Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Lnm4oIeJYdVcCsn0eh55qbMZvDU.roa
File: Lnm4oIeJYdVcCsn0eh55qbMZvDU.roa (raw, json)
Hash identifier: H+BtNnMJQbOcZV5Ffq7iqemN7nEfHwu1NQMHQ7PmKfc=
Subject key identifier: 2E:79:B8:A0:87:89:61:D5:5C:0A:C9:F4:7A:1E:79:A9:B3:19:BC:35
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0185DDFE4C591B122DA64FA954BBFD25D0B8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Lnm4oIeJYdVcCsn0eh55qbMZvDU.roa
Signing time: Mon 23 Jan 2023 09:38:28 +0000
ROA not before: Mon 23 Jan 2023 09:38:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.126.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Apr 2023 15:40:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:dd:fe:4c:59:1b:12:2d:a6:4f:a9:54:bb:fd:25:d0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 23 09:38:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e79b8a0878961d55c0ac9f47a1e79a9b319bc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:75:67:19:89:45:ef:d6:66:29:69:26:53:8a:
0c:86:ab:dd:40:0c:57:3f:bc:0d:cd:98:17:83:23:
64:ee:e9:02:52:15:99:ed:90:9f:96:41:91:23:2b:
a4:eb:b7:bf:65:d7:f9:d1:b8:4f:23:b5:16:4a:0b:
29:2d:d1:1f:36:d1:7c:ec:38:87:41:f5:4b:db:f3:
04:1d:ff:66:3c:b4:3c:63:17:41:1a:4a:40:3a:bd:
79:a9:10:31:5d:3e:cd:2a:be:53:41:c7:a3:17:62:
56:50:e8:3e:6f:06:e7:3f:fa:e1:19:8f:d7:af:3b:
2c:56:a1:6d:0e:83:a1:2d:2c:40:87:04:ca:3c:42:
21:9f:59:d9:cc:ab:c5:56:73:be:46:ee:e3:75:56:
50:27:39:b1:1c:97:7c:91:09:62:1c:89:2e:b2:af:
50:cf:e8:ad:7b:15:0d:50:c6:c9:4c:4b:02:ec:71:
34:39:74:55:b5:cf:ab:fc:09:81:88:be:c6:3e:32:
1c:0a:04:57:40:7f:3a:d4:8d:d1:7c:0c:98:d7:65:
c9:1c:dc:4c:ae:f2:1a:43:4f:8e:0d:a1:d9:ee:d7:
cd:5e:34:96:01:4e:27:ac:1d:a0:5c:4d:d2:4b:a8:
6c:ac:c3:b1:5c:d2:06:93:d1:5c:7a:f2:ae:af:ed:
04:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:79:B8:A0:87:89:61:D5:5C:0A:C9:F4:7A:1E:79:A9:B3:19:BC:35
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Lnm4oIeJYdVcCsn0eh55qbMZvDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.80.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:09:d9:49:e1:1c:f8:dc:42:fe:79:5b:02:71:79:cb:05:06:
6f:f8:ce:a9:7d:51:71:36:2f:3e:50:9e:04:24:c9:83:23:a5:
55:31:dd:73:5e:7e:6b:ae:e4:94:16:30:6e:71:6f:50:70:53:
4a:1d:ef:5d:da:0b:0b:37:02:66:e5:f5:80:51:b7:88:1f:c5:
46:9c:2f:e2:86:5f:eb:f5:fa:73:9e:f6:b7:26:de:75:98:50:
f3:ba:0c:a2:f4:2d:77:8d:9d:c4:33:02:e4:07:a6:89:63:ee:
47:62:f4:63:a9:de:0c:6d:6a:09:90:5e:87:2d:d9:ab:9a:b3:
4a:2c:13:17:70:0f:d0:67:b1:a8:f6:ac:2f:16:29:75:d0:a9:
82:33:e6:0b:32:b2:33:03:c8:94:97:7c:87:27:75:a6:04:75:
2e:31:41:d8:49:4f:9a:53:1c:58:5d:82:7f:37:b3:1f:88:78:
c0:70:93:e9:1f:60:2b:95:d9:ba:7a:20:63:f7:60:00:8f:f8:
f0:c4:5e:8d:f8:1d:b7:0b:9d:fa:61:07:64:4d:9d:3f:dd:7c:
b5:53:00:93:68:d1:09:db:2b:cf:c9:60:bc:a4:25:ca:2a:04:
40:4e:c5:48:8f:68:80:c3:1c:5d:b1:1b:f2:68:95:df:9a:18:
6f:62:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org