Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lo-GQvozi21Scp9nO16tCDm52Oo.roa
File: lo-GQvozi21Scp9nO16tCDm52Oo.roa (raw, json)
Hash identifier: FnwECefveKKV451CBb4h6CXtauJ23ntby5KNm8l5700=
Subject key identifier: 96:8F:86:42:FA:33:8B:6D:52:72:9F:67:3B:5E:AD:08:39:B9:D8:EA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0188AE510C6FD5051D2749AACF4FE2B7330C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lo-GQvozi21Scp9nO16tCDm52Oo.roa
Signing time: Mon 12 Jun 2023 06:35:27 +0000
ROA not before: Mon 12 Jun 2023 06:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 193.58.122.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ae:51:0c:6f:d5:05:1d:27:49:aa:cf:4f:e2:b7:33:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 12 06:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=968f8642fa338b6d52729f673b5ead0839b9d8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:f4:0b:29:d9:c5:3b:d9:49:ea:64:15:27:
ab:27:10:55:9a:87:c3:cb:bd:06:e9:c2:74:c5:f6:
e7:47:0c:2f:15:aa:4b:14:06:2e:6c:fa:dc:8f:24:
b7:a2:82:0e:57:1d:2c:8b:a3:86:ba:1c:52:ee:a4:
8e:f2:20:d1:77:17:11:59:02:a4:9c:83:46:60:75:
90:f9:45:b8:fe:13:c8:f5:8e:0b:f8:9a:de:bf:e6:
96:b5:5d:62:49:f8:0d:72:0b:bc:1a:27:2b:cc:2d:
68:3b:32:18:77:a7:2b:cb:35:cc:4d:d0:bc:00:b4:
95:fd:a9:de:c6:e8:02:bf:34:bf:0c:98:17:84:e2:
98:ee:fd:a7:37:ed:f9:da:dd:c2:95:83:5b:56:a5:
48:63:54:3e:89:30:ce:43:e6:f8:f5:fb:ed:ff:e5:
51:f3:70:b5:39:d8:e6:3d:9a:bf:4b:7d:c8:bd:2a:
63:38:6d:6b:c3:c8:42:d7:73:21:a2:42:7d:c2:2f:
9a:e2:95:29:37:32:82:03:83:9f:ff:14:57:5c:bc:
1a:ea:6d:43:9a:e6:7f:ef:43:d1:90:2a:27:e4:38:
85:53:88:3d:92:f4:e4:b7:d1:25:1f:47:b1:e0:8d:
4e:0e:a0:c7:fc:4d:c2:ec:fc:32:73:d4:5d:c5:67:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8F:86:42:FA:33:8B:6D:52:72:9F:67:3B:5E:AD:08:39:B9:D8:EA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lo-GQvozi21Scp9nO16tCDm52Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.102.0/24
193.58.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:44:c9:ec:8b:fa:77:61:64:e4:5f:c4:cc:43:6d:70:0e:39:
e7:39:0a:6d:ca:26:21:bb:64:a7:28:69:3e:9d:ca:f3:98:aa:
73:22:b0:27:cd:93:d6:bf:a2:03:f9:38:36:b2:7e:38:5a:ba:
c2:1d:92:bb:e4:0d:d0:d0:0d:01:e1:e9:21:59:36:39:c3:b6:
27:70:6b:47:22:81:0d:65:52:c3:79:df:75:53:52:40:f0:dd:
11:f5:a0:3e:b9:d2:eb:71:ca:cd:ca:a4:92:11:1c:32:ba:c2:
fd:30:4a:34:3e:9f:58:03:17:9c:29:8d:c3:71:14:4a:8f:98:
db:7a:17:cb:85:f8:2d:4d:7d:60:72:a5:5d:28:8b:93:17:ca:
ae:c9:3e:32:ff:73:ec:8f:db:b7:b1:0e:34:bf:06:12:2b:65:
e7:da:47:ac:9e:45:74:72:e7:e9:9f:9e:8e:3b:b3:d0:8e:0c:
f9:17:71:20:e4:71:79:06:c5:68:90:82:86:bc:3b:82:74:d2:
10:3e:e6:e6:0e:b2:00:91:4c:7c:97:08:7a:2c:1c:04:da:42:
fe:7a:bf:0f:27:6c:5f:c0:7c:85:b9:5f:90:1a:9a:27:b8:04:
28:30:e6:62:93:b4:2c:97:e1:51:2b:95:bb:d3:af:87:57:ce:
b9:2c:df:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org