Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Lfx8j3XbXwlxLSNjfgyncFgskSE.roa
File: Lfx8j3XbXwlxLSNjfgyncFgskSE.roa (raw, json)
Hash identifier: hS5RpT6k62DdjTfhvPMsICpNI+LITkPHzzXwtJNOu50=
Subject key identifier: 2D:FC:7C:8F:75:DB:5F:09:71:2D:23:63:7E:0C:A7:70:58:2C:91:21
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0189720DAEE047C3EE7FD3A12A566F0D2551
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Lfx8j3XbXwlxLSNjfgyncFgskSE.roa
Signing time: Thu 20 Jul 2023 06:47:26 +0000
ROA not before: Thu 20 Jul 2023 06:47:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 265919
IP address blocks: 93.119.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jul 2023 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:0d:ae:e0:47:c3:ee:7f:d3:a1:2a:56:6f:0d:25:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 20 06:47:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dfc7c8f75db5f09712d23637e0ca770582c9121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3c:98:6b:99:75:4d:30:13:4f:4f:7e:92:83:
b2:f8:ca:a4:f5:23:c7:24:3c:eb:c9:34:de:65:5c:
09:96:8f:33:d0:4b:17:e6:76:5a:0f:ec:64:9d:09:
6b:46:ab:b7:9b:ba:ca:e7:ce:9b:f2:58:fd:ad:20:
50:17:15:a9:d3:8e:3e:ea:52:b8:7c:77:9d:e4:a4:
21:73:48:6e:b0:f0:9f:c2:5a:f1:5d:cb:fb:a3:36:
35:6a:cb:f9:86:2a:40:23:e2:d8:ab:5b:73:4c:a9:
44:91:83:45:c3:e5:16:65:18:50:86:28:b7:6c:a0:
db:04:1b:26:d1:14:ea:23:d3:87:c9:ba:f6:a0:d6:
f1:8e:d4:f4:b2:f2:9d:31:a4:18:ae:fa:83:25:76:
f7:10:c0:b4:4f:8b:18:cf:ec:25:8c:ea:96:1b:b9:
f7:d7:35:cb:14:f6:b6:c0:aa:15:79:95:5b:79:6d:
e5:1a:74:b6:2d:bc:d2:2d:9b:be:4f:27:b4:3f:d3:
61:e8:8a:d3:58:6d:ef:d0:7b:68:2c:9e:e2:37:ef:
d6:19:4e:4d:97:cf:f4:6d:8b:49:1c:2c:f2:de:4d:
a9:0b:c7:50:ea:f1:10:71:ef:1a:4b:90:72:3d:51:
08:b4:a6:02:dc:01:32:27:4c:f9:c1:b1:01:eb:a9:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FC:7C:8F:75:DB:5F:09:71:2D:23:63:7E:0C:A7:70:58:2C:91:21
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Lfx8j3XbXwlxLSNjfgyncFgskSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.106.0/24
Signature Algorithm: sha256WithRSAEncryption
87:40:d7:78:e2:78:02:65:ab:71:67:70:0c:5c:e2:54:3b:12:
47:c5:f3:0a:f3:30:9a:30:b3:07:a1:26:35:51:67:79:af:ac:
c5:0e:36:3b:9b:f5:67:8e:ce:ea:9e:92:ea:fe:1e:10:0d:e3:
74:d0:ba:16:55:8b:02:73:f2:21:e7:a6:9b:78:ce:8d:c5:6e:
fc:2f:0e:b8:3b:29:75:28:73:98:b1:dc:6a:71:5a:02:d7:ad:
78:38:12:99:f0:c9:45:9d:9f:60:86:1c:c6:5f:85:a3:ce:5b:
7f:34:88:f4:99:63:76:23:a2:c8:d0:ec:be:69:2a:89:d9:52:
a7:8b:ba:b4:fa:ea:b4:9a:65:91:36:07:af:ba:a2:a6:5c:da:
1d:49:35:86:bb:85:a2:44:e2:cc:31:6d:00:d9:2f:b6:7a:d6:
58:0d:37:b7:f4:45:98:ed:e7:9d:be:eb:58:98:6d:f0:2e:19:
4c:d5:93:e9:e5:9b:d3:82:ba:a8:f9:d0:c9:43:af:32:2a:f1:
88:1a:11:ba:05:42:3e:5d:cc:c3:0f:a0:ef:ed:d4:c0:69:47:
70:af:4a:b8:c4:c2:ba:4f:73:5b:cd:ca:bf:80:23:d3:93:73:
9c:35:72:5a:1f:bb:9c:9b:36:e3:33:a8:2b:5e:8a:75:c8:fe:
ab:9b:35:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org