Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lkZK_dA5ugXnUipYC88s5Q_sG8E.roa
File: lkZK_dA5ugXnUipYC88s5Q_sG8E.roa (raw, json)
Hash identifier: 3rk7pUbJBY2vLLyYEW9v+Qt2uqVvAkxH5SY1X2tAeyY=
Subject key identifier: 96:46:4A:FD:D0:39:BA:05:E7:52:2A:58:0B:CF:2C:E5:0F:EC:1B:C1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C598CC39CACFF194FDF0055B988733D2A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lkZK_dA5ugXnUipYC88s5Q_sG8E.roa
Signing time: Mon 11 Dec 2023 15:44:06 +0000
ROA not before: Mon 11 Dec 2023 15:44:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215862
IP address blocks: 193.42.32.0/23 maxlen: 24
87.121.86.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:8c:c3:9c:ac:ff:19:4f:df:00:55:b9:88:73:3d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 11 15:44:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96464afdd039ba05e7522a580bcf2ce50fec1bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a7:b4:06:1c:2a:f2:9b:8b:a4:b3:6c:11:79:
28:69:1a:f8:95:b5:b8:fe:f8:c7:d9:e6:c7:4b:b1:
8f:46:07:e6:9d:93:ca:2e:66:53:39:95:fa:6f:e1:
c5:ba:35:42:d7:76:04:b1:c9:e8:a5:83:4f:bb:e3:
ef:78:b9:22:cf:36:11:fe:81:01:63:bb:c8:9c:31:
2b:b5:5b:ab:d7:a6:48:4a:a5:e3:38:83:54:69:4e:
af:73:6e:01:f0:c5:54:ef:eb:d0:ec:0d:51:b3:fc:
20:0b:75:68:28:45:b3:7e:db:d8:66:4b:90:9d:71:
0b:1d:4e:93:03:24:85:a1:97:a2:d3:d9:6a:08:30:
13:f4:f1:26:11:7f:8e:b1:4c:27:2e:22:b1:76:02:
ba:93:da:fa:8f:2c:5a:ee:3e:5d:80:2f:dd:48:b3:
2e:36:7f:10:31:96:7d:10:b3:86:2d:2d:a5:b0:3d:
8b:de:3e:d6:fe:01:b5:7f:1e:85:06:73:7b:11:4c:
b5:e8:6d:bd:20:e1:64:3e:d0:57:58:47:5e:90:c9:
d5:c9:81:62:e6:fc:97:92:3a:4e:99:fc:98:b7:17:
5d:db:43:6a:c6:a1:52:96:54:88:52:87:61:26:fd:
2a:e2:3f:2c:6b:13:75:1c:3e:32:78:c6:b7:45:e5:
42:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:46:4A:FD:D0:39:BA:05:E7:52:2A:58:0B:CF:2C:E5:0F:EC:1B:C1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lkZK_dA5ugXnUipYC88s5Q_sG8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.86.0/23
193.42.32.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:0d:66:c4:42:d8:fd:72:dc:10:fe:d9:80:c5:e8:95:94:17:
b1:cb:c7:2b:92:58:61:1a:cb:7e:11:0b:af:12:97:bb:27:7b:
59:7b:c4:5c:d3:2b:93:b3:3c:17:a0:d0:30:ea:89:c2:28:bb:
47:af:77:77:6c:15:f4:24:38:9c:fe:f2:57:71:59:6e:04:f0:
93:68:27:93:69:7d:09:d1:bf:39:26:02:8f:34:6d:0d:ff:64:
32:49:54:a5:6d:73:e1:ef:be:ad:74:3d:de:88:ca:40:d7:f7:
aa:a9:c1:b6:d2:d3:76:9a:8e:be:7c:dd:30:0d:4a:5b:5d:32:
5d:ec:3b:47:1b:58:ee:6c:03:ae:28:f8:4b:9b:3e:56:31:ce:
4c:d1:a3:18:bc:ad:c1:a9:1f:58:83:e9:1a:37:ab:4b:16:61:
6e:18:49:83:c6:fa:03:06:c7:36:ec:e7:1d:7d:92:f0:b0:4a:
07:ac:6c:24:98:a5:84:ce:0c:08:1e:4c:19:c8:ba:fa:93:60:
db:00:24:83:44:78:81:8a:da:4d:c6:44:c3:fa:4e:f7:1e:3a:
b9:39:a7:c8:4e:4f:fe:2a:61:bb:48:ec:0d:0e:6d:92:57:ff:
63:2c:0a:7e:3a:b9:15:d2:de:57:d5:56:9b:7a:fa:6b:0f:b5:
30:33:29:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:13 2024 by rpki-client on console-ams.rpki-client.org