Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/LHl96cQf4K-k3YC6lbme3F2W0dM.roa
File: LHl96cQf4K-k3YC6lbme3F2W0dM.roa (raw, json)
Hash identifier: sMQ1b83gIWkm0lcl5eIXQChD63BlJb6nxrxU1r//KWM=
Subject key identifier: 2C:79:7D:E9:C4:1F:E0:AF:A4:DD:80:BA:95:B9:9E:DC:5D:96:D1:D3
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018CCFE25EC6292AD6C8F486C8AA5FE75930
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/LHl96cQf4K-k3YC6lbme3F2W0dM.roa
Signing time: Wed 03 Jan 2024 15:12:48 +0000
ROA not before: Wed 03 Jan 2024 15:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21106
IP address blocks: 82.206.0.0/21 maxlen: 24
82.206.8.0/21 maxlen: 24
82.206.16.0/21 maxlen: 24
82.206.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 09:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:e2:5e:c6:29:2a:d6:c8:f4:86:c8:aa:5f:e7:59:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 3 15:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c797de9c41fe0afa4dd80ba95b99edc5d96d1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:22:36:28:ca:f1:54:45:c4:00:76:4c:dc:
df:ed:d0:0e:e3:0a:68:99:14:99:b2:03:52:9a:28:
1a:39:9f:b9:93:8b:89:24:12:15:2d:06:1a:dd:d6:
5c:fb:23:5b:ff:ea:04:be:d8:27:a4:68:72:46:3c:
e1:85:7a:35:fb:d0:29:e0:3c:ae:81:f3:30:eb:c8:
e4:64:4a:58:87:c2:a0:f2:c8:34:53:0d:0f:20:6e:
5b:c4:3e:7d:e6:c3:87:60:c8:3f:cc:29:80:25:02:
35:6d:c1:69:9e:9b:1b:02:43:2c:27:67:a5:ac:7b:
a0:35:de:91:bc:07:95:fe:8d:3e:04:71:ab:b5:ab:
06:21:e3:f9:ec:ca:c1:9e:f9:17:d8:6d:d7:c5:5c:
96:a8:c0:90:16:0a:8e:8e:77:d6:99:53:89:5f:fa:
dc:5a:5d:2a:3a:7e:32:fe:7a:c3:ea:5a:0e:8e:20:
bf:c6:7c:60:b1:4b:d9:c2:7a:96:74:ca:6f:13:55:
16:50:fc:0e:a1:6c:80:f3:b0:d4:bd:72:d2:17:42:
4c:d2:eb:3f:6e:12:2c:86:c1:c8:99:fa:9b:df:15:
59:f4:54:84:fc:5a:6e:7a:b5:20:ad:52:3f:2e:42:
8e:57:3b:9e:8d:16:3a:37:c3:60:91:9c:47:06:15:
85:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:79:7D:E9:C4:1F:E0:AF:A4:DD:80:BA:95:B9:9E:DC:5D:96:D1:D3
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/LHl96cQf4K-k3YC6lbme3F2W0dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.0.0-82.206.23.255
Signature Algorithm: sha256WithRSAEncryption
2c:c1:dd:74:87:8d:57:16:3a:c4:7f:e9:79:ca:2d:5e:f2:eb:
af:d3:ca:8b:c1:7a:30:ea:03:01:92:a2:27:2f:30:b9:20:81:
bd:4d:ca:e7:df:17:82:85:1d:7c:4a:3d:08:5b:29:00:8d:fc:
51:6e:a8:26:16:e5:0c:14:9c:15:58:34:7e:cd:29:59:0e:40:
c8:07:4b:d5:3a:a1:4e:45:36:e3:ee:8a:6e:d4:43:66:50:1f:
58:a5:28:b8:be:61:71:4d:70:ca:e0:72:1c:dd:66:4e:0c:ec:
21:1a:a7:34:c6:3f:c2:36:95:f7:e6:69:d6:8f:b4:a6:84:fa:
96:ee:9f:24:fc:c2:cc:98:49:2d:d0:8c:3d:65:8d:73:b1:49:
57:4a:84:6b:1c:90:90:d1:bd:a2:cb:97:0c:3b:94:93:a1:a1:
16:0a:56:30:19:ec:05:5d:ee:f9:46:c0:53:55:10:3d:08:11:
63:aa:74:f4:6f:dc:97:29:88:e5:e7:bd:70:46:fd:c2:67:a2:
18:e8:93:39:3d:cb:1e:42:95:bf:bb:a8:f9:5a:9f:b3:32:12:
df:49:34:38:22:e9:f0:8e:5e:e8:7a:34:b2:2e:9e:ae:37:ac:
f1:fc:d9:6b:d6:5a:b7:57:53:57:06:99:39:39:88:e3:9a:34:
2c:40:8e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 14:55:22 2024 by rpki-client on console-ams.rpki-client.org