Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/i-LKks6rMrZ0GFtS7_iwIJht5PY.roa
File: i-LKks6rMrZ0GFtS7_iwIJht5PY.roa (raw, json)
Hash identifier: IuHgzj9zf3td1YKqWwAF7SGp9jDsjnUZ9CJ2pBpOOg8=
Subject key identifier: 8B:E2:CA:92:CE:AB:32:B6:74:18:5B:52:EF:F8:B0:20:98:6D:E4:F6
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 0188D1B86B269846A165FC6CEDCA73BF4804
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/i-LKks6rMrZ0GFtS7_iwIJht5PY.roa
Signing time: Mon 19 Jun 2023 03:35:04 +0000
ROA not before: Mon 19 Jun 2023 03:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.50.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Jun 2023 07:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d1:b8:6b:26:98:46:a1:65:fc:6c:ed:ca:73:bf:48:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Jun 19 03:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8be2ca92ceab32b674185b52eff8b020986de4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:62:41:b5:94:ba:18:55:99:a3:04:6a:1a:
15:b7:8e:6f:63:09:b5:30:f3:d6:2d:09:c3:ca:de:
ef:06:a7:be:43:3e:e1:4b:02:c5:1d:1c:a9:ef:17:
f4:85:90:59:32:13:53:25:67:be:2b:46:b8:00:dd:
02:59:85:67:d3:c6:4b:19:cd:af:9b:f8:71:5a:bb:
37:a3:b3:e3:12:8c:b9:3d:88:db:eb:63:0c:2f:85:
53:81:cd:d4:9d:54:f3:fe:4a:d3:04:0d:c4:f3:af:
76:ec:fc:44:d3:1b:1c:c3:9e:92:58:2d:12:51:10:
16:8a:ec:06:a4:10:a4:24:3f:5e:69:db:61:9c:a6:
54:95:5a:70:b8:8e:28:38:f5:34:7a:e5:c3:36:0d:
b3:fe:51:07:a8:2e:be:05:16:0e:17:50:4a:9f:c7:
a5:38:71:5e:4a:10:2f:69:d4:3c:fb:98:4b:19:db:
16:2c:b8:f2:7f:20:f5:5b:06:a2:07:73:8e:e2:92:
e1:74:62:d0:ee:28:77:87:14:56:85:eb:c3:37:a5:
f0:72:a1:df:d7:c0:91:f4:54:33:9c:b5:0d:60:37:
cb:7d:66:68:0f:30:7e:6c:6f:be:fc:84:f8:9f:75:
40:6f:ee:8e:de:78:8a:56:69:1e:92:31:bd:f3:bc:
fa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E2:CA:92:CE:AB:32:B6:74:18:5B:52:EF:F8:B0:20:98:6D:E4:F6
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/i-LKks6rMrZ0GFtS7_iwIJht5PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9e:9b:2e:fb:b5:1e:41:7b:a6:98:58:23:a1:8d:94:cd:1b:
5e:f5:1c:0d:29:fe:47:d0:39:69:23:a3:06:d1:f3:66:c3:14:
64:e2:cb:4d:58:53:d4:c2:0c:97:ee:16:65:9d:ec:e6:de:d8:
87:ca:c3:b5:d9:c1:3d:58:89:9d:67:b8:25:27:10:74:bd:55:
0e:1d:09:d3:e5:4d:6a:65:f8:c8:f1:06:5f:fc:bb:87:af:4f:
0d:f7:18:f2:0e:6b:7c:b7:c6:59:a7:4e:88:9e:c1:91:1e:83:
cf:08:54:f7:2f:4a:cf:b0:ec:6f:5c:a1:03:ea:0a:ff:f0:9e:
67:6b:b3:31:78:dc:2c:7e:be:34:6b:af:fc:67:05:7e:c9:f2:
71:9a:f8:a8:89:cc:ac:2b:fd:0c:e6:a9:5f:52:0f:44:df:4c:
62:71:e1:09:48:f7:66:1f:fe:9e:86:26:36:7f:6e:f3:47:67:
7b:e5:b0:4f:07:cf:5d:ec:cf:50:a5:60:4c:08:22:2a:72:9c:
ad:02:d1:a7:68:44:7d:85:a9:c2:bf:51:b7:7a:b9:a8:8c:18:
47:f8:46:2d:f1:ba:3d:95:12:09:9b:01:9a:98:a7:3d:66:04:
50:6f:a7:3c:a3:1c:ec:84:ec:86:b6:b6:ca:8f:35:d7:b2:af:
ed:4c:3b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:31 2024 by rpki-client on console-fra.rpki-client.org