Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/lL9HylvqWTOPfI3YHGNDdLWmfJM.roa
File: lL9HylvqWTOPfI3YHGNDdLWmfJM.roa (raw, json)
Hash identifier: iduuGnJToh94MsHxU1A0qXwO+iiF94ajPa5JPgT2FUE=
Subject key identifier: 94:BF:47:CA:5B:EA:59:33:8F:7C:8D:D8:1C:63:43:74:B5:A6:7C:93
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01901C475282B2B0BF3DB328EA313FF1BCE0
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/lL9HylvqWTOPfI3YHGNDdLWmfJM.roa
Signing time: Sat 15 Jun 2024 14:22:34 +0000
ROA not before: Sat 15 Jun 2024 14:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 91.186.194.0/23 maxlen: 23
91.186.216.0/23 maxlen: 24
94.241.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 05 Jul 2024 09:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:47:52:82:b2:b0:bf:3d:b3:28:ea:31:3f:f1:bc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jun 15 14:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94bf47ca5bea59338f7c8dd81c634374b5a67c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:d6:52:8f:a1:71:f8:ae:ae:e6:08:1a:7c:
90:9a:25:c5:c2:0e:4f:9d:26:3f:c3:41:8b:22:fe:
54:50:64:6b:1a:7a:69:57:74:af:87:6f:04:12:12:
f3:90:bc:f5:4d:1d:fe:3f:bd:94:2d:63:db:a8:16:
6e:83:0c:7d:a0:c8:35:e2:33:09:4c:40:90:fb:af:
5d:d0:af:1f:8c:84:65:01:8f:d8:f8:74:c7:e4:22:
a2:0c:69:c6:1f:52:2d:a7:3d:36:83:d9:b6:cc:4b:
1c:4d:d1:7e:d2:9d:4d:14:27:af:41:93:d7:8c:63:
30:62:61:55:67:d9:95:a1:9b:a2:fe:94:11:d4:ae:
c2:03:94:84:14:11:70:e3:f3:5d:e0:fe:ff:29:a8:
5a:42:76:0c:8c:31:a7:6f:5c:cb:f9:8b:49:69:58:
61:8b:40:03:9e:82:d0:95:1a:a8:cd:ee:a9:b7:c6:
4d:22:c5:c8:70:56:21:03:1b:65:25:87:88:b2:ba:
86:e6:68:48:db:8b:15:c8:c7:9a:e1:f0:d0:4b:84:
b3:8e:ad:48:66:78:4d:c1:dd:bd:22:28:fb:08:72:
5a:90:d7:cc:46:75:1c:d2:0e:14:08:1c:21:c0:54:
d6:65:4f:25:3f:89:a7:db:58:e7:e5:ab:9a:d9:bb:
6d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BF:47:CA:5B:EA:59:33:8F:7C:8D:D8:1C:63:43:74:B5:A6:7C:93
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/lL9HylvqWTOPfI3YHGNDdLWmfJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.194.0/23
91.186.216.0/23
94.241.160.0/23
Signature Algorithm: sha256WithRSAEncryption
52:9f:5c:88:c7:0b:98:f5:fe:ed:3d:85:7d:6f:bc:d3:16:52:
4f:67:01:52:67:ae:fd:fc:5c:94:9a:a7:dc:5d:67:52:ee:69:
c6:a5:9f:a5:9e:d6:2c:00:44:64:d3:f9:bb:5b:c0:be:d6:ad:
59:ad:72:63:f0:6d:12:28:2d:35:f1:6e:1a:18:09:9b:59:e7:
91:81:9f:ea:64:e7:c0:f5:08:96:4b:08:4f:5d:b3:bc:5d:ae:
fe:66:18:f9:6b:af:0d:63:0c:d3:d3:1b:96:4c:ff:1d:6d:e6:
ed:ac:a9:f3:a2:6b:f3:a0:49:d8:bf:ec:c6:fa:fc:57:2b:d3:
d1:27:4f:f3:22:15:0c:ff:63:7c:c6:fd:1f:0c:b4:2e:f6:09:
70:56:2e:9b:9b:35:e9:66:ba:41:1c:d5:df:de:6c:5a:8d:4f:
e5:93:be:77:ce:22:2d:64:e5:9c:66:0e:06:bd:65:d5:7d:77:
85:d1:1c:54:46:4c:22:97:0a:2f:1d:4c:14:ce:3d:08:11:42:
05:6d:19:02:44:87:89:2c:79:94:fb:88:db:6e:3e:2b:a3:12:
85:56:2f:53:1c:a9:fb:9f:93:2f:62:19:d2:34:cc:8e:5c:17:
69:c2:c8:ff:3d:fc:4a:b6:a8:86:68:02:e1:69:ad:38:59:df:
ad:7a:10:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 11:54:20 2024 by rpki-client on console-fra.rpki-client.org