Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/LFSjG4X4JZqwLcqtI0Mn8yxCKH4.roa
File: LFSjG4X4JZqwLcqtI0Mn8yxCKH4.roa (raw, json)
Hash identifier: 7lKKOcjJrhbOQekWwos/AFVeTfaQGSq2Iv/FnfY8KG4=
Subject key identifier: 2C:54:A3:1B:85:F8:25:9A:B0:2D:CA:AD:23:43:27:F3:2C:42:28:7E
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 018571FA33DF7840A2B87B18D318A1592743
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/LFSjG4X4JZqwLcqtI0Mn8yxCKH4.roa
Signing time: Mon 02 Jan 2023 10:15:00 +0000
ROA not before: Mon 02 Jan 2023 10:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42105
IP address blocks: 217.9.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:33:df:78:40:a2:b8:7b:18:d3:18:a1:59:27:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 2 10:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c54a31b85f8259ab02dcaad234327f32c42287e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:9a:48:a6:83:cd:28:97:28:6b:13:22:99:
57:b3:8b:a7:29:52:55:22:e0:43:c0:55:8e:df:97:
e5:08:6d:7d:ed:ce:41:a5:f6:39:13:2b:75:f2:d9:
86:51:3f:51:a6:81:d5:8d:81:91:00:c3:a2:e7:f8:
01:41:60:94:bf:40:5d:9b:43:41:a6:e5:f8:ad:c0:
3d:ce:43:1d:13:14:f5:da:43:b6:2d:07:9a:49:12:
6e:c6:58:22:e1:05:50:f7:03:08:05:08:f9:cb:ee:
85:a7:18:98:d6:7b:a7:3b:d3:67:6e:31:0a:43:2f:
4c:69:8e:7e:6c:1b:b6:83:ef:3c:c5:89:d7:03:3e:
b1:cc:d6:c4:d7:43:28:7b:e9:9a:36:0c:ca:8d:ce:
d5:f9:e2:2d:e4:1c:1f:ff:78:11:ec:79:bc:1d:f0:
95:8d:0a:0c:19:c0:5d:b5:64:eb:3d:fa:36:e7:a0:
8b:93:e8:84:2f:07:be:ac:11:21:7b:66:72:36:a7:
10:67:4b:3d:98:45:8b:33:51:f9:92:ea:aa:00:a0:
6f:50:e0:81:fa:47:c0:70:fa:62:60:61:18:1f:b3:
c3:04:ef:a4:ac:1f:88:ab:d2:a7:70:c1:94:db:86:
1e:9b:9c:98:71:07:ed:91:e3:9e:f6:80:90:20:66:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:54:A3:1B:85:F8:25:9A:B0:2D:CA:AD:23:43:27:F3:2C:42:28:7E
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/LFSjG4X4JZqwLcqtI0Mn8yxCKH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.8.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:dc:42:b5:22:12:f9:38:e2:81:73:38:cf:67:34:a1:9f:b6:
a0:57:42:19:d4:6a:ae:ba:85:55:ab:25:58:51:ea:a1:56:bf:
ae:df:d2:e9:85:8c:95:56:47:53:bc:96:a3:4b:6f:d5:4e:87:
1c:ad:81:59:e8:e1:71:5a:27:90:99:59:63:df:a3:7d:f0:b0:
1f:90:a8:ef:c7:4b:3f:ad:45:6f:da:ae:1a:8a:32:6e:03:59:
5e:08:18:52:c4:20:37:d7:06:d2:f0:ce:9b:28:e8:8e:f5:54:
b0:cc:a8:9c:b7:8e:6e:d4:e4:98:be:bd:aa:1f:77:37:93:6c:
ad:a4:fd:2f:36:a2:51:c8:86:8c:0c:be:56:77:63:ee:66:44:
eb:d1:19:c0:0a:ce:9f:68:89:55:04:0b:9f:15:e3:66:70:94:
b5:4a:cd:d7:31:e4:63:bd:be:a4:3e:5e:38:b5:82:4d:03:e7:
45:8a:13:b4:96:2c:4c:8a:60:16:db:87:08:f6:4e:36:7b:2d:
e5:8e:bc:80:dc:00:5d:2e:96:ef:5d:13:07:58:54:0a:7a:49:
25:14:9f:4c:99:95:b5:d1:f9:ce:93:a8:05:e9:04:61:c8:c1:
b7:4e:e1:67:21:44:a0:ce:3c:0c:0a:6c:da:1c:63:25:e6:0b:
4c:96:6b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:58 2024 by rpki-client on console-ams.rpki-client.org