Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eLHD_ks5vEuhlEdEPlNwuFh3D4g.roa
File: eLHD_ks5vEuhlEdEPlNwuFh3D4g.roa (raw, json)
Hash identifier: +mi+CRhHhRGPWutuTix1KtCzjT+E8XJizp016QXxras=
Subject key identifier: 78:B1:C3:FE:4B:39:BC:4B:A1:94:47:44:3E:53:70:B8:58:77:0F:88
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C207BEDE3BFBDD47F787E83F5667B1558
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eLHD_ks5vEuhlEdEPlNwuFh3D4g.roa
Signing time: Thu 30 Nov 2023 13:47:21 +0000
ROA not before: Thu 30 Nov 2023 13:47:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50236
IP address blocks: 93.123.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:7b:ed:e3:bf:bd:d4:7f:78:7e:83:f5:66:7b:15:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 30 13:47:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78b1c3fe4b39bc4ba19447443e5370b858770f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bb:fe:24:64:db:31:73:00:74:6c:b1:25:c1:
29:a7:68:d7:4c:39:2c:94:57:ea:77:d9:2b:d0:0b:
15:73:4b:3c:b8:14:16:bb:d3:11:fb:7e:94:91:55:
eb:70:f1:96:88:f8:bf:68:83:ab:f5:8b:89:8d:f3:
7d:29:5f:3e:47:3f:86:0a:d8:a6:07:39:e8:eb:d5:
ad:bc:cb:b1:93:ca:6c:d3:7f:51:d6:4b:c4:15:5a:
81:0b:bf:18:ca:d3:af:f3:a5:45:3d:19:0e:d8:88:
33:fc:70:0f:50:f1:10:12:30:f2:d8:70:59:69:46:
7c:9c:c0:45:e7:64:8e:f9:bc:6e:7e:f2:32:a3:b6:
80:7b:56:a9:74:c8:be:5b:68:62:98:02:a0:38:6f:
57:18:05:37:1f:2e:9c:03:cb:0e:28:d4:c4:c1:d9:
ec:0f:f4:0f:3b:78:e2:b4:ac:2c:2b:80:0d:40:b2:
b3:25:22:66:1e:89:7a:d2:30:cb:3d:da:11:29:f3:
95:6e:d1:7d:db:8a:2a:25:b3:61:4a:c8:a4:65:27:
7b:48:a1:d4:db:1c:8f:14:f7:67:78:08:9a:3c:84:
18:52:3b:07:0b:db:c1:ff:89:e6:5b:48:a5:eb:af:
10:30:7d:f7:19:de:51:97:07:8a:47:bc:a6:77:68:
83:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B1:C3:FE:4B:39:BC:4B:A1:94:47:44:3E:53:70:B8:58:77:0F:88
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eLHD_ks5vEuhlEdEPlNwuFh3D4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.116.0/24
Signature Algorithm: sha256WithRSAEncryption
28:51:51:0a:b5:d5:91:67:1b:31:41:9c:54:fa:47:8d:e4:c6:
19:b5:44:6e:6c:01:03:e4:74:e1:19:ba:a2:88:e2:80:f4:f8:
be:fc:07:b8:f0:8c:82:fc:8a:41:9b:84:d5:b4:29:92:de:64:
5a:c4:0d:62:01:b7:78:42:c1:ae:b1:58:0c:3b:56:dd:70:f3:
d8:6a:b6:dd:54:58:9b:6d:3e:fd:b3:2d:a7:b5:c8:20:6e:3d:
01:6d:28:86:25:43:d8:f0:53:e3:08:41:f7:34:17:f7:f2:47:
db:8a:42:9b:d1:8a:99:97:c3:0e:c0:d4:7e:17:d8:63:88:b0:
cd:26:74:44:d0:fc:c3:4b:92:35:64:08:77:e1:ba:22:eb:5c:
ab:f8:61:c1:37:e0:b3:af:c1:94:7e:6c:77:16:aa:c8:75:7c:
03:12:72:ec:9a:79:42:9d:a8:76:4a:bd:2c:2e:ff:69:55:16:
12:9a:0b:15:01:10:ee:6a:92:92:55:0f:96:97:21:ce:32:dd:
74:1c:6a:87:82:00:6d:54:d1:7a:90:b7:9a:2a:b9:ee:b8:f3:
1a:1d:aa:cd:83:38:6d:d0:8f:3f:9a:ed:22:03:99:e8:ab:d9:
4d:91:65:17:8e:c5:12:fa:cb:3b:a1:7b:24:44:e2:8d:04:b6:
8e:d5:f6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 12:37:12 2023 by rpki-client on console-ams.rpki-client.org