Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/LMnMzPqqt-B5LQogIM7lCVaW91I.roa
File: LMnMzPqqt-B5LQogIM7lCVaW91I.roa (raw, json)
Hash identifier: /OSwn11UDMed+/n2qnjzs/Tl6BjzzhFSLJe0eInDtOQ=
Subject key identifier: 2C:C9:CC:CC:FA:AA:B7:E0:79:2D:0A:20:20:CE:E5:09:56:96:F7:52
Certificate issuer: /CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Certificate serial: 018860A2D6B82519273FD153173C4E144F0F
Authority key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/LMnMzPqqt-B5LQogIM7lCVaW91I.roa
Signing time: Sun 28 May 2023 04:34:24 +0000
ROA not before: Sun 28 May 2023 04:34:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.59.8.0/24 maxlen: 24
194.59.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:60:a2:d6:b8:25:19:27:3f:d1:53:17:3c:4e:14:4f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Validity
Not Before: May 28 04:34:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cc9ccccfaaab7e0792d0a2020cee5095696f752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:a0:6d:89:6d:ba:85:1a:83:f4:10:06:26:
5f:26:ce:21:1d:da:89:4a:66:91:e0:a2:a2:e0:10:
cc:36:7a:ba:dd:13:16:0e:bc:7c:e5:37:72:9e:f5:
5d:5d:6d:68:2a:75:e1:3b:e0:31:6c:11:f2:75:b9:
76:f0:7c:ed:fb:92:4f:d8:4e:f4:37:09:e0:c2:9c:
80:cf:08:3a:77:70:bf:45:4e:0e:c1:fe:2f:46:33:
a6:ad:79:dc:21:f4:44:33:68:e5:25:44:9a:42:f3:
a7:53:5b:65:8b:76:0c:97:f0:30:6c:4f:a4:b6:b5:
ac:41:8c:e9:69:79:b0:b7:36:ed:df:61:02:ee:bc:
4d:4f:61:40:73:a4:d2:af:c1:b7:30:b3:56:2f:89:
64:dd:b1:16:c7:4a:90:94:c5:b9:6c:e1:6a:2a:2c:
a5:10:57:ae:76:1d:73:cb:8d:cd:b6:6c:ab:df:bf:
62:1d:c4:95:e1:4e:11:17:b3:86:fe:9f:81:de:d5:
aa:7a:ad:10:a3:f2:9d:79:fd:7b:4c:19:f2:f5:56:
90:1b:42:55:09:48:ca:80:06:0f:e7:78:71:8b:88:
bc:d5:a9:35:5d:1f:23:56:d0:65:2a:69:21:6d:a2:
8c:aa:3b:6d:fd:45:30:37:5e:96:f1:39:28:af:56:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C9:CC:CC:FA:AA:B7:E0:79:2D:0A:20:20:CE:E5:09:56:96:F7:52
X509v3 Authority Key Identifier:
keyid:79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/LMnMzPqqt-B5LQogIM7lCVaW91I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.6.0/24
194.59.8.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ef:ab:65:e1:25:0e:c7:18:44:0f:f1:53:ed:95:6e:57:64:
6c:e1:eb:71:40:3f:12:1e:66:d8:01:69:3d:06:15:15:f0:68:
44:b4:1c:1a:ab:1b:aa:58:96:4e:23:dc:ee:63:93:ff:bd:a9:
c3:80:7d:bb:dc:8e:dc:c0:07:d0:ba:1d:4d:0a:2b:a1:d4:94:
7a:d0:dc:05:0c:54:77:da:eb:33:ec:29:50:8e:4c:12:aa:a8:
18:82:ed:3b:1e:30:0e:21:b8:e4:2e:61:1c:dc:af:3a:d0:ae:
db:b3:f7:dc:e9:7a:f4:1f:6e:0f:e8:5f:c7:fe:ce:0f:60:a3:
f5:42:ec:7c:1b:39:f3:15:c4:46:61:e5:05:f9:75:84:bd:08:
50:f9:5f:30:62:54:54:55:ed:2d:5f:76:20:1b:8b:1e:02:a3:
83:a1:fc:73:bc:9a:61:33:67:62:56:82:b2:02:6c:92:cf:81:
24:da:31:9b:d0:f7:8c:dd:b6:32:31:c2:2a:70:aa:30:7f:56:
49:e2:e1:5c:66:23:17:53:33:ad:65:c4:e3:d6:6b:47:57:7b:
15:2a:fa:c0:28:ce:9e:fa:23:b2:c9:bf:aa:b6:c2:c4:ee:13:
c6:97:28:de:32:67:08:0a:fd:55:ef:67:7a:a2:81:c2:e9:9d:
53:e5:b2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 28 09:55:56 2023 by rpki-client on console-ams.rpki-client.org