Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/ljtiLNaAL23Otw5armDkJj6pLmM.roa
File: ljtiLNaAL23Otw5armDkJj6pLmM.roa (raw, json)
Hash identifier: g9CQHeeBwr+mri6CR9kMvKPNNzYs01+64B7hnUnrAuY=
Subject key identifier: 96:3B:62:2C:D6:80:2F:6D:CE:B7:0E:5A:AE:60:E4:26:3E:A9:2E:63
Certificate issuer: /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Certificate serial: 018571B0FD11D2FFE8DC0F1E9E0003D14AF7
Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/ljtiLNaAL23Otw5armDkJj6pLmM.roa
Signing time: Mon 02 Jan 2023 08:55:02 +0000
ROA not before: Mon 02 Jan 2023 08:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1128
IP address blocks: 131.180.0.0/16 maxlen: 16
130.161.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:fd:11:d2:ff:e8:dc:0f:1e:9e:00:03:d1:4a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Validity
Not Before: Jan 2 08:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=963b622cd6802f6dceb70e5aae60e4263ea92e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c1:d2:21:12:bf:ee:82:1c:e5:a1:7c:22:f3:
ae:23:aa:7c:9a:3e:f3:05:1a:46:51:6a:e1:5f:46:
93:43:87:02:11:0e:75:2d:83:a1:aa:38:35:59:9a:
dd:f1:a1:bb:85:0d:21:b5:4d:49:80:a2:05:a6:22:
d8:9c:5e:33:03:e6:5f:f1:47:0c:84:71:41:21:d3:
4b:c6:40:fb:2d:20:1b:39:36:20:f2:1e:b0:54:1e:
e6:33:8d:a5:be:1b:14:d8:52:37:18:62:d1:b6:19:
93:be:49:a6:9d:44:33:4a:22:32:50:fb:62:75:96:
d9:d5:cb:0f:72:e3:ac:9c:b2:36:7f:74:8e:65:9c:
d8:c5:3d:d8:f6:46:5d:fa:c0:12:87:92:4e:9d:a0:
0e:b4:b6:9f:02:5f:63:3d:8e:05:41:e2:fb:2e:10:
78:1e:5b:06:6d:5d:08:f7:57:a9:18:32:58:4a:77:
d3:83:e8:a7:3e:32:07:04:c9:8c:ad:f8:10:7a:40:
8e:ed:11:ea:b4:34:88:6f:45:47:6d:8e:7f:02:cc:
40:4d:fb:be:14:8f:27:d1:67:de:e8:87:70:79:5b:
ab:b5:23:c0:cf:77:fc:1c:37:ea:f5:bc:a9:90:f0:
7b:5e:a6:8d:a6:17:ba:45:4c:15:15:a2:9a:3b:82:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3B:62:2C:D6:80:2F:6D:CE:B7:0E:5A:AE:60:E4:26:3E:A9:2E:63
X509v3 Authority Key Identifier:
keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/ljtiLNaAL23Otw5armDkJj6pLmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.161.0.0/16
131.180.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:c6:fe:11:e6:be:8c:12:96:53:f9:aa:06:59:93:55:58:ae:
52:3b:d0:36:d0:77:79:a8:c3:09:12:ba:a3:1e:65:82:2e:c9:
0b:b1:78:fb:7c:ff:8e:83:32:8c:d9:b1:15:5b:25:23:5e:e7:
39:3d:fa:e6:a8:ad:97:70:4d:8b:dd:e2:3e:60:2d:0a:39:7d:
d8:57:74:09:0a:06:41:73:c2:f3:2f:6d:fb:68:fc:b0:e5:79:
c3:f4:ab:d5:4f:03:b8:8f:91:a3:2b:9d:11:13:ae:26:6c:46:
87:cb:72:e9:ac:e9:a2:75:28:0e:a8:5b:a8:3a:f1:43:51:a3:
55:54:ba:31:5b:21:b1:71:63:03:26:de:2b:b7:90:8d:41:9a:
e2:fd:f9:f3:84:82:93:74:ff:af:1d:3c:86:e1:1b:cd:f9:d2:
64:ca:f7:3a:51:02:78:13:de:f3:15:ec:47:28:af:e8:97:2c:
07:15:6b:d5:de:0c:8a:df:9a:84:f5:4e:f6:06:8e:38:38:5e:
1e:5c:43:d6:21:5e:bb:42:a4:e4:88:94:c6:d7:d1:1e:ea:22:
a8:ff:14:f8:ee:ab:4b:fc:ba:96:45:8d:e6:d9:01:47:e0:c9:
8d:f9:18:c1:dd:36:33:13:3c:e6:2d:e5:f6:27:d2:c4:ce:a7:
27:b0:c6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:15:49 2024 by rpki-client on console-ams.rpki-client.org