Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/lltLtRBBxKFc81PJp6gmUNEKmoY.roa
File: lltLtRBBxKFc81PJp6gmUNEKmoY.roa (raw, json)
Hash identifier: iJ3QFK9vzO6fdWLV+ntS1qvG2pngHh/PcuGdTEdn12g=
Subject key identifier: 96:5B:4B:B5:10:41:C4:A1:5C:F3:53:C9:A7:A8:26:50:D1:0A:9A:86
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 01856BE59E59D29E8598DEF839EFB2104092
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/lltLtRBBxKFc81PJp6gmUNEKmoY.roa
Signing time: Sun 01 Jan 2023 05:54:48 +0000
ROA not before: Sun 01 Jan 2023 05:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50220
IP address blocks: 193.104.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:9e:59:d2:9e:85:98:de:f8:39:ef:b2:10:40:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Jan 1 05:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=965b4bb51041c4a15cf353c9a7a82650d10a9a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2c:b3:33:4c:43:c8:f4:ab:16:d1:8d:9a:c6:
ed:5c:49:90:e4:25:c7:bf:f8:5a:bb:7e:6a:11:99:
19:af:29:72:fc:cc:d2:f8:cf:2e:8d:37:c4:14:ad:
e4:a9:3e:a8:c0:96:61:51:63:fd:2a:f4:02:ab:be:
a8:f7:88:2e:ac:66:5d:ae:f3:67:10:1a:97:b2:87:
1b:6a:38:f3:f0:26:a2:3c:b2:f4:fb:58:86:17:0a:
33:3a:b3:9c:15:b9:68:1e:7e:25:c6:b1:b7:52:ed:
49:6f:5c:58:f6:c3:91:2a:b4:af:69:da:58:d4:c4:
df:7a:86:ce:17:02:3c:45:28:6f:3e:31:85:a6:68:
14:e7:fa:48:95:df:a5:52:13:16:09:5a:68:c6:14:
27:98:16:47:04:50:9a:3c:50:d6:21:2e:0d:03:77:
e3:c5:f5:63:87:97:ad:e3:02:b9:0c:aa:db:40:7b:
b3:7d:24:73:d7:e3:4a:ad:96:e0:c7:01:b3:4e:8b:
e7:57:4d:80:a3:ff:d4:aa:66:44:d2:f1:ca:f7:ed:
60:e0:69:5c:90:3b:9d:76:9e:ee:74:9b:77:8e:c5:
eb:5b:e7:1a:1a:63:a3:0a:53:07:d6:90:fe:04:b0:
4c:9a:73:cd:d3:b1:63:f4:e3:61:77:5a:7b:d6:5b:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5B:4B:B5:10:41:C4:A1:5C:F3:53:C9:A7:A8:26:50:D1:0A:9A:86
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/lltLtRBBxKFc81PJp6gmUNEKmoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.180.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:23:68:cd:de:c6:97:71:f6:46:48:18:d5:20:bf:93:87:33:
f4:bf:51:cd:1f:8e:99:19:4e:01:f2:0b:44:a4:d6:aa:62:15:
02:67:59:2c:cf:af:03:de:ef:92:95:9b:00:5e:25:b4:9e:5a:
fe:04:96:b8:c4:1d:f0:c5:86:2c:bc:19:64:d7:72:2a:5e:85:
f8:8b:50:1d:16:e4:dc:b7:a9:13:25:02:ed:98:1d:a3:4b:d6:
57:19:43:ea:af:bf:76:26:2f:d7:1d:1f:53:11:ab:16:da:cc:
2d:32:82:8d:18:75:78:6c:4e:c1:36:d0:64:e8:47:cd:36:1c:
c6:c7:f9:8e:e0:d0:79:46:a3:02:81:7a:08:83:13:64:52:f6:
44:be:0c:b0:d7:18:32:89:e5:84:e0:e0:63:a5:b7:b3:86:ba:
ef:09:c2:47:f8:03:d7:7c:7f:b3:7c:41:68:fc:fe:e8:ec:6f:
6a:42:ac:2f:b6:f5:6f:a8:70:7b:2c:bf:b7:59:09:26:11:42:
cd:6e:cb:6f:25:2f:3d:09:4a:d0:89:81:c0:09:48:08:b5:ef:
da:b1:3e:10:e1:14:7c:28:59:00:7a:c4:9f:71:61:71:0c:1f:
7e:e8:83:00:24:da:9d:0c:67:b1:49:3d:33:cd:7d:00:89:84:
63:ce:03:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:39:59 2024 by rpki-client on console-ams.rpki-client.org