Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/lgTq38Km70a0lmvhrbJaDNGDe7Q.roa
File: lgTq38Km70a0lmvhrbJaDNGDe7Q.roa (raw, json)
Hash identifier: 4gcfg4ADPHA5r1L0izxx69hCpWE8o2668XAYiMeWRbQ=
Subject key identifier: 96:04:EA:DF:C2:A6:EF:46:B4:96:6B:E1:AD:B2:5A:0C:D1:83:7B:B4
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 01856C0105DE30FAF2329B21174482D680C3
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/lgTq38Km70a0lmvhrbJaDNGDe7Q.roa
Signing time: Sun 01 Jan 2023 06:24:44 +0000
ROA not before: Sun 01 Jan 2023 06:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36947
IP address blocks: 213.140.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:05:de:30:fa:f2:32:9b:21:17:44:82:d6:80:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Jan 1 06:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9604eadfc2a6ef46b4966be1adb25a0cd1837bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:e3:ee:6c:f5:51:68:c6:34:25:f8:15:ed:
d0:6f:0b:fa:45:f9:0c:c8:24:7b:d3:42:53:fc:20:
9d:aa:80:72:e3:46:5b:98:63:15:ee:10:67:35:4d:
8f:0e:21:de:aa:c2:e0:99:d0:5e:4d:d6:b5:2d:1a:
cc:51:6a:f5:23:f0:3c:dd:5c:4e:c7:9a:b3:2c:eb:
6e:b9:51:34:c9:1f:5e:d0:a9:93:c6:d4:82:61:52:
48:bc:92:42:f7:12:7e:98:fa:5c:47:5a:46:bb:48:
3a:6b:15:d2:92:34:1a:79:a1:11:d4:44:0a:73:80:
14:d1:14:92:a6:f4:a6:73:51:cb:44:07:56:b1:47:
69:c5:70:dc:f5:0f:98:02:18:0f:93:50:5a:5a:bf:
73:ab:44:4d:d8:7e:ce:f8:07:00:6c:a0:a5:25:6b:
6d:77:0a:5e:04:37:b2:fb:05:f9:14:6f:1f:fd:a1:
5c:34:91:80:61:3b:15:20:9b:09:2b:b5:de:49:45:
79:c8:69:08:cc:f0:58:f1:57:73:d5:ca:1a:f5:8b:
a0:93:0b:04:97:37:0e:88:1d:23:7e:20:c6:e0:bc:
28:13:44:7f:30:1a:5a:8a:a1:0c:80:5d:2c:64:4b:
f9:80:2b:4c:01:73:37:3d:02:b4:e1:6f:84:98:5c:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:04:EA:DF:C2:A6:EF:46:B4:96:6B:E1:AD:B2:5A:0C:D1:83:7B:B4
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/lgTq38Km70a0lmvhrbJaDNGDe7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.140.56.0/22
Signature Algorithm: sha256WithRSAEncryption
06:72:2a:e0:37:73:27:19:3b:30:52:21:a4:a8:25:d4:5f:11:
d3:4c:49:5f:f1:04:5e:da:f0:d1:db:78:46:e7:12:06:5e:d1:
36:94:af:35:0c:4a:71:32:4b:c3:7f:5e:18:8b:89:63:96:45:
00:36:04:64:67:86:55:b7:24:71:c1:51:ea:bf:2b:1f:79:7d:
6c:28:bf:aa:55:79:c7:bb:47:2a:bf:82:f6:47:d4:05:81:61:
d8:eb:4d:d3:88:82:93:ee:4c:a4:63:3e:8d:ad:b4:a8:0c:df:
f6:4c:7e:c4:ce:f3:51:82:f6:5b:4a:34:57:95:63:fc:c3:7b:
9d:98:7f:69:f5:d6:7d:fb:80:ea:97:72:b8:3a:75:40:e1:d7:
27:50:6a:c8:8f:df:ea:2e:85:fa:b3:9b:64:2e:43:b9:5f:70:
a3:11:41:37:49:cc:a6:09:a0:7a:d2:43:35:04:19:c2:8c:6e:
c2:38:c6:6d:13:09:04:6f:fd:97:5e:87:7b:c4:ee:e8:b3:b5:
fb:8e:99:82:0e:25:72:e8:75:bb:38:9a:01:57:8a:9d:87:72:
8a:cf:46:c4:28:38:4e:ae:bb:c7:40:48:12:dc:39:02:a9:64:
38:7b:61:4b:b7:8f:b7:79:9b:e8:a8:20:9f:78:96:3c:a7:4d:
cf:1a:d8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:05 2024 by rpki-client on console-fra.rpki-client.org