Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/LVuVzJJ0TuV6WOOTarwbbliibqA.roa
File: LVuVzJJ0TuV6WOOTarwbbliibqA.roa (raw, json)
Hash identifier: ZSsK6tmOUvfZ5+IF589RumKLZ2Vf6J46Kwe4RhCtOUw=
Subject key identifier: 2D:5B:95:CC:92:74:4E:E5:7A:58:E3:93:6A:BC:1B:6E:58:A2:6E:A0
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AEFC0F8052F4900A4F3C32A7CB186
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/LVuVzJJ0TuV6WOOTarwbbliibqA.roa
Signing time: Sun 01 Jan 2023 11:15:11 +0000
ROA not before: Sun 01 Jan 2023 11:15:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197467
IP address blocks: 82.179.48.0/22 maxlen: 22
2001:b08:19::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:ef:c0:f8:05:2f:49:00:a4:f3:c3:2a:7c:b1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d5b95cc92744ee57a58e3936abc1b6e58a26ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:cd:ad:9b:a0:7e:40:15:62:c6:de:a7:f4:
8a:59:3f:a5:f6:cd:56:72:c4:12:14:9b:1a:7d:ca:
89:80:88:36:bd:aa:86:08:90:8b:97:e0:e7:2f:b6:
43:b5:5e:64:da:77:ee:4f:b3:c0:a3:ee:3f:ba:33:
71:a8:85:c0:2c:9d:af:78:41:be:82:e4:a1:8f:06:
b0:ca:40:b6:40:33:d2:2b:cb:4b:09:f5:a5:43:ef:
b2:c1:85:14:30:a3:d5:c9:1c:f2:cc:31:c9:a5:3a:
8b:a4:5c:7d:23:f7:dd:de:3d:99:76:e8:4b:cf:3c:
0b:f6:b8:26:e5:b2:aa:67:01:02:f2:70:b5:ce:e2:
49:77:da:05:61:bf:ed:e3:b7:8c:78:ba:ad:75:30:
9a:93:7c:7b:c3:a4:a9:2e:a1:09:51:d3:85:ca:f1:
c5:cd:90:96:26:4e:4a:70:e4:00:5d:5b:30:f1:5d:
d3:63:63:ef:62:14:16:59:40:ef:4a:e4:c1:dd:ca:
96:66:c2:e8:ae:14:13:af:1c:ed:94:54:bc:02:5f:
34:76:0b:d7:13:39:47:36:54:1a:ea:09:68:49:ea:
03:3b:63:18:17:b7:26:e8:83:6b:2e:cc:9c:c4:0e:
7d:f7:89:75:1c:1f:92:bf:47:80:2e:67:e5:b7:3c:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5B:95:CC:92:74:4E:E5:7A:58:E3:93:6A:BC:1B:6E:58:A2:6E:A0
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/LVuVzJJ0TuV6WOOTarwbbliibqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.48.0/22
IPv6:
2001:b08:19::/48
Signature Algorithm: sha256WithRSAEncryption
55:02:99:39:0f:62:53:8d:41:dd:c6:d2:1a:81:28:80:8e:0d:
3a:9f:55:56:cf:00:24:c4:d1:25:cf:8a:3d:ef:6c:a4:39:2b:
34:1a:dc:2a:8d:39:b8:6a:55:1a:1e:b3:d2:68:a9:24:ba:ba:
99:06:27:c9:ab:66:15:45:69:41:43:83:21:0d:07:9d:ff:5b:
08:8d:a3:f6:97:8f:60:27:f1:bf:60:bc:ba:47:62:c3:69:8c:
98:f8:44:d1:61:25:1b:34:d7:82:88:2c:62:f6:98:32:1c:1e:
41:f6:65:aa:a8:b5:a3:5e:b0:3e:ef:e3:5e:2b:48:25:e7:06:
d9:06:5b:ca:7d:11:02:a4:12:16:fa:f4:74:1f:c4:f4:45:b4:
1b:50:23:31:ec:c9:1b:3b:b7:ca:54:6e:f6:98:d9:cf:5e:4a:
ee:12:b2:af:4d:f1:4e:b6:05:2c:77:dc:a2:cc:d3:6b:df:cf:
f2:6a:cf:c1:43:d0:02:59:e6:b7:2d:e4:2c:1d:b1:91:2a:01:
3f:61:d3:94:3a:5b:67:9f:35:82:15:2c:88:ef:be:51:04:4c:
19:85:63:1e:4a:ff:ab:a8:35:a6:55:2d:83:de:93:04:38:60:
d7:9f:d9:75:b5:4d:f2:e7:57:7b:ee:56:e4:d9:80:a0:a7:f3:
80:52:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org