Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/LIvLWp810jL3byXcs9H43usvEPw.roa
File: LIvLWp810jL3byXcs9H43usvEPw.roa (raw, json)
Hash identifier: LqaQIwKzyxrv1uBKFOkHfB8qlmJesVE6AEO/kAs81H0=
Subject key identifier: 2C:8B:CB:5A:9F:35:D2:32:F7:6F:25:DC:B3:D1:F8:DE:EB:2F:10:FC
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018875EA09BAC4C8E2F342343006FD4A0C3B
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/LIvLWp810jL3byXcs9H43usvEPw.roa
Signing time: Thu 01 Jun 2023 07:44:12 +0000
ROA not before: Thu 01 Jun 2023 07:44:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196695
IP address blocks: 91.229.116.0/24 maxlen: 24
91.229.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:75:ea:09:ba:c4:c8:e2:f3:42:34:30:06:fd:4a:0c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jun 1 07:44:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c8bcb5a9f35d232f76f25dcb3d1f8deeb2f10fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:8a:8e:4f:7f:a5:cb:6d:af:cd:93:30:b0:
61:5f:be:5d:15:ee:78:ba:d2:d6:cf:79:41:3c:4f:
70:b8:21:36:93:71:5f:fb:22:c5:f0:f4:a2:e5:d6:
40:9e:e4:f4:c6:5d:27:02:ad:5c:b0:84:8e:60:c7:
f3:76:b5:cc:4f:28:2f:8d:0c:b7:a2:c2:66:74:1b:
4d:f6:e8:32:7e:77:7d:f3:40:f6:9d:6f:cf:5d:3e:
be:33:af:a1:57:53:d9:19:ec:4c:85:ee:6d:28:03:
ae:f1:f8:4d:14:e6:cc:fd:5c:dc:b2:c0:0c:34:3a:
54:cd:41:e6:d6:b1:db:86:35:10:97:64:d1:0e:25:
dd:e1:39:34:43:85:50:6c:4b:ba:50:5b:6f:53:22:
ed:2e:0f:61:59:5e:72:14:40:e8:df:68:99:d8:13:
b3:0c:fb:c8:6a:21:bf:d2:35:94:32:49:08:ae:dd:
e2:74:3d:e7:64:5f:c7:b4:22:22:d4:4e:8e:6e:64:
62:f0:54:ee:8e:a6:75:b6:a5:71:52:5d:7e:51:43:
c3:b0:23:a0:b5:63:cb:7f:53:30:41:20:ba:b2:47:
80:8f:08:db:a0:cf:6d:74:c3:d2:5c:8a:bf:5b:97:
2f:8c:4b:b7:c8:f0:9e:61:a1:ac:a0:dd:8f:b5:b1:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8B:CB:5A:9F:35:D2:32:F7:6F:25:DC:B3:D1:F8:DE:EB:2F:10:FC
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/LIvLWp810jL3byXcs9H43usvEPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.116.0/23
Signature Algorithm: sha256WithRSAEncryption
30:a2:d3:5e:5c:09:85:85:bb:ed:d0:6c:fd:12:cd:54:cf:43:
0b:20:b4:82:b3:38:c4:47:11:c0:b1:27:43:27:9d:85:07:bb:
66:f4:3b:09:c4:dd:2b:86:1d:5d:3a:86:34:a2:64:ff:24:7a:
23:f5:14:e4:b0:76:e2:cb:d4:5e:7f:9e:45:42:3d:9c:b3:08:
14:8b:d9:7b:d2:6a:9f:d9:41:bc:4f:bd:59:1f:40:67:4e:b0:
56:06:45:d6:df:2d:31:47:5d:d4:e2:65:dc:ed:34:2c:8b:9b:
e0:85:09:2d:b4:2d:bd:86:a5:a6:43:a5:ce:2e:c9:72:5e:98:
cc:10:dc:00:2b:8e:b6:0e:1b:7c:78:b5:a0:fe:a9:d0:d0:32:
9d:f6:19:97:36:e5:ea:72:61:bf:b4:c8:e0:b7:3e:ab:1a:e0:
1f:77:9b:dc:69:45:3a:1f:53:01:d1:df:85:ea:6a:02:e2:af:
56:e3:c5:1c:26:61:24:19:a4:b4:b5:16:4c:02:1e:ba:5f:51:
38:3f:c3:9a:e0:13:87:07:b8:cd:6e:4c:18:d3:f1:c3:d8:3e:
a3:f9:1e:c4:83:71:19:da:85:96:af:3e:93:83:13:e2:09:51:
81:c3:ca:28:64:74:a7:0a:98:c0:8c:98:41:92:fc:1e:65:34:
ad:15:d0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org