Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/lglaLia6hlABB3bewnJpChT3mNA.roa
File: lglaLia6hlABB3bewnJpChT3mNA.roa (raw, json)
Hash identifier: 4z3lUahf4rsGiFd68ocZkyzOWWKEB5craTYmLgQ7L3Y=
Subject key identifier: 96:09:5A:2E:26:BA:86:50:01:07:76:DE:C2:72:69:0A:14:F7:98:D0
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 018AB0EE1ED8F31668105676CC0AAB6DB1EF
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/lglaLia6hlABB3bewnJpChT3mNA.roa
Signing time: Wed 20 Sep 2023 04:51:50 +0000
ROA not before: Wed 20 Sep 2023 04:51:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 91.217.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b0:ee:1e:d8:f3:16:68:10:56:76:cc:0a:ab:6d:b1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Sep 20 04:51:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96095a2e26ba8650010776dec272690a14f798d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:46:54:57:ca:b7:8b:e1:bd:4e:fd:a3:c8:
9c:35:e3:78:cb:8d:03:5e:e4:40:6f:0e:cd:22:81:
66:57:5f:d1:68:03:ef:57:53:33:a1:db:d5:85:89:
48:65:f9:e5:18:22:11:f7:fe:14:28:01:73:c1:f9:
e2:ea:b2:8f:6a:b3:9b:53:dc:68:17:87:ac:1d:31:
04:6c:d3:8f:a1:2a:68:ca:60:ba:d5:bd:38:04:a4:
09:6b:9a:8d:05:96:ff:48:d3:69:36:f3:40:a9:0d:
e6:db:cd:fb:26:3f:ae:0d:aa:cb:9c:a1:14:df:d9:
b5:b0:24:bc:8c:36:a5:84:d4:47:6a:13:23:b3:a8:
5e:9d:e8:c4:d8:81:f5:45:f8:c4:b1:8e:11:b9:c4:
f3:d3:6d:4e:4b:6e:1c:1f:69:7f:c1:c3:10:4f:50:
7e:47:f8:29:c9:7a:bb:5e:42:94:a5:bf:6a:76:ef:
d6:2f:2e:dc:01:df:50:b7:79:b1:04:9c:c3:0e:3e:
45:8c:97:47:ef:13:7d:ae:58:31:c8:a4:0b:a4:8f:
01:6e:12:ca:a0:66:44:b7:df:b4:a4:bb:a0:c0:49:
6d:30:ba:ae:6e:65:75:26:9e:17:d8:09:18:19:92:
5c:ca:bb:90:44:e6:b2:21:08:4d:d7:d3:2a:dc:2b:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:09:5A:2E:26:BA:86:50:01:07:76:DE:C2:72:69:0A:14:F7:98:D0
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/lglaLia6hlABB3bewnJpChT3mNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a3:e3:4e:bf:7f:66:42:4d:29:69:43:90:40:7e:1f:07:3d:
96:c1:59:a4:ca:eb:08:45:40:28:bb:bf:96:b3:b0:9e:da:78:
c6:8d:ea:07:7f:1c:b4:b9:eb:2f:42:ef:2d:51:68:fe:57:9d:
ea:da:09:c4:66:53:81:1c:f4:b4:b9:08:b5:9f:f2:b7:2d:7a:
30:b6:02:e0:1b:c4:6f:24:4f:d8:b5:55:03:64:60:33:48:54:
0f:ab:fd:61:d0:56:4b:d7:01:61:ee:d9:9c:b6:0c:44:22:77:
a0:b0:1e:ac:9b:9d:db:98:e4:90:c7:80:b5:c0:9a:6d:d3:33:
30:16:2a:e1:ce:59:f0:7d:54:e3:86:b4:1c:1a:e1:01:00:58:
cd:fd:61:17:93:4d:01:2c:e6:05:0f:cc:dd:7d:12:a8:09:1f:
2a:10:ca:e5:6e:13:4f:a5:f0:23:fe:a7:00:f8:c6:94:dd:81:
cd:f1:6c:22:75:d7:b6:49:c8:c4:dd:5d:8d:1a:68:2e:0b:fb:
33:ce:4e:7f:32:33:97:e4:62:78:a9:29:03:7e:c2:51:62:f7:
6d:eb:05:37:18:9e:4d:94:57:88:39:69:0b:1d:f0:05:37:cb:
5b:c9:17:f8:26:4c:2f:53:d1:f2:99:af:e3:90:44:74:1d:f1:
37:3b:62:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 18:33:02 2023 by rpki-client on console-fra.rpki-client.org