Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LQNqIrghmpoyFZ9rCPzbNATgqi4.roa
File: LQNqIrghmpoyFZ9rCPzbNATgqi4.roa (raw, json)
Hash identifier: +wlGlEADtUm1vziJDj348bY+liVhaxpLeKLk/ppN1Hc=
Subject key identifier: 2D:03:6A:22:B8:21:9A:9A:32:15:9F:6B:08:FC:DB:34:04:E0:AA:2E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018AC1775313BE7FC377055D92CE526B9D67
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LQNqIrghmpoyFZ9rCPzbNATgqi4.roa
Signing time: Sat 23 Sep 2023 09:55:37 +0000
ROA not before: Sat 23 Sep 2023 09:55:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32159
IP address blocks: 163.5.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c1:77:53:13:be:7f:c3:77:05:5d:92:ce:52:6b:9d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 23 09:55:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d036a22b8219a9a32159f6b08fcdb3404e0aa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:0e:78:a5:d5:a8:5f:f8:12:57:aa:ce:8e:
b9:b3:18:79:21:c1:25:36:17:ce:42:0a:64:a0:67:
d8:78:12:06:48:9c:33:08:cf:29:6f:7b:42:ac:dd:
e1:8f:af:7e:40:35:5b:b0:22:60:c8:1f:7a:49:04:
60:ce:4d:74:1f:8a:74:6e:62:4e:7e:d2:04:49:08:
70:43:64:34:eb:c7:0b:ba:9d:b5:a6:f2:11:00:50:
82:1b:4b:b4:6e:f4:0b:b7:12:d6:a0:7a:70:f8:b2:
ca:74:cd:53:4d:fd:ca:5b:b1:64:b1:8f:1d:5c:c9:
0b:83:d5:6f:f4:76:a3:68:59:bc:d4:49:2a:9d:e2:
fa:92:73:fb:2c:61:b5:a4:52:c5:c3:02:96:97:e9:
f1:62:8c:b2:69:f3:99:9c:f0:11:7b:b4:20:68:e3:
d6:a5:6a:3e:6b:37:8a:bd:fa:39:1b:93:bb:fa:1d:
60:24:9b:43:4d:73:83:34:c3:86:87:2c:b1:c7:c4:
13:a2:15:2f:f2:37:9b:b2:63:06:9c:fb:d0:13:d0:
4e:87:87:4b:b1:a8:48:1d:61:af:eb:2c:df:1d:4c:
72:62:4b:53:2a:73:70:35:7a:b3:88:2f:3b:5c:aa:
53:05:36:50:6c:87:90:63:d5:6d:c0:c8:f5:e9:17:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:03:6A:22:B8:21:9A:9A:32:15:9F:6B:08:FC:DB:34:04:E0:AA:2E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LQNqIrghmpoyFZ9rCPzbNATgqi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.67.0/24
Signature Algorithm: sha256WithRSAEncryption
55:d1:ff:f0:a5:fb:8d:65:12:c1:7e:8f:58:5c:35:23:06:fc:
6a:af:76:2a:28:22:3a:da:48:71:aa:64:8b:2d:ff:82:42:5a:
6a:c5:03:bc:be:f9:df:83:0b:a8:7c:03:0d:7e:c8:55:f4:98:
bd:b9:e8:a9:49:e3:92:f9:4a:87:56:25:30:f6:b9:48:4f:f4:
e4:8e:78:80:1a:fc:22:c5:f7:d0:28:02:5c:77:d3:c3:72:13:
48:0a:43:d7:bc:40:fa:3a:ac:e1:58:39:be:fc:f4:12:48:a6:
fc:22:00:42:b6:34:4e:cd:1b:e2:03:3e:a6:35:03:57:c6:b7:
68:46:c9:2c:55:79:d8:c2:57:4a:87:a6:bc:5d:12:d2:53:04:
06:60:4c:13:6d:75:9b:b6:d7:87:54:a2:4a:24:b7:c8:0a:3f:
91:9d:7c:df:ce:81:3f:e0:43:47:2a:b7:fb:a7:b4:c7:81:0c:
c8:0f:d7:67:3e:95:56:24:f5:39:ab:59:a8:a1:41:7d:16:22:
d7:cf:96:d2:38:c8:61:8c:71:ca:9c:e1:ef:da:fc:e6:6b:32:
e9:d4:4c:b4:b4:f0:74:4b:c6:5e:61:f8:de:a3:f9:3b:ee:e1:
47:e6:c1:37:f6:e8:2a:87:90:cf:6d:ef:7a:4e:fa:e7:1b:5d:
63:8f:11:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 21 23:04:48 2023 by rpki-client on console-fra.rpki-client.org