Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/LLZhfmikWSGYGsgKTkEohb6Ains.roa
File: LLZhfmikWSGYGsgKTkEohb6Ains.roa (raw, json)
Hash identifier: yXXcEa0ZWVtpkTE8G8vqNp7+HbtE9dstDHbMr3vNJCg=
Subject key identifier: 2C:B6:61:7E:68:A4:59:21:98:1A:C8:0A:4E:41:28:85:BE:80:8A:7B
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01856C780F4927A9B442CA6779214E87121E
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/LLZhfmikWSGYGsgKTkEohb6Ains.roa
Signing time: Sun 01 Jan 2023 08:34:45 +0000
ROA not before: Sun 01 Jan 2023 08:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59584
IP address blocks: 92.63.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:0f:49:27:a9:b4:42:ca:67:79:21:4e:87:12:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 1 08:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cb6617e68a45921981ac80a4e412885be808a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:4d:71:66:e1:0e:63:eb:a3:93:5f:77:5d:
ca:f8:ee:b3:11:45:5b:14:21:89:7c:2b:e9:61:26:
04:ac:7f:22:a2:bd:f4:2a:06:8f:7e:f3:fb:d9:21:
19:95:d2:2e:df:eb:50:1f:70:fd:fc:26:07:2b:11:
f4:9f:d9:6f:1b:26:81:be:2e:29:a8:29:ee:2c:c3:
2b:c5:11:f8:06:a1:b4:2c:71:de:f2:61:76:42:03:
0f:a1:55:8a:ad:b3:2f:fb:45:7f:d9:1e:49:9c:ed:
7c:13:97:2f:45:dd:3f:ce:dc:54:c5:d1:4c:db:96:
4b:72:fa:49:df:ea:98:a0:17:6a:c8:df:d5:8c:d0:
d3:ba:46:ac:95:a2:ef:cb:3e:e7:f8:eb:df:2f:c1:
8d:a8:fd:d9:55:e5:30:99:ef:55:85:77:ab:92:35:
64:05:10:de:f2:24:23:0c:65:bd:84:73:9b:e8:7a:
9d:93:8b:e0:5c:92:3f:2b:a9:64:84:7c:bc:bd:4b:
79:5e:ef:f3:8f:46:87:95:a1:6e:25:7a:d2:d2:b3:
d4:09:8d:0e:3c:8a:53:f0:51:bb:39:f6:27:73:2b:
6f:10:0a:59:6c:83:79:52:ed:7e:d6:3a:e9:e0:f2:
72:1d:fa:21:c5:7d:63:de:0b:42:00:ae:d5:0d:6a:
e6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B6:61:7E:68:A4:59:21:98:1A:C8:0A:4E:41:28:85:BE:80:8A:7B
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/LLZhfmikWSGYGsgKTkEohb6Ains.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.200.0/24
Signature Algorithm: sha256WithRSAEncryption
82:46:81:66:9d:c1:5b:21:5c:d9:ab:3b:6d:1f:58:ac:ea:87:
5d:b4:a2:bb:6b:13:8b:e3:c7:da:52:d8:70:58:d9:e3:aa:09:
76:17:f4:0e:b4:cb:4f:a6:69:42:bf:8b:3a:77:f4:80:aa:ff:
b1:3c:2d:ad:7e:4a:64:33:89:15:42:6c:98:88:da:61:d4:64:
65:5b:49:e9:8a:1b:7f:76:db:d0:de:30:b9:97:9a:0d:2c:d8:
89:65:56:28:9e:e1:a7:9a:b6:04:80:1a:fa:93:32:62:97:5a:
1d:c3:ed:ff:39:b1:87:30:83:80:75:5f:d1:b8:0f:20:5a:bf:
78:13:6d:1c:44:a1:f6:5d:5c:e3:58:ef:0d:90:02:6f:80:68:
d9:94:85:82:07:01:70:7e:54:ef:42:bf:74:19:e2:e7:6c:e6:
d8:d5:cf:89:32:0f:dd:d5:49:04:73:14:1e:ca:78:05:ef:92:
29:32:da:bf:cd:fa:44:cf:5f:8d:25:97:5c:58:8f:51:aa:96:
23:46:92:69:75:f4:6f:16:c7:cf:9a:21:88:aa:a6:4d:dd:fc:
12:f6:a8:77:c7:67:c7:aa:a9:df:8b:91:5f:53:11:54:32:13:
61:08:c4:f7:3b:72:fc:91:44:01:93:59:15:95:09:99:5e:ee:
63:d2:1c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:29 2024 by rpki-client on console-ams.rpki-client.org