Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/LnfnSK2zHEf5rFd-wNUhRvGULfs.roa
File: LnfnSK2zHEf5rFd-wNUhRvGULfs.roa (raw, json)
Hash identifier: 4k7dLTro/tqXclH4NzFRJ+bIelWKBz7khlI+wHurFPA=
Subject key identifier: 2E:77:E7:48:AD:B3:1C:47:F9:AC:57:7E:C0:D5:21:46:F1:94:2D:FB
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01856E79090744222FB71D284EB9C089ED13
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/LnfnSK2zHEf5rFd-wNUhRvGULfs.roa
Signing time: Sun 01 Jan 2023 17:55:03 +0000
ROA not before: Sun 01 Jan 2023 17:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 176.111.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:79:09:07:44:22:2f:b7:1d:28:4e:b9:c0:89:ed:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 17:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e77e748adb31c47f9ac577ec0d52146f1942dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:a0:30:97:8c:db:46:88:c0:34:d3:3c:f7:
9f:e9:1c:02:58:ce:c1:3a:85:13:98:56:a9:6a:c1:
e6:58:02:f1:03:b4:48:67:26:0b:75:6c:de:74:56:
e2:b0:c1:f6:d3:f0:f9:66:cc:17:5f:4f:01:60:aa:
63:0b:64:5f:e9:53:e0:c5:de:ca:78:6a:fc:fb:b8:
f3:43:53:ff:a5:ce:e5:5d:84:b6:62:ea:e1:42:df:
5c:60:a0:fa:15:c3:a6:dd:34:80:9a:10:ff:24:2a:
3f:67:f2:ef:2d:e3:d5:3e:d6:d1:f2:ee:d8:e2:ba:
78:82:5c:b2:24:75:4d:a4:b7:7c:41:16:41:84:86:
ee:94:a8:ad:79:40:eb:f7:6b:e7:b5:f8:5d:1d:62:
0d:0f:51:1c:b1:1b:c5:34:8b:0a:d1:7e:1a:51:1d:
22:f0:e2:5d:cd:1a:13:ee:cc:ca:4c:ae:e9:ae:27:
d7:1f:54:39:80:cb:07:46:52:39:ad:f5:b2:4d:b0:
ee:f6:79:11:27:53:04:26:b2:c9:8d:da:ad:42:de:
db:58:8f:77:0d:02:d3:11:66:2e:06:39:a1:62:56:
9f:9c:eb:58:ec:0b:3f:f8:08:3c:96:7d:11:c1:24:
0e:44:50:8b:9f:b5:95:b1:05:1b:9d:1e:9d:d2:dc:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:77:E7:48:AD:B3:1C:47:F9:AC:57:7E:C0:D5:21:46:F1:94:2D:FB
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/LnfnSK2zHEf5rFd-wNUhRvGULfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.216.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:cb:63:9a:db:ed:74:bb:c4:ac:5b:5b:9c:44:98:2e:b6:68:
54:d9:fd:ee:ee:80:b3:69:59:6d:dd:0a:3f:b4:88:9a:0f:3c:
ce:ac:66:e5:e9:07:04:c6:8f:d7:a4:5b:a7:14:ed:2a:16:b6:
35:98:0a:a3:89:b4:70:fe:7a:76:fa:7c:09:6e:04:1c:90:55:
62:b6:ce:96:21:e4:69:f9:89:9f:9a:b0:4b:4b:a9:48:ce:77:
d0:15:bb:85:90:32:c2:fe:4c:15:eb:62:b7:29:96:83:db:b1:
93:18:6e:aa:af:58:e4:77:6e:fd:1b:92:ac:d0:74:e0:12:b9:
d4:c3:e2:55:1e:92:17:f0:ea:17:22:3e:b4:2d:0d:ca:78:d4:
6c:9e:3b:75:f9:e0:dc:ad:06:85:37:52:51:a5:7a:3d:89:91:
7a:cb:f8:09:50:f5:44:29:9a:1e:8d:5c:ef:21:4a:4d:7f:f8:
72:bf:f9:25:eb:3e:b0:eb:f9:13:6d:0a:98:ba:ea:db:e8:b3:
d8:24:0f:8b:c8:5b:34:e8:5a:16:0e:f2:f5:5d:44:6f:bf:1c:
af:93:48:ab:ac:ba:ef:9a:db:6f:1c:69:13:3e:2a:84:1d:2c:
62:92:07:40:b9:38:08:e8:d6:b5:67:29:52:cd:e8:be:dc:a8:
88:f7:20:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:12 2024 by rpki-client on console-fra.rpki-client.org