Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/LXBNmyn4LE8ee_REByrzWaqi_N4.roa
File: LXBNmyn4LE8ee_REByrzWaqi_N4.roa (raw, json)
Hash identifier: wiEn7IgJIDp0NbPT7q1Dgd7Gy5m3vIOku6HzbGitD+8=
Subject key identifier: 2D:70:4D:9B:29:F8:2C:4F:1E:7B:F4:44:07:2A:F3:59:AA:A2:FC:DE
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 0186569ECC575AF54A157AB2DB769126403F
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/LXBNmyn4LE8ee_REByrzWaqi_N4.roa
Signing time: Wed 15 Feb 2023 19:48:12 +0000
ROA not before: Wed 15 Feb 2023 19:48:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11426
IP address blocks: 185.114.206.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:56:9e:cc:57:5a:f5:4a:15:7a:b2:db:76:91:26:40:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Feb 15 19:48:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d704d9b29f82c4f1e7bf444072af359aaa2fcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:82:6c:f0:21:f5:68:9b:b6:5d:48:1c:f5:69:
0a:be:b6:96:24:6d:7c:19:bd:22:90:f8:7c:3e:a0:
c4:03:90:46:bc:77:c3:b4:3e:bd:1d:60:ae:ae:53:
57:7c:4f:c2:1b:c0:62:1c:d3:43:96:81:df:c8:16:
22:93:b1:97:b8:4f:2e:59:98:c1:07:ba:b6:70:3c:
47:e5:6e:2c:6b:aa:33:4d:f6:7c:80:17:3d:80:52:
d9:0e:3c:a0:7e:79:4a:de:4d:b4:b2:d0:52:e1:7a:
17:ca:60:69:68:09:8b:67:0f:a1:a6:40:95:38:4e:
1f:b8:94:bd:48:9a:e5:3c:4d:6b:45:d1:25:32:a8:
5f:b5:e8:53:40:df:45:c7:0f:9a:0a:ac:3d:10:26:
98:19:1d:74:6b:60:40:8c:d9:2f:3d:45:0d:9d:16:
ff:4a:a6:48:d2:b0:a8:9e:05:eb:8c:14:bb:c1:18:
50:92:20:35:20:2f:4b:9d:da:b0:a9:5d:d0:e3:85:
fa:22:14:d5:df:47:9b:65:73:fe:93:af:37:a1:90:
86:2a:6e:25:8a:69:51:bf:bb:11:d6:02:9a:e6:d4:
b5:60:46:d8:f4:b7:57:8a:29:71:81:a6:f7:c2:e1:
9a:84:06:2e:b0:88:87:69:6c:13:bb:33:a7:03:4d:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:70:4D:9B:29:F8:2C:4F:1E:7B:F4:44:07:2A:F3:59:AA:A2:FC:DE
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/LXBNmyn4LE8ee_REByrzWaqi_N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.206.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:6d:95:76:a7:6b:ac:26:a3:5d:52:34:82:35:8d:bf:b2:40:
37:66:f8:f7:63:f7:e1:09:d9:c3:00:37:9c:94:02:83:bf:c0:
3c:e3:ab:43:15:ba:c5:ea:22:a4:55:2c:b7:92:e1:12:c8:9d:
17:7e:18:49:36:33:49:b7:b9:28:ee:cd:2e:26:7e:4d:ae:94:
c5:01:69:34:ab:1f:67:28:94:ef:20:e5:46:8d:2a:25:e9:52:
6e:bb:39:89:8d:a5:0f:a7:22:f3:fe:ee:92:da:e6:6a:1d:a8:
d3:e3:a4:1a:1a:39:36:26:06:4a:88:f6:e5:b8:db:77:e0:e9:
33:68:8e:70:35:92:4b:5c:1e:23:91:ea:b4:84:29:30:1b:08:
e3:2b:0f:ba:53:64:27:ce:58:e0:cd:44:9c:99:24:51:7c:c4:
f8:61:b1:30:98:53:67:d5:b7:2c:05:37:1c:c2:e7:2b:73:05:
59:98:ff:11:9c:52:76:00:6f:a2:6c:2d:a7:6c:06:99:3a:6c:
fd:a1:97:44:c2:a7:fa:f5:8e:f3:77:a8:86:25:a6:95:0f:40:
50:cd:ae:48:e4:e5:fb:b1:7c:79:f8:5a:ed:47:b7:87:82:a8:
56:f6:b3:05:db:87:0c:17:96:3b:70:19:b9:bd:6d:b8:d5:38:
65:15:7b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:34 2024 by rpki-client on console-fra.rpki-client.org