Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/LXyApc1nnwWzXLh3U3luAODmUiA.roa
File: LXyApc1nnwWzXLh3U3luAODmUiA.roa (raw, json)
Hash identifier: xjqrO+xcrY/7dOLw5c/IabRO0a3T05gZS7Rmk5JMUA0=
Subject key identifier: 2D:7C:80:A5:CD:67:9F:05:B3:5C:B8:77:53:79:6E:00:E0:E6:52:20
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 018C880F129DB78147A651991C1B0B00DD10
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/LXyApc1nnwWzXLh3U3luAODmUiA.roa
Signing time: Wed 20 Dec 2023 16:28:58 +0000
ROA not before: Wed 20 Dec 2023 16:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 93.127.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:88:0f:12:9d:b7:81:47:a6:51:99:1c:1b:0b:00:dd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Dec 20 16:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d7c80a5cd679f05b35cb87753796e00e0e65220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f9:5d:a4:c4:cf:ad:9e:05:c8:4c:5f:f6:2c:
7d:96:e2:9f:34:e4:19:f7:30:59:9c:92:36:b6:1e:
b7:a0:62:16:c4:93:bf:88:37:13:0c:e4:8c:c2:37:
06:ba:88:b9:1b:28:a0:ef:cc:c5:6f:54:38:c7:a9:
1d:98:7b:47:b3:69:e5:27:d9:eb:cd:4c:51:d1:2e:
b7:53:ea:43:d3:0b:bf:e2:fa:a9:59:c8:bd:19:c0:
04:74:6d:ce:40:6d:9a:30:81:11:87:b1:33:6b:92:
48:4f:d3:dc:72:c8:28:ff:bc:f2:62:5b:61:8c:8a:
9e:12:c1:2a:da:80:13:75:21:fb:74:6d:27:99:13:
99:49:7c:87:38:fc:02:47:b3:ac:d8:3a:7d:c6:14:
81:fe:3c:23:64:9f:c6:dc:4a:2f:43:46:a8:8c:04:
2d:b1:81:f6:86:df:a5:3b:21:1a:70:ed:44:c6:e5:
3e:6a:2b:ae:94:d5:d4:14:81:6c:2e:06:a9:8a:b2:
b0:ae:70:36:74:77:8b:f1:1f:41:60:e8:68:35:0c:
02:dc:16:5b:d4:02:42:c1:57:b3:09:a1:68:d5:28:
08:88:63:94:b6:25:81:cf:d8:2e:86:ed:f5:2b:07:
72:82:90:8c:22:72:64:f4:70:ca:d6:56:62:52:19:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7C:80:A5:CD:67:9F:05:B3:5C:B8:77:53:79:6E:00:E0:E6:52:20
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/LXyApc1nnwWzXLh3U3luAODmUiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.164.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:fc:d3:ed:bb:ff:40:42:ab:dc:83:6d:f0:25:00:74:12:bc:
3c:99:af:6f:48:fd:4f:f3:1e:d5:1e:4b:cb:49:4e:62:e9:ab:
d2:89:00:5e:03:a8:6b:51:37:b6:89:2c:5d:de:4e:b0:80:40:
4c:b1:79:c7:cf:fd:b6:84:a3:75:11:c0:8a:34:0a:52:fb:12:
b8:69:7c:91:06:cd:72:2c:13:88:bc:9d:e1:a2:04:11:48:13:
0b:d1:fe:0d:48:77:77:c0:10:df:4d:3b:2b:75:c4:26:42:e6:
8c:45:01:f4:ac:77:a1:89:6e:41:87:22:8d:79:fa:f4:bf:01:
1d:c8:94:f1:cf:0c:62:44:20:8b:c1:e7:c6:92:4a:00:1f:14:
11:54:e1:55:80:85:5b:34:14:f5:00:4c:de:93:21:cf:81:a0:
e1:16:7e:fa:ce:4c:76:fb:10:98:b1:fc:aa:c4:8f:0d:65:34:
f0:e9:2f:f8:b8:c9:c8:24:5f:b3:5f:f9:07:02:52:6a:95:44:
2e:7f:7a:41:d0:be:b0:42:7b:41:d1:f2:21:ee:da:60:c8:34:
34:84:23:dc:8b:75:27:1b:9f:92:42:02:08:1c:05:b7:2e:83:
a5:96:be:ea:64:6b:f7:64:91:52:3d:ad:3a:96:0f:78:a0:6e:
0f:76:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org