Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LFH9X1wCw1nbwyB3ewuxQJYJPHY.roa
File: LFH9X1wCw1nbwyB3ewuxQJYJPHY.roa (raw, json)
Hash identifier: 81Ds/2dyFe2SF20uBsObiTjwhsUKA1cWRprSzCvHUL8=
Subject key identifier: 2C:51:FD:5F:5C:02:C3:59:DB:C3:20:77:7B:0B:B1:40:96:09:3C:76
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018612B04F42756580867A52F8090F91EB6E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LFH9X1wCw1nbwyB3ewuxQJYJPHY.roa
Signing time: Thu 02 Feb 2023 15:13:09 +0000
ROA not before: Thu 02 Feb 2023 15:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.15.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:b0:4f:42:75:65:80:86:7a:52:f8:09:0f:91:eb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 2 15:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c51fd5f5c02c359dbc320777b0bb14096093c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ac:86:db:4c:b9:83:51:38:83:c2:ba:c0:6a:
ce:d1:3e:8a:32:81:50:d9:f5:1a:c7:54:6e:e4:bb:
4c:42:91:b0:23:86:cc:88:f2:ac:5f:e8:d0:7b:f6:
34:2d:eb:84:77:de:90:b5:bb:78:8a:b3:0c:7c:a4:
5a:6d:58:dc:1f:0e:09:2f:36:c3:de:9f:22:56:b7:
85:0a:e7:8a:e8:e2:4d:a4:a6:75:b0:dd:86:4d:cd:
73:d7:ca:67:08:a5:d9:f1:99:fa:72:a5:2f:79:23:
80:10:db:50:b8:aa:cf:bf:65:d6:5a:33:73:bc:a3:
8f:4c:31:34:ca:61:a0:94:7d:6b:23:77:a4:d0:02:
55:7d:0c:70:4b:6f:b0:94:38:21:0c:72:72:de:a0:
4a:ad:11:55:9a:3a:da:80:05:56:cf:03:6e:3f:97:
7b:9d:dd:56:53:29:0d:a1:01:e0:13:af:a9:1b:cb:
3f:2f:dc:5c:3c:03:68:e2:8b:20:46:95:25:6d:7a:
a8:60:03:6e:24:ad:74:d4:4e:43:07:92:74:3d:10:
05:8c:0e:dc:25:82:29:1a:3c:4c:8e:f9:33:f3:b6:
81:72:35:43:dc:bc:f6:ec:03:1f:26:97:e8:fb:75:
d8:c4:e9:a1:29:0d:89:4a:90:7b:b2:66:35:98:ef:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:51:FD:5F:5C:02:C3:59:DB:C3:20:77:7B:0B:B1:40:96:09:3C:76
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LFH9X1wCw1nbwyB3ewuxQJYJPHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.53.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:3f:0c:f9:c1:54:91:a1:3f:fd:67:47:30:fe:8c:87:0d:0f:
d6:fb:0a:c3:c0:2d:3a:4f:7d:e5:61:89:f0:fd:88:32:6d:84:
47:08:1d:25:2a:cc:0d:60:e7:14:04:d8:da:23:38:0c:33:dd:
be:16:07:fa:88:ea:5e:1f:1c:6d:19:13:bc:8b:79:46:83:9a:
75:59:36:64:57:39:28:9d:c4:9f:42:c0:24:79:07:ab:8a:01:
30:36:27:4a:74:2f:da:52:ba:22:fc:db:6b:d4:49:11:66:07:
4f:87:ed:d4:71:46:bf:bf:bf:38:ac:0d:99:3b:70:c3:50:45:
72:64:5c:63:5f:26:1a:51:43:61:b7:d6:1d:7e:94:fb:0f:5e:
0e:6b:03:ea:ef:08:6f:b5:6d:7c:7c:24:fe:6b:f9:2f:a7:ba:
44:d4:97:ff:a6:59:49:61:f1:46:09:2e:4c:d4:b4:cd:80:46:
9e:30:b0:1d:24:73:6d:db:79:6e:7b:b4:97:06:2b:16:03:84:
fb:a5:64:50:f2:23:f6:7f:6a:1f:c8:7c:31:c4:5c:c0:a5:71:
2a:4c:9a:16:db:d0:cb:04:61:42:b8:da:9b:ff:cd:7e:ac:a1:
fc:95:29:8b:c9:fa:17:5d:ba:92:02:e9:52:d3:2e:6f:4d:b0:
cc:80:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org