Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/LJnK_d-pnqf6gdQqXakIXec39Go.roa
File: LJnK_d-pnqf6gdQqXakIXec39Go.roa (raw, json)
Hash identifier: O2z6fmVLusYpbU6iEjsAhCtSKQo5L9LHf0+u+oAR1F8=
Subject key identifier: 2C:99:CA:FD:DF:A9:9E:A7:FA:81:D4:2A:5D:A9:08:5D:E7:37:F4:6A
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 0185E8B1A1467290C1B1EB5E727EAF5119EF
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/LJnK_d-pnqf6gdQqXakIXec39Go.roa
Signing time: Wed 25 Jan 2023 11:30:33 +0000
ROA not before: Wed 25 Jan 2023 11:30:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13628
IP address blocks: 217.79.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:b1:a1:46:72:90:c1:b1:eb:5e:72:7e:af:51:19:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 25 11:30:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c99cafddfa99ea7fa81d42a5da9085de737f46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e7:f4:dc:98:00:70:ff:78:73:39:dd:a0:47:
dd:95:74:1d:71:68:c2:af:8c:99:8a:52:a9:1b:2d:
43:29:91:d9:1c:2b:5b:7e:b0:fa:85:0f:51:a0:d2:
ba:b4:1d:f4:a9:16:3a:a7:88:2e:ba:ce:3d:04:55:
73:ea:46:dc:c6:d1:50:81:9b:3c:00:50:e9:cd:fa:
b0:93:7e:47:a9:da:21:c3:64:29:15:c4:2c:76:1a:
0b:77:4c:31:6f:e7:a7:9d:d5:38:89:5f:e8:4d:fc:
69:d5:35:27:21:be:fe:4d:4b:5b:c6:d9:a5:25:6b:
30:e2:d5:b4:03:41:57:2b:39:e5:a1:dd:04:e5:3a:
58:8c:94:85:4d:63:0e:8d:a6:43:1c:e8:03:36:55:
97:b8:67:e9:bd:36:98:01:b5:f5:e0:7e:16:60:df:
14:5e:22:a5:1c:f2:e5:6c:72:36:8f:77:67:48:55:
d2:ec:45:19:d0:27:5a:75:87:26:d5:1c:87:26:11:
25:41:43:90:bd:88:7f:f7:b0:a8:21:58:37:5d:91:
fa:54:67:74:2f:49:dc:23:8b:62:40:86:72:dd:3a:
0e:ec:f9:75:35:dc:70:07:ea:f3:0d:56:4d:f7:e4:
fe:92:50:cc:fa:38:fc:0b:1c:64:94:ae:e2:aa:a4:
f5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:99:CA:FD:DF:A9:9E:A7:FA:81:D4:2A:5D:A9:08:5D:E7:37:F4:6A
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/LJnK_d-pnqf6gdQqXakIXec39Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:65:61:05:65:17:19:ef:b5:fb:93:d7:ae:4f:f8:db:fc:9a:
4b:f9:ce:68:c3:4a:ff:e5:93:cd:cb:1f:17:23:43:61:77:39:
35:ca:31:ff:25:80:28:38:25:d5:85:0d:fc:07:e0:6a:59:2f:
57:7c:ab:53:48:95:20:af:25:28:78:9c:2d:86:33:45:66:02:
41:db:5b:10:16:63:a1:1a:61:03:d0:7d:08:d2:99:b7:a8:0b:
1f:0d:9a:eb:5e:09:45:38:b5:b6:e0:79:f6:8e:74:b3:a9:5a:
53:a3:25:0a:45:dc:cf:ff:1b:d6:0f:3d:6b:d4:31:75:58:43:
0a:74:cd:81:d1:b7:11:b9:f1:3c:6d:5b:b1:a8:07:0a:9b:8b:
ae:23:23:38:d6:43:ea:ac:b1:cb:52:01:70:88:a4:f0:78:82:
5a:da:ca:17:b1:7a:73:86:a1:3f:ad:57:70:ab:33:59:19:91:
13:14:2c:57:7d:20:9d:f4:a4:bd:35:94:7a:93:3f:61:78:bc:
ec:d3:35:c1:89:79:37:d7:65:0e:3f:d4:d0:f0:c8:a8:1c:c1:
c3:92:c9:36:d9:74:e7:48:36:01:0c:91:38:77:b8:26:2d:0a:
3f:e4:fa:2c:47:b5:87:ba:08:69:4b:50:a7:1c:2b:ef:5b:c5:
c4:de:64:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:26 2024 by rpki-client on console-fra.rpki-client.org