Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/lca5ocvr9aNJeIPR7L8ZjDwzayw.roa
File: lca5ocvr9aNJeIPR7L8ZjDwzayw.roa (raw, json)
Hash identifier: YlOb/YzDH8wlvudm4GiH/oF/iEiMj5w5pXCZQ3NKvg0=
Subject key identifier: 95:C6:B9:A1:CB:EB:F5:A3:49:78:83:D1:EC:BF:19:8C:3C:33:6B:2C
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018AE265D8C1B179A21A5D52249FC28E053C
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/lca5ocvr9aNJeIPR7L8ZjDwzayw.roa
Signing time: Fri 29 Sep 2023 19:23:59 +0000
ROA not before: Fri 29 Sep 2023 19:23:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397966
IP address blocks: 185.255.113.0/24 maxlen: 24
192.144.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e2:65:d8:c1:b1:79:a2:1a:5d:52:24:9f:c2:8e:05:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Sep 29 19:23:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95c6b9a1cbebf5a3497883d1ecbf198c3c336b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:8e:15:40:43:bb:c0:09:ce:9a:24:de:fa:
e9:7d:51:0d:80:a9:17:73:31:21:bd:49:e7:25:e8:
3b:93:77:5e:4b:17:87:d1:8b:aa:a7:c7:b9:2f:c2:
45:88:98:6f:5a:39:b1:c9:e7:b7:dd:43:ef:a4:32:
74:d3:59:77:bb:50:2d:e9:67:1c:69:c0:71:e6:24:
9e:28:41:77:de:38:d8:4a:7f:67:96:94:d4:ca:4b:
94:de:24:51:75:d9:61:8c:51:03:c2:c9:db:3a:01:
c8:34:49:87:67:74:56:db:61:55:ca:83:42:a5:08:
72:21:32:0a:ec:27:56:bd:b8:5b:44:d3:45:48:30:
5d:aa:ce:76:9d:fb:16:5f:34:db:4b:da:d3:4a:c2:
34:72:8c:a7:ed:89:74:42:1f:06:79:6c:65:2b:9b:
c0:94:25:78:7a:6d:5b:95:60:28:af:22:c6:b2:f6:
76:6e:f2:4a:bb:35:4c:d2:4d:db:1e:ed:fa:b7:d1:
50:5b:ef:60:ca:56:87:24:8e:8d:2e:a7:b1:69:80:
17:4b:41:ae:7b:7f:c1:14:8c:58:26:7d:2d:08:c4:
10:6f:60:fe:73:99:83:2d:13:8d:47:a0:1f:fd:67:
fc:8a:e9:2c:70:9a:a0:60:d7:5b:8e:1b:63:f6:aa:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C6:B9:A1:CB:EB:F5:A3:49:78:83:D1:EC:BF:19:8C:3C:33:6B:2C
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/lca5ocvr9aNJeIPR7L8ZjDwzayw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.113.0/24
192.144.32.0/24
Signature Algorithm: sha256WithRSAEncryption
55:7a:59:e9:c2:54:c5:dd:12:51:f1:07:fd:96:c7:88:4c:46:
84:31:95:39:c8:46:1b:56:39:c4:3e:b2:16:47:8d:b2:a4:fe:
d4:36:7f:30:21:fb:29:18:41:01:65:b2:e9:6a:6e:23:8a:cc:
fa:59:57:a1:4c:d8:2f:8b:e7:01:a1:ca:7a:bc:f4:3f:bf:40:
8d:48:7e:14:23:c9:df:d7:31:38:ea:79:80:f0:86:6c:2e:b9:
c9:3f:12:a9:0c:cf:62:52:10:4e:bf:fb:d3:47:d4:47:73:2f:
e7:bf:c0:42:e6:9e:d0:0c:fe:d3:34:a6:e9:cd:6e:79:ce:c6:
27:f5:f8:3c:2f:b1:31:51:25:1d:ff:af:ab:de:47:ce:a8:8f:
40:76:9c:5e:6e:2f:35:bd:41:02:72:18:52:e3:f9:90:03:ee:
47:1d:71:7a:c3:2f:06:11:d8:d8:cb:96:0a:92:ff:2f:c8:6e:
16:f7:e7:31:28:1b:e6:3e:45:3e:7d:da:dd:10:49:3c:bd:38:
ee:f8:f3:31:56:d5:e5:e4:40:98:f0:c4:e4:28:c2:4c:77:53:
e9:9f:71:90:6b:bf:f1:63:ee:f5:05:2f:ba:d7:50:5f:23:65:
2b:1f:9a:90:60:60:6b:e3:60:3c:b5:83:df:dc:2d:32:90:13:
72:4b:4d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:58 2024 by rpki-client on console-ams.rpki-client.org