Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LaPft1uJMe3ZkMsH3XcgXpZxOHI.roa
File: LaPft1uJMe3ZkMsH3XcgXpZxOHI.roa (raw, json)
Hash identifier: Q6C3KzaG/Vj2rgHXih1lc1nYz7jc/EKyxF501Abn70w=
Subject key identifier: 2D:A3:DF:B7:5B:89:31:ED:D9:90:CB:07:DD:77:20:5E:96:71:38:72
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0186C57EE687145064EF22A13FEE33AA6CD6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LaPft1uJMe3ZkMsH3XcgXpZxOHI.roa
Signing time: Thu 09 Mar 2023 08:31:13 +0000
ROA not before: Thu 09 Mar 2023 08:31:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138997
IP address blocks: 194.124.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:7e:e6:87:14:50:64:ef:22:a1:3f:ee:33:aa:6c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 9 08:31:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2da3dfb75b8931edd990cb07dd77205e96713872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:e1:4d:11:43:ff:ee:e9:76:08:00:36:93:
91:73:d2:c9:00:16:dc:f6:07:3b:e9:c1:ab:84:70:
48:8d:e7:90:70:b9:6a:db:b9:df:b3:28:40:06:e8:
1d:97:76:56:70:da:29:d3:db:c7:d9:7c:d1:9f:dc:
9d:cd:90:94:fc:91:94:f2:0d:4b:42:89:f3:c7:d4:
43:9a:4f:81:d7:0c:27:1c:f2:72:a7:41:bb:08:bc:
fb:89:9b:cf:03:a1:3d:69:26:d4:e3:2d:0b:bc:3e:
52:f7:c2:02:0c:20:74:c2:db:6e:db:c1:ac:f8:a2:
21:f5:d8:4f:a6:50:5f:b9:75:fa:e5:9e:c7:61:69:
6c:3e:ca:6e:7b:8d:b3:d2:2d:b1:16:22:d7:7f:19:
f4:f2:d6:8b:73:e5:22:50:a9:c7:a9:f1:f6:c9:b8:
30:f1:7b:32:cf:a2:d7:a6:09:7a:1b:41:18:fe:47:
4f:3c:0d:2c:e0:1b:4c:e8:b8:b4:27:e5:14:15:6a:
f6:7f:40:26:3e:06:73:70:a1:1a:d3:43:9e:a4:66:
15:27:89:88:9d:d9:e9:a0:8b:f4:27:23:b2:ec:23:
ef:c4:73:4d:93:de:65:3b:c8:44:d1:a0:fb:84:92:
be:3c:70:14:24:09:f6:b9:23:50:8e:e7:6e:3b:be:
9d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A3:DF:B7:5B:89:31:ED:D9:90:CB:07:DD:77:20:5E:96:71:38:72
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LaPft1uJMe3ZkMsH3XcgXpZxOHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:75:b4:93:41:c8:e1:58:f8:b5:d9:68:ba:4a:64:43:1e:d1:
fe:e3:91:1f:ba:e1:50:a6:d6:f2:14:7d:ae:c0:bd:ea:74:42:
c4:96:5e:09:73:bb:3e:91:d8:ce:ea:12:e1:11:44:90:db:c2:
6f:f6:7c:51:d3:77:19:5d:ef:dd:aa:aa:6e:b0:b1:cb:81:76:
45:0a:2f:db:0a:a1:2f:2a:0c:ac:c8:1e:a1:8d:b4:31:90:15:
39:63:fe:d5:b2:be:9c:79:ea:f2:18:76:03:0e:7f:3a:0a:e3:
c5:ee:79:3e:ef:83:6f:cc:3d:df:a4:cc:ea:c5:bb:33:38:81:
42:ac:c9:d4:c4:6d:ad:fd:65:dd:d2:d5:bf:bf:5f:b4:11:35:
0c:6f:bc:f3:a8:d3:ce:21:36:b5:9a:c8:f1:06:77:a9:24:be:
bf:25:27:51:8d:23:6d:01:a4:c7:2d:07:81:05:a5:7c:b7:1f:
95:05:9f:b1:8f:fd:9b:b3:90:46:89:ee:e3:1d:ed:83:ac:57:
65:ae:c0:d4:67:f8:d1:db:7e:51:74:c7:1c:3c:77:a1:a3:31:
24:46:0e:03:c6:7f:86:c3:e8:45:54:d4:96:35:7a:49:ea:eb:
c4:e3:0f:28:8f:c4:5c:90:38:01:58:8b:7f:5a:90:33:59:9d:
fe:a6:7d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org