Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L5YRhBOoU_hWHqFmEz7wI3p_N88.roa
File: L5YRhBOoU_hWHqFmEz7wI3p_N88.roa (raw, json)
Hash identifier: GlHDnoi7800nqK8m3oCoQLJefpnfZIirxNuFZzXtwZ0=
Subject key identifier: 2F:96:11:84:13:A8:53:F8:56:1E:A1:66:13:3E:F0:23:7A:7F:37:CF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E9F05DDD428BD85B8ABB47AB80BC4451F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L5YRhBOoU_hWHqFmEz7wI3p_N88.roa
Signing time: Tue 02 Apr 2024 13:35:45 +0000
ROA not before: Tue 02 Apr 2024 13:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213323
IP address blocks: 194.48.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 09:09:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:05:dd:d4:28:bd:85:b8:ab:b4:7a:b8:0b:c4:45:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 2 13:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f96118413a853f8561ea166133ef0237a7f37cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5a:20:a3:f9:cf:e1:93:51:42:34:62:15:1e:
43:91:8e:3e:1e:2c:a6:2d:20:b4:9e:ef:ec:7f:98:
e0:56:54:33:7e:e8:63:38:82:70:32:d0:5c:ab:9a:
34:07:6c:57:de:f6:8b:92:a4:20:0f:36:ae:c0:68:
23:57:80:33:12:cd:44:e4:e7:06:b4:e1:bc:62:8e:
ce:16:ad:2a:11:57:8b:31:c5:0b:5d:54:71:f3:44:
da:7c:0a:e9:bd:1a:86:5a:cc:3e:e7:26:ed:68:03:
d1:e4:58:62:f4:5c:ef:d3:6d:45:34:45:d2:07:0a:
40:0c:a6:c0:6c:aa:ee:c4:48:e4:a2:ee:52:28:eb:
83:43:ba:fd:9b:8f:a6:92:1e:92:48:ba:dc:5c:87:
fa:2b:de:9a:52:92:77:cc:87:54:08:de:00:2d:3e:
f7:59:47:18:44:1f:4e:22:2b:d3:a0:47:de:68:e3:
29:10:c5:56:7e:a6:20:23:29:9f:cb:8a:be:b2:97:
55:ee:66:21:7d:5a:42:e1:2a:74:bb:27:35:43:8b:
51:d2:a8:f2:55:51:94:be:b0:3e:47:b8:9e:12:2b:
3f:37:c4:96:77:d0:4c:f2:a1:28:d8:c1:80:ff:85:
b4:99:be:0f:59:7d:5d:01:ac:fa:3e:d4:f4:50:3f:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:96:11:84:13:A8:53:F8:56:1E:A1:66:13:3E:F0:23:7A:7F:37:CF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L5YRhBOoU_hWHqFmEz7wI3p_N88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:6d:3c:e0:19:51:63:fa:59:36:56:89:01:de:ac:fb:40:e0:
ae:67:6f:9d:61:05:07:cc:82:80:1c:68:83:87:08:7d:8c:50:
30:b0:c5:73:17:3a:4a:14:bd:1f:2d:6f:7f:84:ef:82:bb:0b:
af:59:ce:f0:6a:c8:3e:4f:1a:8b:f0:76:aa:09:31:f0:ae:2f:
91:ee:58:ae:d4:0c:bd:23:53:5f:bf:3a:38:ff:97:f5:4f:79:
cf:68:c3:c3:f6:94:94:4c:f8:ce:e5:4a:30:1d:5f:3e:79:51:
e5:7e:d1:8c:ba:d5:fe:c8:84:d6:3d:c0:13:08:5f:97:f0:8c:
9c:21:19:82:8b:e2:b0:70:a5:dc:43:97:d9:fc:d0:93:47:27:
77:b5:2b:14:84:a4:4d:db:a8:c8:92:3e:89:34:5c:08:9b:15:
12:db:ac:72:6f:8a:e2:ef:a9:7e:9a:f0:f9:16:96:0e:12:37:
4e:70:65:08:7d:45:8e:cb:d3:28:0f:3a:ee:aa:9b:6c:90:2c:
1f:47:86:07:90:c7:7f:92:42:f7:91:a2:42:d3:92:56:1a:32:
c6:88:6e:87:c4:f8:5c:6b:41:03:87:bd:4b:f7:89:3b:81:70:
f0:82:3d:35:e7:b9:b0:f4:31:e9:2c:3e:e1:04:fc:b2:9d:cd:
14:92:09:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:04 2024 by rpki-client on console-fra.rpki-client.org