Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/LvOZiaZ1wscRQZkqQdgGntqIh6s.roa
File: LvOZiaZ1wscRQZkqQdgGntqIh6s.roa (raw, json)
Hash identifier: 8gPdTTHo5vz3Q70EvpvPYeDIfHQGqZP8cQyawnyFTnI=
Subject key identifier: 2E:F3:99:89:A6:75:C2:C7:11:41:99:2A:41:D8:06:9E:DA:88:87:AB
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 018BF730555E85F3351DE327CBC2CFE8792C
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/LvOZiaZ1wscRQZkqQdgGntqIh6s.roa
Signing time: Wed 22 Nov 2023 13:20:21 +0000
ROA not before: Wed 22 Nov 2023 13:20:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198022
IP address blocks: 46.38.248.0/24 maxlen: 25
37.120.180.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f7:30:55:5e:85:f3:35:1d:e3:27:cb:c2:cf:e8:79:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Nov 22 13:20:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ef39989a675c2c71141992a41d8069eda8887ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:37:36:bd:16:2d:5a:6c:f1:38:41:49:32:
3d:2e:a4:55:47:62:76:03:e6:69:77:a5:47:a8:fc:
91:f4:b2:a0:e0:a9:c8:89:9e:37:22:23:7e:2c:e7:
45:f9:af:c4:73:23:a7:6d:cb:82:4c:e4:c6:0a:bd:
c8:5d:6e:71:10:9f:fb:84:da:5d:70:a0:eb:4b:88:
54:9b:55:c6:75:fe:6f:1b:a1:9a:b7:7e:35:d4:c0:
8d:e8:47:26:80:08:d6:2b:55:f9:05:d6:37:ed:8e:
f1:f8:1e:d2:06:be:61:00:7b:82:16:24:fd:d1:ea:
68:27:f8:e2:84:d2:58:04:39:6a:f4:79:1d:a7:8f:
0d:12:30:cf:73:e4:7a:fc:fb:d7:40:2f:af:c2:3c:
df:9c:21:8b:39:63:1e:64:6f:eb:38:3a:b9:66:43:
58:43:80:2a:3a:e0:13:b0:22:3d:a7:9d:48:04:31:
a5:a7:66:b7:d7:87:cb:e4:cc:f7:d8:61:51:97:c5:
c0:f9:92:91:62:53:f9:ec:05:e2:9b:3c:eb:0e:59:
a4:31:b2:8b:d7:a2:25:c4:2b:cd:74:ca:ca:7e:3c:
77:72:78:8f:d6:20:52:65:ff:7a:a8:11:b3:5c:12:
16:21:82:dc:5b:1c:bb:23:fc:d3:5d:82:78:eb:ba:
d5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F3:99:89:A6:75:C2:C7:11:41:99:2A:41:D8:06:9E:DA:88:87:AB
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/LvOZiaZ1wscRQZkqQdgGntqIh6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.120.180.0/23
46.38.248.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c1:bd:3b:fb:ca:06:27:69:41:87:eb:14:ec:06:4e:85:ad:
13:41:b1:97:77:d4:90:e2:11:f1:88:fa:f9:4a:a0:f5:9d:a9:
c6:2a:34:fb:27:b9:a9:91:c4:5d:f6:6f:d7:da:15:a0:36:67:
fd:e8:75:97:2d:2e:82:05:26:46:c7:a2:5d:bd:7f:52:2d:9b:
43:ca:48:59:2b:89:c8:b2:1d:a3:24:44:1c:5d:04:b7:34:e0:
0d:2b:aa:ef:b4:41:a9:5d:9d:28:f9:4b:45:7d:f9:45:6a:16:
f7:61:26:e6:b6:a4:e4:f3:89:f6:8c:79:c3:2c:cb:5b:39:65:
44:86:d4:82:91:47:1d:19:a7:0e:c4:fe:8b:51:12:bf:9c:dd:
6b:c8:bd:ed:4e:98:3f:7e:ec:ab:61:2a:99:ec:a5:30:35:81:
59:7e:4e:07:45:38:a1:67:5c:94:52:2e:ea:58:12:76:c2:07:
ef:0f:59:b7:88:87:91:18:31:26:fb:07:33:6a:08:68:e1:d1:
06:51:b7:bc:14:24:95:96:d2:1f:5b:35:1b:79:53:07:05:b3:
d5:68:d9:05:64:f1:ac:20:b6:5a:a5:93:4a:5f:f6:96:b2:4b:
41:06:50:7f:ae:3a:cf:29:07:28:ac:a1:ce:91:7b:4d:82:3e:
17:5d:cd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-fra.rpki-client.org