:a7:65:c9:22:4b:9c:75:55:0b:62:6d:ce:11:
44:02:b2:bc:f9:ac:33:ab:57:cc:7f:0e:19:7f:ca:
02:8e:b4:27:ee:5e:22:e6:e6:4b:af:26:13:c4:cb:
db:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0B:4E:3B:02:3D:58:74:7F:BD:2C:D0:E5:0C:9B:27:02:53:03:57
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/LAtOOwI9WHR_vSzQ5QybJwJTA1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.251.0/24
Signature Algorithm: sha256WithRSAEncryption
30:54:82:3e:67:64:20:7c:9b:43:ef:39:c4:f9:42:90:57:96:
e0:70:37:b2:2c:b2:07:b2:0c:ce:4d:53:e0:be:49:11:7a:bd:
9b:fa:70:d4:8e:b7:26:a9:04:e1:46:d5:16:39:69:67:9e:2a:
b6:04:84:86:e1:e1:6a:cc:31:f5:94:04:f6:80:3a:24:a9:ca:
74:f0:c4:76:64:a2:6a:5f:69:e8:17:e0:64:44:39:f5:22:c0:
87:17:6b:61:92:4b:33:02:92:4a:8f:db:f7:1c:b2:dd:f0:1b:
75:6f:5b:88:58:23:66:11:b9:10:16:b8:bd:0d:09:7a:ec:f5:
3b:03:0c:f1:68:fb:b4:52:39:b5:50:d3:32:2f:25:12:bc:df:
02:7f:11:8f:42:1b:f8:9d:ea:18:50:9d:e1:59:da:65:98:ca:
97:d8:25:56:2b:fa:bc:38:9f:d8:d5:d1:8c:a0:27:0c:62:d0:
70:b7:11:63:9a:23:85:a2:68:8a:7b:a9:1c:f9:e1:29:69:51:
63:59:46:6e:b4:49:54:3c:83:1b:01:e5:ab:0c:d3:bb:b7:30:
69:20:d8:46:df:bf:ba:77:2a:e2:d8:9b:8f:c6:6a:12:d6:a1:
d1:e6:2c:5d:e6:3f:e5:d4:e3:60:a8:d9:8c:53:6c:cd:60:6c:
f8:e2:92:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:20 2024 by rpki-client on console-ams.rpki-client.org