Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/AgoI9X8tsqehWYZ2Qqdmt6sHSQ4.roa
File: AgoI9X8tsqehWYZ2Qqdmt6sHSQ4.roa (raw, json)
Hash identifier: 48fgZhKZHzna+96oYfGuH8RVga+RqnMrdXfAGuibev0=
Subject key identifier: 02:0A:08:F5:7F:2D:B2:A7:A1:59:86:76:42:A7:66:B7:AB:07:49:0E
Certificate issuer: /CN=2e94ff0301be79d81260ac66ac7362efad968a41
Certificate serial: 018570028B3B537255174F587DDF97F96840
Authority key identifier: 2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/AgoI9X8tsqehWYZ2Qqdmt6sHSQ4.roa
Signing time: Mon 02 Jan 2023 01:04:52 +0000
ROA not before: Mon 02 Jan 2023 01:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42134
IP address blocks: 194.0.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8b:3b:53:72:55:17:4f:58:7d:df:97:f9:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e94ff0301be79d81260ac66ac7362efad968a41
Validity
Not Before: Jan 2 01:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=020a08f57f2db2a7a159867642a766b7ab07490e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:52:b0:e7:a9:8e:57:3b:cb:7c:17:f3:86:
8a:64:55:fb:bb:2d:26:e7:e7:77:2f:03:00:3a:90:
b8:7b:49:a1:d3:a3:b9:d7:c5:70:cd:95:10:83:23:
85:1f:c0:b5:a3:ea:5b:df:2c:67:d6:2d:7b:5f:38:
13:e1:8b:73:27:3a:87:ca:8e:5a:1e:34:9b:f1:54:
7d:13:f1:3b:20:70:dd:67:58:82:aa:64:a0:b2:b3:
2b:41:99:f0:cd:19:78:58:1a:99:ed:83:48:11:dd:
c1:98:a0:ba:29:d3:76:be:d6:7b:8b:8d:84:e7:53:
cf:f2:af:ff:3c:c4:e7:05:a0:db:0c:da:c5:e1:6b:
ed:ba:44:f0:a2:f4:1a:3a:10:ca:34:f8:5d:d0:05:
4a:0e:b7:1e:b4:0a:1f:08:96:20:49:9f:ff:86:ed:
69:92:93:cd:9a:cb:21:9b:bc:6f:8d:c9:44:e2:e1:
a5:cd:5f:91:2c:60:5a:58:77:3f:34:71:d5:0e:06:
ce:1d:ec:ee:21:bf:f4:02:11:9a:06:f9:9c:12:d3:
e2:fb:92:1a:10:d2:ca:86:9b:da:fc:26:d1:cd:a7:
18:bb:3b:ca:9b:76:a3:20:5f:1b:47:98:b8:3f:42:
cf:4d:6d:42:fd:de:d3:a4:45:48:c3:43:c1:23:2c:
a3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0A:08:F5:7F:2D:B2:A7:A1:59:86:76:42:A7:66:B7:AB:07:49:0E
X509v3 Authority Key Identifier:
keyid:2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/AgoI9X8tsqehWYZ2Qqdmt6sHSQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.138.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:d3:dd:06:cf:fd:14:92:eb:96:51:3b:9a:c9:57:9d:fc:eb:
94:a2:ab:d8:17:40:c1:7e:0c:11:ca:a7:de:28:61:58:de:75:
67:5e:62:f9:cc:88:fb:69:d9:40:99:2d:5e:dc:f7:3a:99:d9:
45:bb:e8:9a:82:6b:9d:b9:48:ef:b6:fa:4b:f0:f4:9f:18:6b:
37:88:51:6c:cf:f9:da:b3:c0:f9:6a:59:c1:83:b5:2e:50:fa:
da:7e:64:70:6e:35:75:08:6a:94:85:43:3e:13:78:e7:e1:25:
ba:5d:85:2b:fc:01:be:aa:a5:01:5e:39:98:ab:e4:78:39:54:
e5:5b:d4:bd:b0:c5:11:a4:25:1a:4b:57:55:71:fd:c6:a5:5d:
6d:42:10:f3:4a:d9:d1:00:68:b6:ab:18:ef:0c:f6:0b:b1:8f:
47:50:39:b7:72:7f:c0:1b:e1:e6:e6:41:56:b2:41:bc:5b:25:
67:d7:4f:6c:4c:6d:30:00:a2:54:37:9e:29:4e:5f:32:7d:b1:
dd:b1:e0:99:30:a6:08:e1:73:a7:d4:51:8c:c5:96:95:f2:a6:
7b:2f:98:5f:9e:97:b3:5f:18:4d:6d:0d:c9:42:b5:51:f6:7a:
61:ae:ea:9b:66:3a:0d:c9:00:c0:35:b2:2c:97:8a:41:60:2e:
10:1a:b8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:06 2024 by rpki-client on console-ams.rpki-client.org