Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/_LljGpBCK3ODnHYfKnstKMQScSw.roa
File: _LljGpBCK3ODnHYfKnstKMQScSw.roa (raw, json)
Hash identifier: Ojf/l6nlDL7nX+ynQUoZLMcDJYptZ9F913YG2Sp83vo=
Subject key identifier: FC:B9:63:1A:90:42:2B:73:83:9C:76:1F:2A:7B:2D:28:C4:12:71:2C
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 0185704BDE3E7316F39DED9A3684C123182E
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/_LljGpBCK3ODnHYfKnstKMQScSw.roa
Signing time: Mon 02 Jan 2023 02:24:58 +0000
ROA not before: Mon 02 Jan 2023 02:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43135
IP address blocks: 91.225.55.0/24 maxlen: 24
91.225.54.0/24 maxlen: 24
91.225.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:de:3e:73:16:f3:9d:ed:9a:36:84:c1:23:18:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Jan 2 02:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcb9631a90422b73839c761f2a7b2d28c412712c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:94:ca:05:65:09:51:11:c0:8e:0a:ad:a0:
21:05:cb:b9:35:a5:82:66:9d:4d:3d:7f:3c:66:c0:
a0:20:23:d4:b3:75:60:b7:ad:f7:1c:e6:73:29:c1:
2a:f8:2f:b8:58:8d:5e:a9:63:21:a0:31:a9:42:e2:
13:b0:35:34:b1:eb:60:b8:27:4f:1a:4c:f3:9c:87:
7c:ae:5f:d9:47:ea:b7:4e:d1:29:94:26:11:e3:51:
2c:1b:54:91:08:0a:91:71:28:85:32:76:ad:c1:1d:
47:f0:c9:a1:dc:d0:38:6b:2a:7a:60:74:9e:cd:a8:
10:2f:a1:fc:ab:b3:5c:1c:48:10:4b:77:34:1e:3e:
df:75:63:4e:bd:e7:b8:d7:0f:0b:96:75:56:86:ea:
ac:7f:52:75:55:e6:d7:5b:29:0d:eb:f6:09:20:4f:
52:39:b2:cd:c4:ad:2e:85:6a:3e:83:57:54:4d:52:
a5:0d:2f:96:e4:54:cc:59:8a:42:b2:0f:6a:46:c8:
bc:cd:9a:61:fc:25:47:c9:6e:71:3e:38:b3:38:7d:
c7:31:3b:cb:d2:1b:b7:34:9a:63:8e:45:b6:66:31:
1c:7d:84:33:12:2c:4d:23:03:f2:fb:db:17:69:24:
18:6a:59:99:14:17:90:a1:9b:63:4f:f3:cf:bd:fa:
b4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B9:63:1A:90:42:2B:73:83:9C:76:1F:2A:7B:2D:28:C4:12:71:2C
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/_LljGpBCK3ODnHYfKnstKMQScSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.53.0-91.225.55.255
Signature Algorithm: sha256WithRSAEncryption
67:4c:0d:0d:cd:10:58:2a:87:d5:aa:eb:2e:06:4d:e7:a9:12:
89:8b:c0:1c:5d:7a:5e:ac:4c:80:86:67:ce:8c:f9:62:b9:a0:
5a:15:2e:8f:df:23:db:a7:f7:b2:44:68:71:bd:e8:a5:ef:91:
02:37:7a:2c:83:e9:0b:28:3f:64:4b:8c:42:1d:06:2e:69:b0:
ce:1a:16:82:66:31:c7:0f:9b:9e:a3:d4:5c:3b:60:c5:e7:67:
0b:80:1b:74:20:95:a0:45:0e:9d:3d:e7:d2:ce:35:a5:80:a4:
0a:0d:6e:5a:86:71:17:1a:1d:f2:f5:ba:6e:1c:37:3a:5e:8d:
55:b1:7f:1c:50:2e:0b:66:72:08:b3:f4:2e:9d:87:4a:6a:52:
95:cd:ce:bc:35:34:80:a4:5b:12:bd:d5:24:8a:14:03:cc:8e:
e4:fe:f6:45:64:cd:f4:b0:78:3a:d3:d6:14:33:0a:7c:9f:11:
8f:2e:43:ef:fd:68:cf:58:e6:3c:6c:ea:ba:97:c8:5a:9d:57:
f7:d0:23:16:15:4a:2c:d0:26:cc:17:2e:1c:f8:9f:c0:85:3a:
27:f5:d6:71:05:e9:31:2a:16:fd:1d:cf:9c:8e:b5:ba:7d:3b:
37:7d:76:cd:c9:08:7d:8b:15:86:59:cb:e4:87:30:1b:13:e5:
49:18:11:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:45 2024 by rpki-client on console-ams.rpki-client.org