Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lpMhlJL1ly7Jsue2YTav8b5ovIA.roa
File: lpMhlJL1ly7Jsue2YTav8b5ovIA.roa (raw, json)
Hash identifier: rj6CWDJrZmc/t1bVORHxzWxIEg9d7gSfTf4Sz9PtKlU=
Subject key identifier: 96:93:21:94:92:F5:97:2E:C9:B2:E7:B6:61:36:AF:F1:BE:68:BC:80
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F670C3C0177832FDFD5AB53D8385C9C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lpMhlJL1ly7Jsue2YTav8b5ovIA.roa
Signing time: Sun 01 Jan 2023 22:15:02 +0000
ROA not before: Sun 01 Jan 2023 22:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208226
IP address blocks: 194.87.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:0c:3c:01:77:83:2f:df:d5:ab:53:d8:38:5c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9693219492f5972ec9b2e7b66136aff1be68bc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:51:60:4d:7c:b1:29:bb:db:39:d9:bc:b5:93:
1b:ca:f0:db:4b:06:8b:b9:2f:68:48:7b:0c:cd:99:
54:1d:a9:6e:aa:03:9d:35:7a:07:86:ad:bb:b9:7b:
9d:ef:30:4e:25:c5:85:88:8f:b2:0f:a0:67:31:6f:
68:f7:bc:71:31:e5:20:95:36:d0:a6:63:7c:39:cd:
63:cb:9e:c9:26:77:bb:1d:3e:08:29:83:10:a6:c7:
dc:14:86:70:6d:04:27:c0:53:b0:91:b0:30:bb:f2:
ef:1d:3c:16:7f:c0:0a:55:e8:c4:64:3c:21:07:48:
6d:49:7b:ed:c9:c5:36:ef:4f:28:6d:59:0c:52:bc:
f5:71:27:5c:1b:a7:17:97:1a:0f:14:9d:64:0e:87:
8d:79:67:3b:52:c9:33:61:ed:a7:9e:a8:ab:32:bf:
9c:3a:e3:d4:e6:bb:7f:e2:57:24:a6:3b:64:9e:12:
6e:6b:4a:7c:13:89:b0:c0:0f:db:9c:55:fe:5d:c3:
05:09:1a:2d:0f:fc:2f:4f:10:a7:0a:3f:0d:bf:df:
2a:f0:68:2e:70:3e:a0:54:d6:86:cc:b3:ad:71:0a:
e7:c7:7f:84:e2:e3:6e:c7:04:48:e2:d4:fd:17:71:
32:a5:22:33:ba:b3:ef:cc:c2:12:6a:7f:6e:b9:19:
07:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:93:21:94:92:F5:97:2E:C9:B2:E7:B6:61:36:AF:F1:BE:68:BC:80
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lpMhlJL1ly7Jsue2YTav8b5ovIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.217.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:9d:4d:48:47:d8:e2:1d:d1:13:42:3f:6e:9f:af:21:14:ec:
7d:8c:8e:54:e8:49:8a:ed:8d:b6:9d:f7:c5:ed:8c:84:a1:d5:
28:49:c2:d0:82:da:b6:c0:cf:7a:fd:a8:7e:0e:3c:c5:fa:63:
f0:22:e1:d4:bd:ef:b8:68:e3:2f:d6:8f:73:22:16:d9:ea:85:
6c:43:d2:d7:22:e8:8b:ee:96:7a:c6:aa:a8:20:29:71:43:5c:
e2:bc:c4:23:a3:27:c9:73:ba:61:60:f9:c7:41:cf:d9:d5:b3:
64:b5:d3:cc:68:26:bd:76:d5:d5:d4:40:aa:8b:d1:ab:60:21:
94:ec:70:55:89:ff:e2:a6:37:8d:2b:59:56:e0:52:22:6f:65:
0e:8e:9b:b9:1a:72:c1:e4:c8:ac:f2:ee:0c:f1:a0:c7:ea:8f:
86:6e:41:0a:3e:41:48:eb:b0:f5:28:2f:06:e6:91:06:39:51:
92:51:b6:69:36:7f:a2:7a:02:f3:91:e7:e5:7f:61:93:ad:eb:
a3:4c:62:78:af:c2:94:74:c6:92:0f:e4:a6:82:5b:16:f7:5b:
0c:fd:c2:83:b2:df:b1:54:3e:b6:cf:90:c0:59:93:16:e1:92:
51:4a:37:28:0d:5b:2b:ee:59:39:fd:b9:e2:80:1a:53:dc:e3:
62:f9:85:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:10 2023 by rpki-client on console-fra.rpki-client.org