Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/lybX9oCnXJwQl1AGeMN0YRfdYTk.roa
File: lybX9oCnXJwQl1AGeMN0YRfdYTk.roa (raw, json)
Hash identifier: ruhkRDCSMytDk98duqpzgnUyt4aYSY+AS+rGOYujqq8=
Subject key identifier: 97:26:D7:F6:80:A7:5C:9C:10:97:50:06:78:C3:74:61:17:DD:61:39
Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial: 01856C1CACC025F2E948D57CF7DD1F0D235E
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/lybX9oCnXJwQl1AGeMN0YRfdYTk.roa
Signing time: Sun 01 Jan 2023 06:54:56 +0000
ROA not before: Sun 01 Jan 2023 06:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51224
IP address blocks: 194.13.70.0/24 maxlen: 24
194.13.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:ac:c0:25:f2:e9:48:d5:7c:f7:dd:1f:0d:23:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Validity
Not Before: Jan 1 06:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9726d7f680a75c9c1097500678c3746117dd6139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:f4:17:00:81:04:53:1d:5e:51:f5:a9:9f:
48:00:18:ab:45:34:36:88:1d:26:38:68:ba:d2:d9:
40:db:c2:96:5f:68:26:30:a2:21:25:42:da:fb:72:
5a:6b:92:82:b2:6d:ca:1f:71:db:4f:e7:2c:19:17:
0f:ed:07:a7:c0:c9:b3:d5:0c:d9:1c:95:07:b2:05:
19:48:32:e2:f6:05:8f:c9:99:77:9a:d6:48:cd:23:
d4:93:46:dd:64:1f:41:bf:9a:c4:54:e2:8b:9a:a4:
83:2e:ec:70:0d:e5:c2:68:9a:61:74:68:16:32:3f:
55:2a:6b:de:39:c2:d7:53:21:f1:2c:80:32:d1:a5:
45:6b:1d:6f:75:14:4a:73:cf:17:09:9b:f4:b9:17:
2b:e8:79:81:c2:6e:05:b8:65:6d:77:8b:9a:5f:f3:
65:62:bf:a4:b6:9c:2d:f8:93:9d:5a:a7:db:2f:5e:
64:dc:42:d2:a9:fc:25:da:79:24:58:71:79:16:4d:
40:a3:7b:ca:81:8f:72:fb:87:54:bf:76:ad:b6:7e:
76:31:2d:df:5d:e5:c1:60:03:fe:05:ad:ad:18:67:
a4:93:c7:ec:0f:72:2c:92:32:c3:49:d4:17:d1:ce:
ee:a5:7c:69:32:23:cc:d5:83:a3:ea:37:21:18:7c:
ee:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:26:D7:F6:80:A7:5C:9C:10:97:50:06:78:C3:74:61:17:DD:61:39
X509v3 Authority Key Identifier:
keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/lybX9oCnXJwQl1AGeMN0YRfdYTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.70.0/23
Signature Algorithm: sha256WithRSAEncryption
be:18:7b:b4:5b:67:03:1c:92:7a:1f:e1:32:8b:7c:97:6b:b4:
5a:94:37:8b:ba:4f:d6:33:b5:75:63:0d:12:fa:93:cc:42:34:
7a:19:10:f5:c4:a2:91:63:78:09:9b:d5:62:51:5c:ef:4b:14:
17:3e:ec:06:f0:d5:bb:da:23:7a:a6:bc:d2:e9:51:77:5d:32:
aa:99:36:bd:16:c0:21:84:0e:cc:0d:df:63:56:3a:21:64:7e:
32:20:18:b4:51:f8:13:ed:d4:05:73:af:7f:9e:11:92:d9:09:
53:1e:d1:02:1c:eb:7c:00:b9:4d:83:9b:88:09:7a:ae:bb:ed:
47:1e:28:e1:ea:36:8e:26:e8:22:92:f5:c7:70:23:07:2a:cf:
d2:56:ca:1f:51:02:c2:83:4d:17:0f:9d:e7:9e:a0:fd:4a:59:
31:2c:ff:88:1f:68:f0:ab:cf:db:8d:5f:0e:30:15:31:14:f4:
df:ff:6f:dd:e4:70:2b:43:bd:08:b0:c1:5b:69:56:31:17:64:
1e:aa:b1:5e:16:0f:42:4e:ae:33:88:24:e6:12:09:cb:ba:94:
cb:e8:b1:ca:4f:63:2b:8d:77:aa:17:18:48:34:f8:32:5e:de:
02:19:4e:f2:a5:4a:8d:72:22:98:17:76:1e:68:12:e7:df:a8:
50:62:cb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:24 2024 by rpki-client on console-ams.rpki-client.org