Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/ll5GaXIoM2G06faGf7-ovUuEoYU.roa
File: ll5GaXIoM2G06faGf7-ovUuEoYU.roa (raw, json)
Hash identifier: 6jvV5nSEZ+7csplLUe2E3AFEYLRTwwTgICpCaTAPcvs=
Subject key identifier: 96:5E:46:69:72:28:33:61:B4:E9:F6:86:7F:BF:A8:BD:4B:84:A1:85
Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial: 01856F548F09F895ACBF8FED5D1222303A2C
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/ll5GaXIoM2G06faGf7-ovUuEoYU.roa
Signing time: Sun 01 Jan 2023 21:54:50 +0000
ROA not before: Sun 01 Jan 2023 21:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31313
IP address blocks: 193.169.6.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:8f:09:f8:95:ac:bf:8f:ed:5d:12:22:30:3a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
Validity
Not Before: Jan 1 21:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=965e466972283361b4e9f6867fbfa8bd4b84a185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7b:70:c3:31:29:58:e5:c0:2c:37:07:96:e9:
cf:18:fd:fe:38:3a:75:a9:63:0b:1a:e5:23:88:95:
0b:5b:b6:ee:0a:e6:49:da:09:df:63:e5:fd:fd:79:
42:1c:7c:6c:2b:4f:06:ed:3b:87:24:13:d9:30:0f:
48:43:9a:6b:92:75:92:83:b0:24:04:74:65:1c:1d:
56:55:cd:84:19:1e:26:88:e9:b7:36:75:ec:94:a9:
c2:39:f0:d4:45:4b:24:cf:13:86:fb:b3:e2:a5:f4:
79:d6:37:2c:7a:66:08:18:88:99:49:d5:52:66:95:
ec:d4:3e:64:41:a2:aa:df:92:35:18:8a:07:57:e5:
13:2f:e7:22:0f:9d:69:cd:40:16:e9:fc:67:12:77:
4f:1b:42:98:eb:a6:21:59:f7:83:ad:93:41:37:dd:
87:9b:e7:be:37:7f:c5:6c:f9:61:e9:10:8c:e1:94:
a2:2f:5b:1f:a6:75:f9:99:59:60:76:ee:9b:a3:c2:
d8:30:d1:e7:b2:df:4a:d2:30:c6:cd:db:ca:e2:81:
d9:15:e7:b1:aa:34:1d:43:4b:72:8e:2b:c5:a3:99:
0c:34:59:8c:9b:74:db:76:b4:b8:91:c1:00:0c:de:
ff:bd:8e:25:e8:d3:54:9e:cd:a9:8e:25:f6:0e:52:
a7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5E:46:69:72:28:33:61:B4:E9:F6:86:7F:BF:A8:BD:4B:84:A1:85
X509v3 Authority Key Identifier:
keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/ll5GaXIoM2G06faGf7-ovUuEoYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.6.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:09:7d:9f:92:53:49:5a:d9:57:50:95:0b:2c:09:80:c1:79:
b6:6a:d5:3f:1f:19:10:7f:0e:59:c9:ca:3c:db:56:a5:56:8e:
ae:68:d9:58:d4:2a:8c:d4:75:8d:ba:a2:33:cc:e4:ec:f4:52:
9d:87:9e:4a:53:9f:4f:22:b1:d1:f4:8d:77:84:9e:c9:f8:b0:
5e:10:fa:60:b5:f2:ef:c8:56:dc:93:49:04:5b:3b:6a:99:2a:
ab:28:4d:34:d3:dd:f2:04:02:86:6d:6c:84:85:7b:58:8d:1a:
7b:a7:dd:9e:fb:ec:04:c1:11:cc:fb:ed:11:6c:c0:90:e9:7b:
86:fb:be:dc:68:fd:a1:dc:cf:3f:d9:44:f1:59:dd:dd:2a:2f:
14:7b:fd:e9:c2:b1:21:db:e8:92:38:d0:a2:1a:95:83:66:bb:
67:65:e5:ff:59:df:aa:64:04:28:ec:4b:20:12:49:44:a9:98:
e6:27:1d:9e:86:f1:9e:af:94:71:f1:29:c1:55:87:a5:da:7b:
83:41:28:25:d5:5c:c9:ff:dc:11:b7:c0:7a:69:e8:fa:5d:12:
89:c3:50:66:47:09:59:00:96:6d:b9:5d:f0:17:2e:dd:7d:20:
04:38:e1:62:7c:4f:d2:9d:40:e1:d6:da:76:e5:15:6c:df:2f:
48:0f:4c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:14 2024 by rpki-client on console-ams.rpki-client.org