Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/LHm00wsAQyNp43p8-9vtaMnK5Ys.roa
File: LHm00wsAQyNp43p8-9vtaMnK5Ys.roa (raw, json)
Hash identifier: V30cfFU4fjMLhgt8RGIb70mNXlZMvGh1Xpj2u2J/qZw=
Subject key identifier: 2C:79:B4:D3:0B:00:43:23:69:E3:7A:7C:FB:DB:ED:68:C9:CA:E5:8B
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0190B51C61D4B252CFDED178EDC115A9EA5C
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/LHm00wsAQyNp43p8-9vtaMnK5Ys.roa
Signing time: Mon 15 Jul 2024 06:37:34 +0000
ROA not before: Mon 15 Jul 2024 06:37:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 194.143.214.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jul 2024 11:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b5:1c:61:d4:b2:52:cf:de:d1:78:ed:c1:15:a9:ea:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jul 15 06:37:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c79b4d30b00432369e37a7cfbdbed68c9cae58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:24:ab:7f:69:60:2c:4c:2a:50:e8:b2:e1:a3:
c7:3c:33:4c:81:73:9d:ae:cd:de:b0:a8:77:41:bc:
f8:db:0c:e2:83:94:94:6d:de:cd:95:62:a2:53:88:
d6:02:53:5d:04:9c:f5:bc:af:47:66:58:35:4f:56:
ca:d9:6b:74:83:1b:12:19:d4:5f:84:a9:b6:c4:6e:
5c:75:94:01:70:88:0e:5e:2d:1b:9d:5d:d9:92:26:
aa:57:6a:64:f8:59:ad:b1:c8:f0:30:d9:c1:a3:e1:
c1:4d:e9:75:b5:85:da:f9:1d:57:b2:c7:78:08:40:
ff:30:01:aa:0b:b9:1d:fb:83:9f:0a:10:38:98:1c:
db:17:db:30:c9:83:7b:ef:5d:de:63:14:9e:8b:e4:
96:59:2c:09:ac:38:db:1b:a8:d1:03:6a:46:df:5f:
cb:48:c1:15:7e:81:df:a8:26:dd:40:8b:30:12:c3:
e7:1a:a0:81:fd:d9:87:ea:fd:37:0f:ff:d6:d1:ca:
1b:ab:9f:47:76:5a:f6:55:87:af:42:4e:27:ea:d4:
44:a5:43:b3:90:c8:59:37:fe:65:fd:ef:0a:bb:0a:
e8:12:ee:35:66:f7:06:8f:35:d8:a8:fe:3f:07:d2:
13:44:d9:bf:71:fa:8d:03:d9:03:93:4b:55:aa:3b:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:79:B4:D3:0B:00:43:23:69:E3:7A:7C:FB:DB:ED:68:C9:CA:E5:8B
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/LHm00wsAQyNp43p8-9vtaMnK5Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.214.0/24
195.114.195.0/24
Signature Algorithm: sha256WithRSAEncryption
35:6c:31:e4:ee:42:83:8a:4d:82:bc:d7:71:f0:0b:a4:8e:af:
ee:d4:72:35:fa:17:9b:cd:3f:72:2f:7a:65:fa:70:a2:13:fe:
9b:5c:cd:15:4b:37:bb:14:82:0d:15:b2:87:fd:a6:11:c3:5b:
de:76:e7:10:21:c6:5c:65:fb:82:e0:ac:2e:ac:95:f8:80:01:
05:1e:d4:42:a8:ea:17:e0:e2:ee:57:ae:c9:f9:94:35:d5:c9:
5c:62:cb:47:3a:83:cf:e1:ba:14:8b:cc:53:8e:26:ac:36:f1:
66:b8:1f:d6:06:8a:44:50:4e:0f:0a:23:55:96:33:fe:ea:0f:
2d:b4:87:8b:3a:7f:0a:91:25:4b:ee:38:b2:67:a6:a8:0c:ba:
88:24:d5:e7:e1:2d:9f:63:2f:68:ac:da:dc:a1:f3:aa:e5:31:
c9:28:08:47:a4:c4:b5:80:ca:93:ff:9d:75:a6:3a:41:c4:9a:
b9:ef:66:16:e9:dc:0d:5d:3c:7a:1b:ed:80:8b:46:a1:ff:f7:
96:ae:80:d1:7e:8f:d5:0a:e9:a6:da:c0:25:1a:98:f4:55:26:
9b:55:e6:fc:22:ce:1a:49:76:d4:7d:08:c2:cc:ac:44:e5:7b:
5a:85:d9:41:1a:5d:fc:8b:08:7d:fc:51:63:52:52:c4:a7:82:
41:06:2d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 19 14:02:00 2024 by rpki-client on console-ams.rpki-client.org