Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/luxzwykqVB2AoRD-T3GUj9HQiyA.roa
File: luxzwykqVB2AoRD-T3GUj9HQiyA.roa (raw, json)
Hash identifier: MeCDXNlqxpJW+GGIdWAwnvgaN81v8IZ3h2KwVolXwXA=
Subject key identifier: 96:EC:73:C3:29:2A:54:1D:80:A1:10:FE:4F:71:94:8F:D1:D0:8B:20
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018CC9BA71E3B9A2796D63B16BCFE9D27D56
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/luxzwykqVB2AoRD-T3GUj9HQiyA.roa
Signing time: Tue 02 Jan 2024 10:31:28 +0000
ROA not before: Tue 02 Jan 2024 10:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47436
IP address blocks: 87.251.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 14:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:71:e3:b9:a2:79:6d:63:b1:6b:cf:e9:d2:7d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Jan 2 10:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96ec73c3292a541d80a110fe4f71948fd1d08b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:48:ee:77:62:6f:52:3d:14:1e:56:93:1a:
2d:65:a4:00:47:30:71:78:4e:69:81:b6:63:7c:86:
1b:4a:de:33:da:b7:fa:89:62:89:74:08:3d:5e:c0:
13:a0:2c:0a:20:e4:86:d9:0c:78:31:e6:91:21:38:
00:35:da:fb:49:03:fe:f6:33:d1:e1:3a:e7:67:a2:
37:3d:55:20:69:95:9e:b0:a5:58:08:a8:4b:39:43:
ca:94:a0:4a:17:4e:fb:ee:53:a9:94:b0:8c:9d:98:
29:1d:49:11:6f:25:16:9a:58:43:b9:e5:f5:79:b3:
05:65:d1:02:93:18:ab:71:f7:35:41:83:e7:de:d6:
5a:af:c9:cb:91:53:e7:d4:2b:6e:ef:7a:1d:15:fe:
fe:ae:2e:12:33:ac:ad:73:ec:83:c7:06:c0:f5:e3:
43:74:a2:22:d9:7e:0d:0b:48:60:e6:73:22:58:aa:
86:5f:79:fc:66:ca:32:57:b4:11:3a:2d:0d:dd:87:
97:14:b7:af:c8:61:c3:2c:6c:4a:6c:c9:27:48:53:
c1:11:71:17:02:eb:55:b6:90:55:f9:e3:e9:c7:e0:
bd:f6:dd:f0:6d:5a:1c:e0:1a:82:fb:3b:44:9a:7d:
16:c4:b2:c6:0a:cf:c3:43:f9:34:0e:31:c8:52:64:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EC:73:C3:29:2A:54:1D:80:A1:10:FE:4F:71:94:8F:D1:D0:8B:20
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/luxzwykqVB2AoRD-T3GUj9HQiyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.6.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5d:59:ea:44:b2:93:56:44:18:08:b5:5a:d3:32:61:07:b6:
cf:ba:4b:4f:11:83:4d:fb:97:c1:16:91:2c:f0:9b:58:a3:43:
23:10:61:58:4b:c3:90:dc:7c:c9:30:26:56:cb:ab:4d:7a:51:
2f:41:c3:0f:85:1f:ec:b8:f9:c5:db:33:2b:6f:58:fa:ec:75:
24:88:b9:c6:53:ef:a4:6a:65:c6:3d:87:47:97:a9:3e:90:c9:
6b:6d:a1:39:ac:f8:ce:cf:67:34:b8:f9:53:19:38:1e:40:88:
48:35:d8:4b:31:e4:5d:07:84:4d:0a:e8:f5:46:b6:6a:21:c3:
69:b6:b8:70:1a:ae:97:69:ac:14:21:52:59:bd:18:52:57:32:
66:d7:e4:da:76:62:c7:90:31:73:99:67:93:db:65:a2:7f:91:
83:4f:f8:c3:c0:46:2b:27:d2:ae:bf:33:83:73:ff:26:13:07:
5e:48:7a:a3:93:ae:e7:9b:8b:b4:e0:e9:1a:ed:47:75:af:c8:
98:62:66:19:5e:5c:15:11:02:92:a7:b6:a3:64:9b:dd:56:4d:
59:fa:b8:13:8c:40:d1:94:83:74:6b:a4:74:36:cd:99:e9:5e:
fe:36:a3:cf:69:a1:ba:b1:b5:b9:67:81:26:92:d8:ef:da:47:
b9:3b:bc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:35 2024 by rpki-client on console.sobornost.net