Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/lwDbJm6o4xDB7FrxJcyVOSBr3zA.roa
File: lwDbJm6o4xDB7FrxJcyVOSBr3zA.roa (raw, json)
Hash identifier: 4S0pVIVBiHkvZ8tS7vgON03VyYnKBO6WXPPTCKUk2AE=
Subject key identifier: 97:00:DB:26:6E:A8:E3:10:C1:EC:5A:F1:25:CC:95:39:20:6B:DF:30
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 01856F5DCB08BA0E4A8A15040CE735DFF6EE
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/lwDbJm6o4xDB7FrxJcyVOSBr3zA.roa
Signing time: Sun 01 Jan 2023 22:04:55 +0000
ROA not before: Sun 01 Jan 2023 22:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15879
IP address blocks: 195.191.1.0/24 maxlen: 24
91.206.80.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:cb:08:ba:0e:4a:8a:15:04:0c:e7:35:df:f6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Jan 1 22:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9700db266ea8e310c1ec5af125cc9539206bdf30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:59:91:88:38:f2:85:bd:12:e2:ae:69:95:
43:86:6a:57:f1:98:f5:a6:2f:ab:df:b5:ad:e4:cb:
22:ba:8f:37:b8:4b:3b:56:3b:a3:9a:f5:3d:ae:fd:
2b:30:43:c4:81:c4:14:f6:d0:c4:53:27:59:ac:02:
1f:0f:f1:28:74:fe:f6:8b:9e:2b:2f:42:a3:0d:3e:
26:a5:76:a9:62:9b:4d:79:58:f8:85:0f:ad:ce:76:
db:fd:2e:89:c6:6d:4a:9a:d7:b1:20:c9:f7:47:0a:
19:95:f6:7e:24:a0:1f:7b:4f:2b:c9:1d:5d:77:e0:
cc:2b:1c:de:f8:f6:e5:52:c3:7b:7f:9f:6d:58:08:
4c:16:de:3f:0a:93:18:2a:3c:e8:00:12:d5:c4:b9:
46:f3:53:40:ab:58:d1:73:b9:d0:b0:4b:84:0d:fd:
70:33:aa:44:28:74:c3:d0:70:28:96:a0:2f:97:bf:
2b:20:c8:a6:79:a7:14:00:36:8b:49:1d:89:2c:3b:
9b:48:72:77:38:c6:9f:c4:7b:21:8f:97:cf:32:f3:
74:ae:c4:b5:65:c3:ef:97:e0:4d:9f:47:6d:74:7f:
8c:40:fa:1b:73:66:47:13:bd:fa:c6:1d:e9:59:96:
54:04:3c:18:2f:46:92:f2:fa:60:4a:41:3e:1a:24:
c0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:00:DB:26:6E:A8:E3:10:C1:EC:5A:F1:25:CC:95:39:20:6B:DF:30
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/lwDbJm6o4xDB7FrxJcyVOSBr3zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.80.0/23
195.191.1.0/24
Signature Algorithm: sha256WithRSAEncryption
20:5e:78:c6:d5:2f:03:fb:c5:0c:23:1f:bd:d4:6a:cb:34:21:
8f:57:96:9a:de:08:b8:01:5e:19:20:f4:73:e7:0a:ac:9a:6f:
11:f0:df:75:39:40:30:9b:02:6c:c5:90:5d:bc:ef:a2:4d:d9:
28:37:4c:7b:5f:c2:d9:57:ec:74:a6:30:ae:ff:b2:84:83:69:
13:a5:0a:e2:40:16:67:09:12:e5:b2:30:9a:57:c9:e6:a0:67:
c7:bc:0b:83:46:fe:2b:a1:8c:45:a0:a8:21:e3:65:02:f5:b2:
74:d3:75:a5:2e:fc:a7:36:db:8e:68:4b:a5:6c:e1:d7:7b:42:
b3:56:2a:a0:d4:c9:f7:bf:5e:73:f0:a7:ad:a3:8f:04:e8:6b:
2b:cf:81:b4:b1:9e:fc:13:4e:09:e2:f9:96:95:15:32:da:b5:
55:e2:27:bb:8a:97:fa:42:f4:0d:13:29:14:ea:34:51:e2:dd:
f4:4c:83:4b:67:41:dd:4a:00:66:cf:4c:7f:73:aa:1f:c8:24:
d0:3a:09:b6:bb:97:1f:ee:be:87:fd:6d:55:e5:42:44:c8:3a:
c3:2c:dc:4a:aa:19:98:a9:33:0c:e8:36:ce:14:be:e6:9d:d3:
04:de:c2:60:bd:1f:9d:1f:94:a2:84:0c:66:73:1e:3c:f6:df:
33:d4:f6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:04 2024 by rpki-client on console-ams.rpki-client.org