Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Lbf872dgwAe69zQW8IfsW_BJRVU.roa
File: Lbf872dgwAe69zQW8IfsW_BJRVU.roa (raw, json)
Hash identifier: xgGNLUnF/wrzrHiaJQRXmGu/Z2tPMvjrAWpMJP+Vo+w=
Subject key identifier: 2D:B7:FC:EF:67:60:C0:07:BA:F7:34:16:F0:87:EC:5B:F0:49:45:55
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F66FF49F843231F2B6D99E9ED1DBCC8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Lbf872dgwAe69zQW8IfsW_BJRVU.roa
Signing time: Sun 01 Jan 2023 22:14:58 +0000
ROA not before: Sun 01 Jan 2023 22:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 194.87.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:ff:49:f8:43:23:1f:2b:6d:99:e9:ed:1d:bc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2db7fcef6760c007baf73416f087ec5bf0494555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4b:e2:d0:83:54:bb:7b:c3:bc:b0:d3:08:c7:
2e:0a:ec:f2:88:8d:28:19:26:33:77:bf:3a:e2:b9:
6d:53:58:b0:e0:a1:0e:e0:a5:57:de:6c:f7:e2:2b:
9d:9f:c3:74:68:96:7d:83:9b:30:f9:ab:90:ea:ff:
4a:6a:51:80:49:25:e6:86:6f:90:67:89:6e:da:f4:
2d:ed:8c:bc:e7:24:33:4a:c5:b1:a3:49:52:dd:cb:
94:c3:fb:7c:ce:0e:a9:18:f5:3f:1b:e4:b8:32:78:
d6:ba:ee:c9:ec:69:9e:3c:bd:cb:42:dc:ab:18:bc:
6f:5d:89:56:96:cd:d6:2b:2c:87:8f:55:99:2f:0d:
fb:85:91:67:54:89:c9:9f:cf:fd:cc:23:04:3d:ec:
02:28:6c:a8:f9:7b:72:64:ec:b9:6a:f0:ec:63:13:
30:3f:f2:95:95:c8:6c:b3:1e:05:4a:a5:08:26:be:
79:d4:87:ad:6c:d8:1e:4b:98:2f:c9:9f:9b:cd:0a:
5f:9b:03:2b:e2:08:58:3a:3d:ce:31:3a:da:a0:e1:
e9:45:06:59:f9:01:cc:97:b5:96:a9:26:66:e1:34:
47:24:64:a7:d5:2e:d0:87:fc:13:1c:32:4a:55:a4:
0a:54:6c:87:6b:5e:79:a5:34:98:fc:d8:52:b5:d1:
80:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B7:FC:EF:67:60:C0:07:BA:F7:34:16:F0:87:EC:5B:F0:49:45:55
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Lbf872dgwAe69zQW8IfsW_BJRVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.224.0/24
Signature Algorithm: sha256WithRSAEncryption
41:92:32:6f:84:9d:d2:21:32:0a:bf:65:9c:3f:0d:60:8e:e9:
a8:b8:38:d5:d0:05:44:2a:00:a0:53:a9:51:b8:56:13:68:0e:
9b:dd:36:0c:1f:41:ff:d0:c0:75:50:6a:04:c6:51:1d:59:0c:
e1:3a:63:c5:ec:55:3e:4e:64:0b:25:cd:91:fb:15:94:a1:8d:
8c:6e:e9:91:3a:6a:f6:da:97:25:86:83:b6:85:01:f0:09:7e:
3d:89:f2:dd:f1:5d:c9:be:ce:90:90:00:be:3b:22:ad:47:12:
99:8a:33:1c:ad:6f:f8:62:79:61:16:5e:a0:6b:6b:e6:02:c6:
3c:57:d9:f4:0b:3d:0d:e7:2a:13:5f:0c:4c:62:62:07:b6:86:
93:78:b7:f7:ff:54:69:36:56:7f:0e:33:26:39:04:dd:31:84:
e9:7b:89:30:28:c0:0d:de:28:88:d6:c1:5c:b5:e4:2d:57:0a:
1b:66:71:d8:73:79:aa:42:cf:31:e2:7e:5c:38:2e:65:f9:39:
33:8b:25:34:3e:92:9d:44:a2:a5:ac:ca:15:24:f0:69:13:e2:
fd:48:47:a1:c1:92:c8:42:02:4b:78:0b:35:da:f3:c6:46:9a:
04:29:ac:2e:6a:fe:c8:87:83:97:05:5f:97:d2:8e:63:aa:9c:
74:7b:67:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 06:33:15 2023 by rpki-client on console-ams.rpki-client.org