Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LR8Ffk0qx073gVgAkgLoFsooaMU.roa
File: LR8Ffk0qx073gVgAkgLoFsooaMU.roa (raw, json)
Hash identifier: EY/2J/uDeKaQwt7HK81JloNjohc5TFs+H8b4+zyfn1Y=
Subject key identifier: 2D:1F:05:7E:4D:2A:C7:4E:F7:81:58:00:92:02:E8:16:CA:28:68:C5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B48605AEAFCA3E25878746214F43BD9C9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LR8Ffk0qx073gVgAkgLoFsooaMU.roa
Signing time: Thu 19 Oct 2023 14:39:16 +0000
ROA not before: Thu 19 Oct 2023 14:39:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48314
IP address blocks: 194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:60:5a:ea:fc:a3:e2:58:78:74:62:14:f4:3b:d9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 19 14:39:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d1f057e4d2ac74ef78158009202e816ca2868c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ba:98:08:63:39:1a:e3:66:01:9c:f9:31:5e:
e5:f1:9e:86:76:14:da:46:de:ec:d2:b3:38:ad:c4:
aa:ab:1e:d7:3c:0c:54:e6:8d:1d:e0:41:6a:c5:82:
7b:39:d6:b8:cd:af:82:41:4f:62:70:c6:7e:84:77:
cc:e9:1a:dc:3c:23:86:47:28:a5:86:94:38:b8:5a:
7f:1e:1b:c3:bc:54:8b:5c:29:d7:bf:67:88:14:64:
2f:85:ac:68:a3:3e:97:f1:e7:d7:6b:33:9d:92:eb:
4c:f8:6b:0c:45:de:09:36:4e:20:4f:9a:91:29:72:
fe:a0:91:63:a0:bb:1e:7b:b9:ff:ec:2b:47:b2:0d:
ec:1d:59:cb:02:ed:6a:21:85:c0:ca:ec:35:e4:45:
c2:90:6e:c9:cd:b0:99:55:2c:2f:a5:b3:b7:6c:65:
cd:62:9d:da:e6:d0:10:6d:e6:42:ae:88:01:fa:73:
1b:30:50:a5:0f:91:75:59:5d:9b:45:6b:1a:af:07:
09:a4:68:8f:a6:b2:08:1c:a7:9d:b6:e7:a8:a5:45:
d6:26:83:6b:0c:7e:aa:e6:e7:1d:23:ce:0f:c3:45:
49:1a:b1:24:5a:db:3a:cc:1a:a7:ce:c6:9f:39:70:
f7:16:93:ae:d1:c8:48:97:e6:2d:84:0d:94:32:ae:
5a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1F:05:7E:4D:2A:C7:4E:F7:81:58:00:92:02:E8:16:CA:28:68:C5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LR8Ffk0qx073gVgAkgLoFsooaMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
76:cc:f8:6e:9c:6b:e2:f1:aa:52:6f:33:34:9b:85:df:56:1e:
00:8e:2f:c9:4c:3b:a3:86:df:29:ef:70:df:e2:35:b0:ec:02:
fb:e7:4b:01:0a:f5:91:d6:c3:a1:b8:b4:7a:73:d7:37:d9:bc:
3a:83:ea:6c:21:5f:24:18:e3:f7:4f:e6:89:b9:ca:2a:a5:e9:
4f:8e:ec:74:6f:aa:f4:d4:9a:bc:71:74:2a:7b:d8:4a:db:92:
8e:32:17:ad:d3:75:3b:2f:dd:c9:03:f3:f1:c7:f3:0b:35:5d:
51:4b:4c:71:62:10:ac:e2:34:30:f0:49:b0:b0:85:72:72:95:
27:03:12:45:aa:9f:18:3a:68:78:20:06:86:03:7b:4a:48:ac:
4c:25:b0:6e:f6:62:72:2c:22:32:99:4a:67:3b:f6:e0:93:c6:
46:a1:32:f1:e5:58:3b:9d:13:67:8f:7e:06:fe:d2:a7:b2:01:
7b:e8:e9:f8:8b:bb:27:f9:1e:c9:ea:dd:6d:80:a1:65:3d:23:
a0:ad:5f:8b:50:a8:3f:d8:4b:e1:4c:60:cb:00:31:61:6c:b8:
6d:3d:77:b5:14:d7:8d:0f:c2:90:8e:87:9b:57:a7:21:d6:d7:
2d:09:8e:be:16:9c:6c:52:e4:1b:c7:8a:0b:3e:57:b8:4c:8e:
73:64:ae:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:10 2024 by rpki-client on console-ams.rpki-client.org