Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/LNheOkRNsdjR2VdYbA3rl-XfP54.roa
File: LNheOkRNsdjR2VdYbA3rl-XfP54.roa (raw, json)
Hash identifier: QlGOkBtA4Ei4RZkzAs28aCCiyU0nn7AiBz/kUrqW8b0=
Subject key identifier: 2C:D8:5E:3A:44:4D:B1:D8:D1:D9:57:58:6C:0D:EB:97:E5:DF:3F:9E
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 0188B1957A37D9BEE6521C8C5973644B9396
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/LNheOkRNsdjR2VdYbA3rl-XfP54.roa
Signing time: Mon 12 Jun 2023 21:49:03 +0000
ROA not before: Mon 12 Jun 2023 21:49:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 79.110.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 21:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b1:95:7a:37:d9:be:e6:52:1c:8c:59:73:64:4b:93:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Jun 12 21:49:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cd85e3a444db1d8d1d957586c0deb97e5df3f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:f5:28:3c:62:5d:3e:c4:da:24:77:a8:b6:
2b:e6:0f:ae:31:6d:d8:70:7c:3f:b7:67:85:ce:e6:
c1:0a:97:9a:9c:35:9d:f1:66:7f:a3:51:87:fe:e9:
02:5e:16:61:5c:95:b0:aa:a3:c1:27:f0:33:14:46:
cc:77:22:eb:de:40:00:05:20:db:f7:91:4f:62:3a:
04:b7:ca:c8:2d:88:fb:85:68:59:b2:37:30:c7:9d:
91:89:1b:6c:27:6a:e4:58:d3:50:c4:af:1e:81:1c:
7e:9b:12:b4:5a:20:7f:4e:b1:db:80:fd:eb:01:31:
93:e5:0a:0c:f3:eb:75:b0:6b:3f:6a:7b:39:fe:6b:
54:43:eb:68:87:0a:be:7d:6c:46:b6:c6:68:a2:68:
41:fd:3d:79:64:c6:67:66:f5:b6:f1:65:c6:41:44:
1e:6f:e1:b5:1a:2c:b4:85:e9:bf:43:1e:bb:a4:f3:
35:6f:03:7d:e9:11:61:78:ca:d0:d6:f8:a3:9a:49:
3e:e6:85:9e:fb:6b:8e:a5:3a:6b:ff:eb:e6:09:19:
21:35:d2:e3:73:39:fc:77:3d:35:4d:01:7e:98:b8:
7a:52:73:cf:6e:2b:fa:e1:dc:30:a2:43:d1:04:d3:
2c:c7:cd:56:23:18:bc:b5:8c:a1:0c:b3:e6:49:14:
91:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D8:5E:3A:44:4D:B1:D8:D1:D9:57:58:6C:0D:EB:97:E5:DF:3F:9E
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/LNheOkRNsdjR2VdYbA3rl-XfP54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.167.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e7:84:b8:b6:bd:bc:b8:43:c5:7d:e2:ea:d6:ea:55:73:14:
ca:b0:64:e6:c4:77:72:2f:f4:0e:cd:10:2d:f3:d4:81:ab:02:
d1:4a:18:19:8c:5c:14:8f:b8:4c:cc:cb:a1:82:ed:2e:6f:1b:
b4:62:20:06:bc:f5:73:33:61:7f:40:30:c1:31:22:14:dd:48:
c1:82:4e:e4:f3:99:2c:65:3d:90:45:6b:c1:8e:15:83:17:36:
21:e9:0e:2a:60:f7:83:cd:85:b3:02:23:2f:c1:f8:15:ec:c4:
e8:2f:a1:73:64:15:6f:03:d9:11:8a:6b:00:fe:a8:b2:1c:3f:
e5:47:d8:02:60:78:c5:a7:f7:77:dc:d9:de:5f:19:c3:20:5b:
bc:e6:c8:f5:b5:11:71:d5:bc:56:74:d1:40:32:46:6d:02:1b:
24:82:ec:e0:a1:9b:15:09:81:d3:f8:f3:ba:e3:09:b9:7d:e2:
c0:21:8d:25:e3:bc:02:aa:86:48:9e:90:1c:7c:13:20:8c:0b:
29:26:fa:13:82:50:70:45:05:91:38:49:9e:8b:05:1e:96:bd:
9e:3b:68:61:d9:b5:29:83:01:b5:09:cf:2f:ef:83:db:54:e0:
8e:56:99:fe:74:50:4d:8e:27:bb:e2:02:7d:65:d3:67:68:8c:
b0:10:3b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:00 2024 by rpki-client on console-fra.rpki-client.org