Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/lzZ5p5CgrPbAZuDL9MTqLA7xfgw.roa
File: lzZ5p5CgrPbAZuDL9MTqLA7xfgw.roa (raw, json)
Hash identifier: YTkQQJ+5eBuj2JCLyiPUfZK1JcJDOPMsmRuBZfeOjXQ=
Subject key identifier: 97:36:79:A7:90:A0:AC:F6:C0:66:E0:CB:F4:C4:EA:2C:0E:F1:7E:0C
Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial: 01856C9CE18EFB0ADD6959E3E6D02CC0FDA8
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/lzZ5p5CgrPbAZuDL9MTqLA7xfgw.roa
Signing time: Sun 01 Jan 2023 09:14:58 +0000
ROA not before: Sun 01 Jan 2023 09:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 195.43.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:e1:8e:fb:0a:dd:69:59:e3:e6:d0:2c:c0:fd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Validity
Not Before: Jan 1 09:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=973679a790a0acf6c066e0cbf4c4ea2c0ef17e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:22:7f:8e:34:ac:5f:49:0f:56:26:b8:df:6f:
4a:26:63:aa:30:53:3e:66:dd:45:d5:6f:da:c3:41:
24:a8:60:3c:70:7c:a3:24:38:6f:4a:a4:29:35:18:
80:5c:63:d0:fc:1c:bc:60:a3:82:2c:2b:9b:11:e2:
56:e0:f3:ee:b4:5d:53:52:aa:98:2d:83:d7:38:5a:
6f:ca:68:18:43:a7:92:9c:4a:6a:bb:bc:91:8d:c1:
59:61:a2:b8:49:51:86:7d:22:3e:f0:53:7e:78:b9:
ae:80:8b:58:cb:8c:ff:a9:47:74:2c:f9:92:89:52:
b0:55:65:ba:29:a5:9d:c8:5f:bc:c9:67:d6:7e:df:
c5:6a:13:e2:31:5d:c3:95:c9:ab:70:2d:3b:fd:38:
dc:9a:9e:f7:6b:57:22:d3:fb:51:f5:65:26:46:d7:
62:39:32:a1:41:7f:33:26:15:24:09:91:02:30:13:
69:47:63:af:4e:a7:59:fe:1c:45:57:12:7d:c2:b3:
2d:2e:74:8a:f6:1a:2b:c9:d7:72:89:35:3a:29:6f:
22:97:a2:64:22:b5:6a:13:03:d8:32:99:d8:bd:15:
10:cb:62:ac:e2:72:3c:98:3d:15:90:c9:4e:63:73:
8b:ae:7c:cc:2b:38:f7:cf:c7:68:df:3e:3a:a8:29:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:36:79:A7:90:A0:AC:F6:C0:66:E0:CB:F4:C4:EA:2C:0E:F1:7E:0C
X509v3 Authority Key Identifier:
keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/lzZ5p5CgrPbAZuDL9MTqLA7xfgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.130.0/24
Signature Algorithm: sha256WithRSAEncryption
29:38:af:13:72:b2:c8:ed:05:cb:14:7d:15:7c:2d:2d:bf:2f:
66:33:ca:43:27:26:d9:33:d2:09:22:27:56:11:f5:38:42:55:
96:17:c1:e1:99:5d:ad:d6:73:9a:b1:ea:f4:e9:67:a9:1f:18:
56:ad:80:0d:90:86:3d:fd:b2:a0:4c:e0:e3:44:14:55:72:74:
72:16:c6:c7:08:e3:f3:77:da:4a:90:f4:e5:c3:f4:5f:82:fa:
e4:c4:32:3d:99:b2:92:3f:d8:01:53:32:f7:80:15:11:84:ce:
e2:63:63:47:63:67:f3:e8:78:a8:16:df:4d:35:13:58:1f:8f:
2c:c7:30:b4:9a:61:f3:d9:95:5c:4e:d9:3b:c6:90:5d:12:88:
47:55:c8:60:f0:e9:b2:1e:16:81:02:d5:67:45:63:15:11:93:
3e:68:6c:6c:82:3c:6b:15:ab:30:d7:7c:9b:32:ca:d8:ce:39:
18:ea:95:44:62:97:92:7f:9b:05:00:f3:8c:02:4f:be:a5:a1:
2c:8a:d1:a7:7f:a1:93:75:3c:ce:0f:9a:65:da:88:96:89:d9:
40:96:4a:d9:30:64:67:6d:35:9f:bf:61:14:f5:77:7a:7c:82:
ca:e4:8f:ab:48:45:2e:58:40:f8:90:e9:cc:b3:bf:c3:f4:b8:
79:e8:a2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:07 2023 by rpki-client on console-fra.rpki-client.org