Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/LJBdOnKW0BpwsHzydhR-fAtxEQU.roa
File: LJBdOnKW0BpwsHzydhR-fAtxEQU.roa (raw, json)
Hash identifier: VpfXJXYwyl4ViExtcKRGA1tVWvSt62WFAunD1FP/Td4=
Subject key identifier: 2C:90:5D:3A:72:96:D0:1A:70:B0:7C:F2:76:14:7E:7C:0B:71:11:05
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 01856F42A1231704BD4B4BDAC6530E1A7120
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/LJBdOnKW0BpwsHzydhR-fAtxEQU.roa
Signing time: Sun 01 Jan 2023 21:35:15 +0000
ROA not before: Sun 01 Jan 2023 21:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211522
IP address blocks: 2a05:4140:202::/48 maxlen: 48
2a05:4145:1::/48 maxlen: 48
2a05:4140:200::/40 maxlen: 48
2a05:4145::/32 maxlen: 48
2a05:4140:201::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:a1:23:17:04:bd:4b:4b:da:c6:53:0e:1a:71:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 21:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c905d3a7296d01a70b07cf276147e7c0b711105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4e:0f:44:98:2c:b7:a0:37:54:c7:92:d9:3b:
64:73:4f:7e:ef:18:fc:84:92:d4:4b:68:be:cd:bd:
55:f8:59:5a:63:a9:b7:80:b0:18:45:7c:43:10:ec:
bc:92:24:35:13:7d:5f:bb:b0:93:b4:4d:fe:05:60:
f9:77:5c:77:a7:81:1c:3f:81:d3:30:2d:c0:f2:0b:
ee:0f:67:40:a6:f1:bf:b4:b2:db:bc:d8:2c:0e:78:
fb:d6:79:58:9e:49:64:c1:b5:ea:bf:d5:04:4a:27:
2b:e0:77:6a:89:a6:17:35:b2:02:45:f3:ce:73:6c:
b4:60:89:35:67:eb:40:93:0e:f4:b6:81:4c:62:76:
28:4f:46:6d:04:5f:6e:2c:6f:3d:82:16:56:b1:5c:
ce:6b:85:ee:d3:bd:86:ac:80:bf:2b:ad:8a:99:ef:
95:1f:a3:3c:bf:b9:5c:29:ca:46:9b:14:34:67:90:
22:0f:6b:db:53:4a:ec:bd:b1:61:65:ed:10:c8:67:
e4:d1:6d:a6:ae:f1:58:81:3a:6e:7d:67:b2:ab:8d:
a2:50:88:eb:6e:b9:b6:fc:15:7c:b6:c4:c2:d4:87:
6d:e6:cc:f2:df:b5:e8:a7:e5:ed:2c:7f:8e:d7:ee:
d9:67:86:5e:29:55:65:b4:d1:61:cd:81:e8:3e:5a:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:90:5D:3A:72:96:D0:1A:70:B0:7C:F2:76:14:7E:7C:0B:71:11:05
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/LJBdOnKW0BpwsHzydhR-fAtxEQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:200::/40
2a05:4145::/32
Signature Algorithm: sha256WithRSAEncryption
23:13:cf:e4:99:02:64:0c:f0:b0:39:a9:31:d5:c2:13:57:e1:
ca:ff:47:9c:db:26:86:2a:28:d4:e4:74:c9:79:2c:5e:68:b8:
fa:67:2a:75:89:ac:8b:c5:a5:b4:db:06:0d:44:7b:7c:90:8c:
4b:e4:42:41:c4:93:5f:cf:37:81:81:74:02:de:96:31:3b:a7:
49:ef:57:6d:a2:7e:60:dc:38:7d:d4:e5:4e:1e:fa:b2:a3:57:
fe:44:ce:69:ad:cb:70:69:19:ae:d9:c0:01:79:ed:54:89:49:
50:a7:bb:88:d6:83:70:46:43:b1:c9:df:eb:de:44:ff:45:38:
80:8d:10:8a:d3:87:c5:aa:96:6a:7b:11:86:6e:ae:f1:1c:8a:
a3:28:d6:87:9b:56:62:21:98:5b:7a:d0:bd:83:cc:6b:27:40:
52:52:2b:f3:d1:ca:34:b8:a3:64:b9:6d:fe:4d:7c:d2:6a:aa:
2d:97:a2:5f:52:ca:b8:25:26:39:39:09:e2:7b:0d:72:fa:65:
c3:96:89:4c:b1:80:df:b4:0d:95:d2:56:ad:fe:0e:66:d2:a3:
e3:62:4a:7c:46:36:b8:61:f9:31:61:10:4e:bd:61:1d:26:88:
dc:22:c6:fd:bd:20:80:f5:d2:84:20:c0:b7:c6:90:72:b0:18:
41:a0:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 01:05:54 2023 by rpki-client on console-fra.rpki-client.org