Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/LnwoORS9RdsRg2viEYuwWaktLF4.roa
File: LnwoORS9RdsRg2viEYuwWaktLF4.roa (raw, json)
Hash identifier: /No2M58w7h0ww2eVpBw+uZLa3NYxiM2IedkB0VaNJTw=
Subject key identifier: 2E:7C:28:39:14:BD:45:DB:11:83:6B:E2:11:8B:B0:59:A9:2D:2C:5E
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 01857082C477211D96A21C32EE6BD8590463
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/LnwoORS9RdsRg2viEYuwWaktLF4.roa
Signing time: Mon 02 Jan 2023 03:24:56 +0000
ROA not before: Mon 02 Jan 2023 03:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 194.50.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:c4:77:21:1d:96:a2:1c:32:ee:6b:d8:59:04:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 2 03:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e7c283914bd45db11836be2118bb059a92d2c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:65:06:c5:e0:d5:be:e3:2e:35:e3:3f:4f:
55:b1:fa:31:47:59:47:9d:94:03:37:f3:99:80:77:
c6:30:4b:b1:70:d8:f7:d8:05:9d:47:e6:4c:64:dc:
2f:14:da:eb:2e:26:5b:cc:80:51:01:01:20:84:3a:
3e:84:9d:5d:f9:4f:8d:0b:97:86:2b:a1:8b:8c:8b:
5b:c8:6e:02:ff:11:f3:f0:12:36:90:ce:80:b0:f6:
55:b0:67:8f:bc:43:cc:c4:c8:7f:0c:0b:a7:77:f6:
14:8b:89:3a:68:75:7a:e6:02:b3:8b:2a:d0:06:65:
74:c2:ec:c2:3f:b7:ec:36:8a:2e:dd:32:49:9f:e2:
db:b7:59:e0:9e:5f:43:02:6c:14:c4:34:1a:78:79:
2b:47:ed:14:e9:e4:a2:98:84:cf:8f:a2:36:37:af:
4b:59:de:2e:1e:9a:39:12:32:90:dd:b1:bd:a4:d1:
0d:4d:79:1f:89:53:98:bc:d6:03:b1:46:e1:ea:ed:
5d:c8:ec:b8:3e:8f:82:55:06:5c:95:ce:b5:4f:ea:
e4:b7:2f:43:24:54:3e:be:fe:5d:2a:c0:67:c2:d2:
ba:63:86:72:c3:67:a8:d7:97:eb:e5:3e:2e:f5:19:
d0:84:d9:f5:56:b6:12:69:71:57:f7:46:ac:cd:2a:
37:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7C:28:39:14:BD:45:DB:11:83:6B:E2:11:8B:B0:59:A9:2D:2C:5E
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/LnwoORS9RdsRg2viEYuwWaktLF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.52.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f3:b6:9f:98:b3:6f:eb:91:86:d4:4b:8f:fd:1d:49:7a:34:
12:a8:67:13:08:34:7f:56:e6:b8:27:e2:38:db:65:4f:4c:30:
19:ce:f5:8f:70:ed:9f:6a:9c:91:e8:34:1c:d9:8b:83:da:4f:
e8:b7:4b:14:25:c4:fc:37:d0:2c:71:9f:eb:08:72:1e:71:5b:
b1:11:8b:cd:6b:49:8f:fa:ee:08:8b:b1:67:4d:2f:e9:0e:11:
18:dd:6e:d5:b0:a7:c2:78:6b:09:59:22:21:09:3e:bc:0d:3f:
80:f6:97:5f:43:b7:79:3d:f9:30:63:2f:49:e2:2e:31:41:e6:
45:85:18:62:7b:3d:3e:7a:db:e4:b4:4a:91:6c:55:c2:04:17:
fa:5a:1e:88:d4:2f:5e:a8:6b:ae:bc:87:d9:08:48:1a:f3:6b:
4b:0c:66:ca:cb:6a:cc:71:7a:ff:ad:b8:ae:97:4f:22:80:9b:
40:7e:e7:4b:18:52:03:83:52:78:0b:d3:a0:4e:7f:f8:00:06:
f8:f4:18:f2:46:74:6e:1d:04:53:32:5e:d6:ad:db:50:da:8c:
f7:bb:7b:fb:10:99:59:37:ec:9b:01:dc:aa:aa:e5:8a:5e:52:
cc:91:c7:e2:d5:fd:1c:82:22:70:38:f3:eb:cf:f0:f2:f8:9b:
b1:bb:2b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:59 2024 by rpki-client on console-fra.rpki-client.org