Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/1lp51_rXgviC3vXIMjqM12V9ZGQ.roa
File: 1lp51_rXgviC3vXIMjqM12V9ZGQ.roa (raw, json)
Hash identifier: fm0qpQit/8N6XI5j0FgdX5fiqaVsDiUWRGMf5Mhhbv0=
Subject key identifier: D6:5A:79:D7:FA:D7:82:F8:82:DE:F5:C8:32:3A:8C:D7:65:7D:64:64
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01856E2FC16B7F565D78EE5DCB387A17F83F
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/1lp51_rXgviC3vXIMjqM12V9ZGQ.roa
Signing time: Sun 01 Jan 2023 16:35:01 +0000
ROA not before: Sun 01 Jan 2023 16:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 31.129.21.0/24 maxlen: 24
31.129.30.0/24 maxlen: 24
77.83.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:c1:6b:7f:56:5d:78:ee:5d:cb:38:7a:17:f8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 1 16:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d65a79d7fad782f882def5c8323a8cd7657d6464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c8:e3:a1:9b:48:c7:92:2c:3c:26:0c:f1:0c:
fc:8e:b1:12:2a:56:86:d5:0c:2b:f9:5a:a8:f2:27:
37:e3:54:ad:9d:dd:b2:b7:66:26:df:74:dd:81:1c:
de:0b:7c:d1:f5:e2:0f:2e:78:86:6d:4e:48:f7:dd:
37:33:52:7c:c2:dc:06:35:4b:92:05:2e:b4:63:94:
13:d6:ce:61:90:14:61:52:1b:a3:a4:29:73:a7:e4:
36:0c:53:a8:96:d6:12:d7:86:ec:51:28:11:8e:37:
17:6c:3d:0f:59:94:36:05:97:a9:a4:6e:50:47:2b:
2a:e4:8f:3b:30:f4:58:66:1f:c6:9f:56:3c:ad:ec:
3d:ef:69:8c:6e:e6:e1:e2:6f:17:9c:36:55:57:2a:
fb:f2:96:cd:f2:08:f5:ab:bf:51:79:05:4b:6e:c1:
8f:42:a9:84:48:07:ab:2d:fc:43:6e:24:d6:90:73:
95:6a:41:a1:84:72:01:c3:09:2b:69:bf:8e:0a:53:
7f:2f:14:92:b8:28:62:e7:63:d3:6a:cc:5e:cc:7c:
00:5f:e4:41:80:bc:a9:a5:41:6a:b1:3d:fa:52:7b:
01:59:24:ca:94:03:a8:f5:52:8b:b2:36:8f:13:af:
4f:49:ea:fb:f3:14:7d:b2:93:77:90:26:17:27:01:
bf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5A:79:D7:FA:D7:82:F8:82:DE:F5:C8:32:3A:8C:D7:65:7D:64:64
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/1lp51_rXgviC3vXIMjqM12V9ZGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.21.0/24
31.129.30.0/24
77.83.116.0/24
Signature Algorithm: sha256WithRSAEncryption
43:aa:76:cd:0c:f6:b8:20:b6:cf:de:ce:43:b7:22:58:6b:61:
67:84:07:b3:32:33:91:3d:7c:1f:f7:96:c6:21:da:49:33:35:
af:28:1b:cd:0d:25:24:93:a5:9b:f3:95:77:5b:e1:bb:7a:67:
0d:ea:d1:bd:9f:61:02:9a:3d:e1:71:8e:ff:a7:00:6c:d0:c7:
75:18:7a:3c:76:a3:f7:f5:fc:03:6f:c9:39:a2:b7:50:94:17:
e7:c7:92:fd:bc:ed:8b:b8:32:56:35:0f:97:ed:7d:49:06:73:
95:b9:1c:3a:5d:96:a3:6f:42:85:c0:c3:46:9b:14:fa:0a:67:
3d:e1:5f:bd:10:e7:65:8f:b8:49:0c:b6:76:40:06:4f:a8:f9:
cf:7b:e5:b6:8b:c9:fe:4a:db:cf:8e:f8:e6:71:2b:31:96:10:
e7:00:6b:53:5b:a5:6f:65:ab:17:5b:ae:af:a3:32:9a:55:0b:
6b:dd:63:1b:b0:87:d4:dc:09:81:b7:a2:a4:ec:ff:dd:6c:89:
8e:32:d9:93:cc:69:0c:73:0b:4c:66:b9:34:37:01:1f:18:71:
bc:46:67:9e:03:54:6f:14:34:b9:47:02:ac:83:f9:69:38:18:
3b:04:ba:8b:ed:da:61:2f:c2:c0:67:0c:a2:7f:d9:01:ca:f0:
ee:2b:e5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-fra.rpki-client.org