Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/lfkLO10VlwmubhZptTGPQcuPwG8.roa
File: lfkLO10VlwmubhZptTGPQcuPwG8.roa (raw, json)
Hash identifier: jcTPTR7bjKRMrJ8d2HRCSecgRsu5LPFiurlJtuFRlAo=
Subject key identifier: 95:F9:0B:3B:5D:15:97:09:AE:6E:16:69:B5:31:8F:41:CB:8F:C0:6F
Certificate issuer: /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Certificate serial: 018A8301DECB6050A773F48914A3096F2074
Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/lfkLO10VlwmubhZptTGPQcuPwG8.roa
Signing time: Mon 11 Sep 2023 06:50:52 +0000
ROA not before: Mon 11 Sep 2023 06:50:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48695
IP address blocks: 194.11.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:01:de:cb:60:50:a7:73:f4:89:14:a3:09:6f:20:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Validity
Not Before: Sep 11 06:50:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95f90b3b5d159709ae6e1669b5318f41cb8fc06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c8:ee:d0:21:e1:8e:c7:f4:e4:e3:1e:1e:89:
af:8d:ed:32:d9:25:60:31:3b:d0:8a:d1:eb:19:d4:
45:14:d8:56:61:fd:c6:fb:42:d1:01:c0:32:7a:e2:
11:de:27:3d:78:e7:08:3a:9c:33:3e:6e:05:0e:61:
18:73:46:e7:cc:82:28:f8:13:68:ae:d6:02:83:7f:
6e:0b:be:e9:35:21:19:51:71:2b:73:32:eb:cf:10:
81:88:f2:ba:57:49:70:9d:44:03:7d:ad:63:24:7e:
e8:5e:83:d5:e1:fa:ca:76:00:97:af:e9:56:38:e2:
ec:f3:b6:ce:c8:6f:55:a7:c3:4b:02:77:bb:28:9f:
07:03:ab:3d:15:b2:58:8c:88:3f:07:23:e8:05:be:
c3:4c:b7:7c:cb:1e:b4:9d:95:d6:e0:64:98:b5:1c:
e7:65:9c:70:43:b1:0d:7d:81:c6:4f:a7:8e:18:6c:
0d:54:76:41:ec:11:33:c3:6c:54:0b:ce:2c:e7:6e:
7f:f0:14:35:1a:0e:9a:70:42:ff:00:82:19:36:88:
2a:a1:67:50:4f:d0:66:4b:bf:a0:ff:44:1f:04:a6:
29:2e:5d:06:7c:ed:31:25:44:4e:80:3c:1a:66:63:
ed:06:16:df:6e:db:8e:4b:b6:a8:b5:13:00:db:1d:
df:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F9:0B:3B:5D:15:97:09:AE:6E:16:69:B5:31:8F:41:CB:8F:C0:6F
X509v3 Authority Key Identifier:
keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/lfkLO10VlwmubhZptTGPQcuPwG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.247.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:71:7d:f7:d6:38:ce:2c:5a:77:24:43:90:86:13:fd:02:4c:
89:fb:92:8d:57:48:33:c1:ab:8b:b8:c9:b7:05:36:9c:09:98:
11:f9:5d:db:34:a1:24:9c:9b:a2:04:2e:aa:a9:c0:f6:94:5b:
bd:68:83:e0:c0:43:69:0f:a0:33:ff:3b:f5:4e:ef:c2:0c:dc:
73:7e:4d:70:e2:7f:ad:fc:70:51:8a:d6:72:82:fa:ce:8a:95:
c0:a5:7d:15:d6:8e:57:4a:0f:57:30:91:ff:fa:ea:fd:79:2b:
90:a8:64:c5:be:1e:31:17:f6:a8:d7:08:97:c0:53:84:4d:d3:
3a:fb:89:a8:9d:46:7b:9d:25:85:79:7b:5b:25:45:97:66:31:
46:a7:2a:81:6b:19:51:9c:28:89:e9:9d:53:b5:71:df:2a:e1:
f6:00:d9:2b:e1:19:7d:76:42:c2:48:94:e2:6a:b7:9b:5e:0a:
d3:15:14:2d:44:28:04:c3:5b:25:ba:23:48:f3:0e:6c:03:0d:
21:44:09:71:ed:17:ec:9b:47:7b:d0:1b:f8:3b:3d:6c:0f:f0:
41:cd:24:97:ba:d3:93:2f:0d:ef:8b:4e:c7:70:4a:f4:5f:78:
57:a5:4e:52:7d:d3:da:2a:12:85:2e:7e:1f:de:94:e3:62:31:
28:16:c1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-fra.rpki-client.org