Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/LM3N5_S_t1hODzJn9TOpqWYpp_g.roa
File: LM3N5_S_t1hODzJn9TOpqWYpp_g.roa (raw, json)
Hash identifier: GszdflyqXQonF17tVOGI+Ym/QqeilA31/B0sHOR6sj0=
Subject key identifier: 2C:CD:CD:E7:F4:BF:B7:58:4E:0F:32:67:F5:33:A9:A9:66:29:A7:F8
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018B231D29C3F7286EEB259ADAAF96AD8EE0
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/LM3N5_S_t1hODzJn9TOpqWYpp_g.roa
Signing time: Thu 12 Oct 2023 08:59:55 +0000
ROA not before: Thu 12 Oct 2023 08:59:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 92.61.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 15:42:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:1d:29:c3:f7:28:6e:eb:25:9a:da:af:96:ad:8e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Oct 12 08:59:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ccdcde7f4bfb7584e0f3267f533a9a96629a7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:6a:9b:45:2f:f1:26:1c:a6:45:1a:5a:61:
5a:47:61:8f:7c:66:6d:98:14:f1:4c:9e:e5:b7:70:
5f:c9:a6:bc:fd:50:3e:2e:7c:23:ad:08:64:50:8c:
0f:15:a1:5d:31:6f:7a:f4:e1:b1:ec:cb:7d:65:b2:
54:1a:9a:9e:3c:0c:ea:a0:73:b7:63:f9:93:51:be:
06:f5:1e:b0:39:8e:c8:07:ff:54:8c:33:50:6c:ee:
e2:38:73:93:85:65:75:81:97:82:2d:1b:14:7c:7d:
f0:58:a0:6a:0b:fb:d8:0c:a2:6f:df:d0:05:9c:5f:
c2:2e:c4:fc:60:5d:4c:a5:1f:79:c4:71:64:4e:4d:
01:2b:dc:bd:0b:c0:ca:c8:5e:32:6a:a3:00:e4:ab:
d7:45:7b:b5:9e:ce:fb:29:50:31:32:16:49:fc:62:
92:55:6d:8d:cc:66:02:73:e9:64:2d:ee:83:45:53:
85:b1:26:03:f2:61:d4:55:11:e6:fd:9d:98:73:89:
dd:cf:af:1a:6a:88:3e:cb:bd:e1:ae:58:09:0a:42:
e8:9c:8a:0e:d9:af:c6:b6:c8:38:1a:97:b3:f3:96:
46:b6:b2:be:df:64:7e:a2:d3:7a:37:ef:89:27:3c:
08:47:42:86:bf:b2:7d:5a:43:43:d0:a8:0c:73:6c:
e5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CD:CD:E7:F4:BF:B7:58:4E:0F:32:67:F5:33:A9:A9:66:29:A7:F8
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/LM3N5_S_t1hODzJn9TOpqWYpp_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.104.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:25:e8:bf:95:31:1d:0b:a3:09:83:60:99:22:28:df:d9:13:
fa:d5:51:3f:6e:a1:a5:bc:e4:d0:db:f7:c4:f1:9c:2c:57:aa:
d5:f6:14:3e:db:dc:81:f6:ff:44:78:02:28:86:bb:a6:32:ef:
0b:71:b7:43:f1:78:0e:92:11:9b:02:9b:b7:d7:b2:4e:ab:21:
a6:79:da:36:5f:ea:d0:a2:0f:1f:99:1a:ad:c9:c3:e7:13:85:
6f:c4:db:ba:2c:e2:aa:fa:3c:bc:19:c2:20:a4:a8:37:09:8c:
2e:4a:4e:bf:42:d0:b8:4c:2b:47:04:f0:66:0d:f4:a7:8c:e7:
8e:28:42:ae:98:5d:c1:04:b5:c7:f4:0d:14:47:c9:61:cf:a2:
18:d9:7e:4a:0b:4b:8e:ea:44:54:5d:80:f0:a8:4d:5c:b3:0d:
0c:e7:67:4a:47:37:23:c1:d9:d7:56:db:12:16:96:f7:49:6c:
cb:3e:21:38:74:28:4e:ab:c0:05:e4:6a:79:f8:8b:c7:99:40:
fd:33:ef:5d:2d:89:48:88:b9:23:ae:ec:5e:0e:a8:22:29:21:
55:43:dd:4c:d1:d7:e2:55:80:f4:f0:a1:d1:17:a3:61:71:00:
3d:d5:33:8d:83:e4:31:b7:19:64:c4:2a:46:12:02:bf:16:55:
c0:ab:7c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org