Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/LBPJ134cfTzhn2uWHNzgMd8Yc4Y.roa
File: LBPJ134cfTzhn2uWHNzgMd8Yc4Y.roa (raw, json)
Hash identifier: vjYe3tVO9PMHGzONhCZRqBpgKmrt6oejhUKik/kcugM=
Subject key identifier: 2C:13:C9:D7:7E:1C:7D:3C:E1:9F:6B:96:1C:DC:E0:31:DF:18:73:86
Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Certificate serial: 018949B9AA335AF8A4430779F31A1F3DAF5B
Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/LBPJ134cfTzhn2uWHNzgMd8Yc4Y.roa
Signing time: Wed 12 Jul 2023 10:50:51 +0000
ROA not before: Wed 12 Jul 2023 10:50:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198392
IP address blocks: 31.217.227.0/24 maxlen: 24
31.217.230.0/24 maxlen: 24
31.217.229.0/24 maxlen: 24
31.217.228.0/24 maxlen: 24
31.217.231.0/24 maxlen: 24
31.217.226.0/24 maxlen: 24
31.217.225.0/24 maxlen: 24
31.217.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:b9:aa:33:5a:f8:a4:43:07:79:f3:1a:1f:3d:af:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Validity
Not Before: Jul 12 10:50:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c13c9d77e1c7d3ce19f6b961cdce031df187386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:92:5e:94:7d:3b:9b:c9:a7:1c:d8:47:71:40:
a9:a6:c8:eb:0a:d1:21:d7:c5:4b:93:b0:04:b2:e9:
f2:3a:9b:e8:50:a9:c5:26:1f:f1:29:f7:83:e2:5e:
1d:e4:5d:db:a6:9d:8f:fd:6e:b0:9a:d1:bc:e5:35:
8d:a3:83:18:a7:97:a3:d7:b3:c7:b5:5f:be:a5:a9:
9b:83:94:1d:ea:36:6f:e3:98:c5:06:8e:b4:2e:c1:
90:33:fd:41:27:c9:19:bf:72:32:97:8e:70:09:ad:
2f:82:84:a1:92:70:a0:d3:fa:4a:ba:b8:85:76:4b:
1c:64:57:21:27:50:d6:b1:bf:e2:05:50:88:35:2a:
14:65:1b:6f:28:9e:32:9f:44:ba:ec:e2:26:b3:bf:
85:b4:cb:c4:f6:2f:93:d3:ba:6f:82:e6:93:5e:7e:
55:fd:16:67:7d:4c:98:c9:d5:eb:d9:27:ba:1c:63:
0c:67:0f:cb:dd:c6:5a:9b:44:58:9b:b8:d6:7d:1e:
07:73:f9:62:3d:06:48:b5:6e:8c:26:5f:58:a0:59:
48:57:0e:08:fa:e6:f2:15:91:c3:20:3f:7d:12:43:
df:6f:ba:fd:57:81:c8:83:75:93:35:0d:17:46:59:
54:c8:06:63:a0:1a:23:47:f5:d6:fa:21:28:96:85:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:C9:D7:7E:1C:7D:3C:E1:9F:6B:96:1C:DC:E0:31:DF:18:73:86
X509v3 Authority Key Identifier:
keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/LBPJ134cfTzhn2uWHNzgMd8Yc4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.224.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:6e:45:b2:c9:bc:d5:b6:af:e2:25:2b:87:0d:a9:21:93:ed:
ab:75:3f:50:f4:41:5e:49:e6:ef:c4:1e:4d:1a:65:f9:ff:dd:
31:ec:a1:0f:99:1b:17:da:a8:17:3b:1a:ed:83:cd:71:0c:44:
ee:5b:01:20:90:8b:87:c8:66:22:bb:35:b4:94:d5:a1:57:77:
03:dd:78:de:24:7f:97:3c:49:c4:ce:69:8c:84:f5:ad:09:00:
5c:67:fe:15:68:43:ed:a2:65:6d:23:8e:cc:b1:3d:a1:62:30:
30:3f:a7:5d:54:8d:89:20:36:5d:32:33:61:67:8f:08:b0:02:
c2:e3:ac:83:98:c8:e2:a2:95:0b:3d:95:0d:fe:54:a0:a9:cf:
a6:de:17:bd:3c:22:3f:64:67:9d:52:1c:45:ed:d2:08:e0:99:
c7:69:e6:19:de:f6:78:5c:26:38:0c:9e:24:bd:c0:de:6e:d9:
5f:60:1c:60:ac:e7:37:1d:bb:b8:d8:c4:d6:6c:52:ef:98:15:
fc:e2:ff:cc:7c:6d:45:3d:43:16:b2:27:8f:60:2a:c1:28:fc:
ce:7b:e2:06:29:04:84:9a:e7:c8:25:16:ed:3d:6b:35:11:06:
28:0d:d9:02:08:0a:98:18:50:2b:9f:cb:9c:6d:1e:b3:ed:fa:
a5:e3:25:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:05 2024 by rpki-client on console-ams.rpki-client.org