Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/lmYqmsnmcPpyVpeff_U4xwDAMNc.roa
File: lmYqmsnmcPpyVpeff_U4xwDAMNc.roa (raw, json)
Hash identifier: ZlnbYDZ4z5N1PcDZQxYuGozAbYdTbUiBApB/ATtaiDQ=
Subject key identifier: 96:66:2A:9A:C9:E6:70:FA:72:56:97:9F:7F:F5:38:C7:00:C0:30:D7
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0185CAC100B4A412253F1E185B636D1F2875
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/lmYqmsnmcPpyVpeff_U4xwDAMNc.roa
Signing time: Thu 19 Jan 2023 15:58:44 +0000
ROA not before: Thu 19 Jan 2023 15:58:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39134
IP address blocks: 185.177.238.0/23 maxlen: 24
185.111.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Feb 2023 12:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ca:c1:00:b4:a4:12:25:3f:1e:18:5b:63:6d:1f:28:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 19 15:58:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96662a9ac9e670fa7256979f7ff538c700c030d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:75:54:75:8b:2b:51:19:96:d5:e6:2e:a9:
8f:ab:e7:ba:2b:fb:eb:71:cb:f2:ac:11:b4:75:06:
c4:93:72:c5:70:8d:94:04:af:c4:a9:c2:e8:33:76:
84:79:c7:92:be:7d:97:1d:77:b7:5d:66:6a:70:26:
40:7d:8a:45:7d:c2:0c:c0:0a:e4:88:09:6e:00:0e:
06:04:a5:73:4a:c6:8f:14:44:41:1e:54:72:a7:a3:
17:98:5d:e6:b9:ad:68:8c:bc:63:2c:4f:e6:2a:ed:
d7:68:46:8f:0d:ae:58:42:4a:54:1f:5f:66:65:09:
61:37:12:a5:41:f0:f6:d3:8d:c1:74:30:88:3b:57:
8d:78:21:96:e5:95:44:37:78:8b:ff:a9:e1:a5:cd:
98:40:1d:31:79:67:51:fa:c4:8a:c0:df:58:a5:f1:
05:44:28:31:bd:bc:b8:55:9f:a1:a6:40:32:39:c4:
2e:c7:1d:93:bd:ce:74:52:ae:b5:96:a9:4f:5a:f6:
a1:75:1c:b3:16:9e:25:db:36:f5:17:ab:cd:09:08:
28:05:b3:1f:98:1a:1e:83:fb:69:ff:82:82:11:1e:
e4:24:97:53:df:96:3d:66:93:96:76:bb:6e:a1:29:
40:37:f4:4b:13:92:df:2f:60:b6:97:2d:fe:19:8f:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:66:2A:9A:C9:E6:70:FA:72:56:97:9F:7F:F5:38:C7:00:C0:30:D7
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/lmYqmsnmcPpyVpeff_U4xwDAMNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.24.0/24
185.177.238.0/23
Signature Algorithm: sha256WithRSAEncryption
63:4b:ea:7e:b7:28:d1:02:ad:bf:13:3f:0e:a2:56:1d:fe:64:
4b:86:20:9c:31:56:05:98:7f:b7:ee:93:e7:4b:59:1c:af:8e:
e8:15:6d:5c:24:ca:9f:0e:af:4c:fe:20:95:96:a1:8a:c1:98:
a5:ed:75:0f:d3:ae:a4:ee:22:fd:26:b9:7c:be:32:6f:cc:09:
64:bd:05:11:41:3d:9b:7a:19:64:44:2a:0d:ca:ff:a9:70:57:
aa:d3:f2:e9:fc:b5:b0:16:ca:51:8a:76:cf:ab:f2:a3:ef:93:
27:d3:2e:4c:1e:ff:0f:a7:42:51:c0:65:ac:56:f8:58:4b:d6:
37:aa:26:74:30:e1:0b:62:8b:9e:31:8c:46:ea:ae:6f:30:c4:
f9:5f:b4:0f:dc:a7:bf:4b:f1:03:d7:f1:19:93:be:f4:ee:4d:
59:95:ac:c0:5c:d7:84:84:da:86:6a:bd:57:cf:f7:b8:93:16:
c6:09:70:98:9d:32:03:5c:3c:d9:50:ec:b3:c4:29:c2:bd:84:
8e:6c:b5:b3:b3:43:41:10:19:0f:dc:be:28:4c:6a:16:19:d1:
24:49:c2:7e:ec:ae:ab:b8:a3:58:78:38:e3:70:db:3e:e7:77:
91:b3:2f:cb:0c:e2:d6:f1:a6:f1:cd:96:9b:07:7c:0a:ac:2f:
da:a7:f3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org