Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/lQXQ80_jegfQcJgRcrgcpHgzymk.roa
File: lQXQ80_jegfQcJgRcrgcpHgzymk.roa (raw, json)
Hash identifier: tIYffDdz9VytMYno6+2cQY9r+NVedKXXKjjJmKiedQA=
Subject key identifier: 95:05:D0:F3:4F:E3:7A:07:D0:70:98:11:72:B8:1C:A4:78:33:CA:69
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01893EF3288BFADFD7495259707B959ABF08
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/lQXQ80_jegfQcJgRcrgcpHgzymk.roa
Signing time: Mon 10 Jul 2023 08:37:50 +0000
ROA not before: Mon 10 Jul 2023 08:37:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45027
IP address blocks: 31.129.30.0/24 maxlen: 24
141.98.233.0/24 maxlen: 24
77.83.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:f3:28:8b:fa:df:d7:49:52:59:70:7b:95:9a:bf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jul 10 08:37:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9505d0f34fe37a07d070981172b81ca47833ca69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:5e:87:6b:38:c0:db:03:72:68:8f:7c:99:
77:8e:e5:70:92:69:6b:bf:ec:06:74:f4:9a:be:2c:
c2:ea:6c:17:84:d6:6c:c5:3c:81:14:26:19:0b:af:
ba:0b:bf:27:d6:bd:49:ee:91:bc:e4:de:1a:43:8c:
50:91:48:43:1d:d4:d1:a8:f1:70:15:21:0e:ad:01:
21:b5:ce:6b:53:ba:43:dd:5f:0a:8e:38:01:57:63:
43:c6:bf:e7:95:98:4a:92:25:21:3e:7b:6c:c9:8a:
11:b9:9a:de:e4:02:f4:23:04:bd:d0:43:5d:4b:eb:
59:a3:61:23:c5:be:fd:e8:00:0b:76:45:98:45:48:
08:e6:ac:71:ce:c3:96:82:8c:94:bf:7d:d8:89:be:
c2:bd:ca:21:37:d0:fd:47:da:90:60:62:39:60:a8:
2b:ee:75:82:37:eb:78:08:ff:a7:07:29:ac:fd:73:
d3:b5:90:a7:d6:0a:b8:e3:6f:27:16:a7:59:fd:f7:
a9:dd:5d:f7:be:e9:ad:bf:64:4a:86:62:f2:0c:4c:
47:d7:23:da:a7:94:17:e1:25:21:92:83:42:39:0a:
e9:a6:5d:12:66:9c:3a:3c:6a:e5:c1:42:8e:34:85:
2e:0f:c8:6a:ed:0a:ee:fa:92:e5:42:83:b8:3d:45:
49:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:05:D0:F3:4F:E3:7A:07:D0:70:98:11:72:B8:1C:A4:78:33:CA:69
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/lQXQ80_jegfQcJgRcrgcpHgzymk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.30.0/24
77.83.117.0/24
141.98.233.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:27:6b:09:1c:e7:ee:96:31:49:7c:c2:aa:bc:05:0f:d7:20:
7e:05:2e:2e:85:e4:80:5d:96:4d:f7:fb:9e:50:92:9d:43:a3:
db:5f:b8:88:ec:06:c2:41:f5:62:3c:4d:2a:67:09:60:51:5d:
a1:e5:f2:aa:7b:fc:15:47:a9:e4:3e:d0:8f:d6:ad:97:dc:b0:
92:a9:01:ae:a6:49:97:10:55:aa:1b:23:90:38:75:4b:70:34:
6f:d2:c6:a4:52:67:5d:70:fb:70:67:3a:e0:e6:13:1f:cd:12:
68:3c:db:42:7a:bb:93:af:e0:d2:79:97:ac:a1:54:b4:56:c7:
f0:fd:cb:08:f7:72:2c:f0:da:78:00:cf:77:16:df:fa:47:ef:
1c:3d:45:d4:d8:94:01:c2:6a:58:5d:e1:b7:61:76:29:85:2b:
0c:fe:29:9d:f2:2f:2f:bc:34:6b:05:5d:59:aa:d6:28:08:ad:
2d:1e:a6:f5:c4:de:a4:b8:65:b5:0b:9b:e8:6a:27:ce:42:13:
b3:84:a3:de:52:11:bc:3a:c9:7a:ff:49:95:32:6d:6b:78:33:
70:20:fc:c4:98:c8:13:05:75:e9:5e:26:a7:0b:44:98:c7:37:
f3:33:bc:82:e3:24:92:e8:a4:cf:b9:aa:c8:ba:81:e6:41:51:
1a:2b:5a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-fra.rpki-client.org