Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/lgNgL4oByCdD6XCH0X4S8EdxGFM.roa
File: lgNgL4oByCdD6XCH0X4S8EdxGFM.roa (raw, json)
Hash identifier: v0EUWR5EjVqJzTC9vufmBJzoYBRP54NGI//91dmo63U=
Subject key identifier: 96:03:60:2F:8A:01:C8:27:43:E9:70:87:D1:7E:12:F0:47:71:18:53
Certificate issuer: /CN=cb55656c69d553da92b783850e15b1704e876d93
Certificate serial: 01856D8AF769B3FB52AC5E3DFB933B8609C0
Authority key identifier: CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/lgNgL4oByCdD6XCH0X4S8EdxGFM.roa
Signing time: Sun 01 Jan 2023 13:35:01 +0000
ROA not before: Sun 01 Jan 2023 13:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197303
IP address blocks: 91.220.11.0/24 maxlen: 24
94.158.18.0/24 maxlen: 24
94.158.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:f7:69:b3:fb:52:ac:5e:3d:fb:93:3b:86:09:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb55656c69d553da92b783850e15b1704e876d93
Validity
Not Before: Jan 1 13:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9603602f8a01c82743e97087d17e12f047711853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:5d:00:e2:50:22:d4:78:99:cf:db:ea:f0:
0b:ab:bb:6c:71:45:aa:a4:21:cf:98:3d:fb:52:d8:
88:26:4d:19:80:20:42:4d:84:b6:e4:72:6d:36:fc:
51:13:0a:60:69:bf:3d:ea:9c:9d:8a:8b:7d:a6:bb:
18:85:46:20:34:d6:5f:a3:67:4f:24:2c:0e:9d:23:
97:67:91:53:b4:14:ef:49:20:69:47:bb:06:ff:fe:
58:ba:48:1e:73:bb:a4:db:75:13:7a:74:4f:bc:a4:
20:78:f5:1d:36:c1:e9:4f:7a:19:a9:89:27:68:1d:
d3:56:d5:dd:d2:5c:87:4a:44:7a:bd:4c:70:33:73:
67:a2:3a:3a:50:21:f3:34:45:c9:3c:d0:4b:51:a7:
7d:da:1b:ce:64:50:16:5e:8b:c9:bb:fa:87:59:7a:
22:f2:7b:56:99:23:82:f2:0e:ad:13:33:35:93:5c:
98:1c:eb:a9:19:c6:51:fe:19:1a:38:6d:54:56:0a:
c5:bb:e0:5d:2a:a4:75:d9:95:de:9e:4b:f3:a7:d5:
ff:7e:63:44:1a:7e:21:09:c7:e3:82:33:9a:16:0b:
e8:a0:f4:9b:7a:61:62:c3:d2:9b:a0:07:aa:ae:3c:
69:c4:04:b1:76:5e:66:7c:56:f1:6a:48:c7:1a:36:
c5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:03:60:2F:8A:01:C8:27:43:E9:70:87:D1:7E:12:F0:47:71:18:53
X509v3 Authority Key Identifier:
keyid:CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/lgNgL4oByCdD6XCH0X4S8EdxGFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.11.0/24
94.158.18.0/23
Signature Algorithm: sha256WithRSAEncryption
03:9c:c1:c9:78:70:8d:1c:89:b1:52:6e:b3:a6:c8:e2:0a:41:
fa:b3:d3:1e:62:bf:b2:e5:24:db:ff:c4:f5:a2:ad:9b:67:1b:
c3:b8:af:85:78:17:78:94:89:1f:53:8b:d7:0d:70:41:c8:96:
69:24:b9:4e:a9:67:6a:2f:47:57:1b:f0:07:0f:2e:2e:42:7c:
48:7c:5e:02:58:2b:cd:f0:72:a8:7b:c1:e4:f6:d4:84:af:32:
ae:dc:f8:b9:c2:cc:16:9f:75:1a:02:5a:08:48:42:2d:10:04:
ba:df:36:90:48:86:38:ac:86:c4:cf:4c:cf:3b:4d:21:71:28:
fd:44:72:2d:9e:a7:eb:76:04:55:70:7b:47:ca:a2:91:ec:76:
b0:80:9b:e5:56:4c:ef:fe:c5:77:e8:82:2d:14:eb:e1:31:dd:
ed:6f:e3:4d:58:5b:81:ed:49:95:66:14:b2:1b:5b:56:d2:49:
1f:2a:88:ea:04:76:dd:53:e9:7f:dd:4e:95:24:fb:92:a6:6b:
96:da:69:98:7f:52:57:40:5d:cc:f9:34:29:a2:89:36:a4:6f:
9f:89:d0:b8:df:8a:be:b3:81:bc:ac:f2:9f:d1:a5:27:c1:c9:
c6:2b:25:f4:ed:e1:ae:f6:db:d5:c4:9b:7f:7c:ae:9f:12:07:
9d:0c:34:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:10 2024 by rpki-client on console-ams.rpki-client.org