Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/LtBhL_YyI5IJWedtzU7pkwn_V_E.roa
File: LtBhL_YyI5IJWedtzU7pkwn_V_E.roa (raw, json)
Hash identifier: dbN8pFVzzs5isDJ9HblUMqyXo9s7SVYe1FaSrTSaXiU=
Subject key identifier: 2E:D0:61:2F:F6:32:23:92:09:59:E7:6D:CD:4E:E9:93:09:FF:57:F1
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 018997476C93AF797F06A2F3E632B7465110
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/LtBhL_YyI5IJWedtzU7pkwn_V_E.roa
Signing time: Thu 27 Jul 2023 12:16:27 +0000
ROA not before: Thu 27 Jul 2023 12:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 195.210.9.0/24 maxlen: 24
193.93.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jul 2023 16:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:47:6c:93:af:79:7f:06:a2:f3:e6:32:b7:46:51:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jul 27 12:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ed0612ff63223920959e76dcd4ee99309ff57f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:00:75:36:c3:05:71:bc:f8:4c:d4:0f:ab:
8d:46:c2:a1:12:61:d0:63:e5:96:69:f6:80:b6:45:
2e:9e:8a:6e:ca:80:be:67:0e:c0:8c:60:15:ca:8f:
a7:ae:90:8d:01:15:6d:c3:dd:16:23:df:a2:10:6b:
23:fb:f8:50:8d:2a:27:19:5c:32:0e:ec:4d:32:16:
8d:92:31:8f:70:81:72:6d:07:00:b4:5f:0c:eb:fb:
c8:0a:98:eb:96:46:cb:40:6c:33:e5:b7:dc:98:72:
52:67:21:9e:20:50:33:4e:19:09:81:fb:83:9d:ea:
55:c9:df:da:ab:95:7b:e5:cf:95:32:8f:fd:08:2e:
b4:f3:77:48:dd:e0:9d:7b:79:b5:d2:41:1c:5e:5d:
4b:1b:d8:80:34:1d:2d:64:e0:f1:21:27:97:b2:0c:
05:74:12:a4:aa:f8:bf:c2:1b:3a:e4:d4:4b:1c:b6:
3b:08:41:6a:0e:8b:83:b2:c9:5c:5f:0d:67:98:64:
0c:6b:7f:63:34:c9:60:d5:b1:af:54:68:44:51:56:
67:8d:77:34:71:12:71:11:4a:b9:d4:53:61:cc:0a:
50:68:94:e5:73:1a:31:15:0e:47:19:e8:b4:81:a9:
0f:db:6a:88:a8:80:09:30:8e:4a:cb:a4:58:66:02:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D0:61:2F:F6:32:23:92:09:59:E7:6D:CD:4E:E9:93:09:FF:57:F1
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/LtBhL_YyI5IJWedtzU7pkwn_V_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.61.0/24
195.210.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:2d:7d:17:7a:f6:a5:db:6a:4c:4e:62:1d:93:a1:b2:5d:d9:
6a:72:e9:6f:39:71:2d:ce:3d:54:50:be:c2:02:15:e5:30:0f:
f6:5b:d1:ba:c0:65:63:12:1b:a4:59:f9:0e:64:ab:75:74:a2:
60:5c:8d:2c:ce:94:87:b7:00:6f:89:91:9f:76:16:c0:ee:43:
b9:1f:4c:d7:53:11:49:ac:2a:13:5f:03:61:85:11:7f:0c:36:
1c:87:f5:02:e6:21:1c:86:28:46:5b:9e:9c:af:88:c9:6f:6c:
eb:2d:d6:fc:14:f9:3f:d9:93:da:c5:f5:a4:1c:56:b8:6b:78:
62:c4:bf:96:9f:6f:f6:a1:6f:d8:ad:c0:20:af:73:51:fc:34:
a0:4a:35:79:cc:e6:01:42:a7:c3:7b:f7:0e:a8:4a:f0:46:81:
e2:45:53:5d:e9:37:83:d8:0d:8d:1b:c8:a4:62:a5:a1:ec:07:
ff:7a:7d:ce:74:5c:73:04:88:af:cd:18:c7:d6:ee:76:b4:59:
b6:0c:99:9c:78:a0:24:f5:d1:bb:89:15:f9:79:c4:b3:2d:b2:
d6:f2:6a:9d:32:0a:0c:89:8e:5c:85:a5:06:63:3c:f7:52:1b:
78:bc:e0:69:65:89:6b:89:4a:72:42:51:f7:72:3d:c4:92:1a:
72:2f:17:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:52 2024 by rpki-client on console-ams.rpki-client.org