Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/l5VG2SYM1YUEfUb5WvGaj8Bm7L4.roa
File: l5VG2SYM1YUEfUb5WvGaj8Bm7L4.roa (raw, json)
Hash identifier: ZVZxrWj56j9EjWwWfbR6H1L1bzERHn7k3bmq+5dmIYU=
Subject key identifier: 97:95:46:D9:26:0C:D5:85:04:7D:46:F9:5A:F1:9A:8F:C0:66:EC:BE
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 018C200C3A8E138F7F650A4286FAB3203FD8
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/l5VG2SYM1YUEfUb5WvGaj8Bm7L4.roa
Signing time: Thu 30 Nov 2023 11:45:21 +0000
ROA not before: Thu 30 Nov 2023 11:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13214
IP address blocks: 185.109.84.0/23 maxlen: 23
185.109.86.0/24 maxlen: 24
31.22.88.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:0c:3a:8e:13:8f:7f:65:0a:42:86:fa:b3:20:3f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Nov 30 11:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=979546d9260cd585047d46f95af19a8fc066ecbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:76:62:90:54:4d:a5:e7:8a:50:57:1c:b3:
9f:6c:88:8b:e5:92:15:14:2e:0e:f7:d2:43:ac:55:
f7:0d:9f:cc:fa:fa:93:6d:29:9a:ce:e7:c8:18:85:
54:a7:14:a3:d4:e6:8f:23:48:ca:ac:a9:50:76:99:
10:e0:af:36:3b:d6:a4:b7:2e:c8:9a:88:71:b3:07:
8e:b5:3f:12:0b:c8:34:3d:3d:9a:1c:b7:f0:11:4d:
8e:5e:d8:26:54:f3:0e:95:43:71:20:2d:18:4e:b9:
0b:fd:e2:1a:74:2f:02:09:d7:0d:e5:8c:10:f9:7e:
e4:ad:62:12:5c:2b:79:de:96:fd:c2:89:03:29:15:
16:cf:cd:6c:45:66:b2:2c:00:c2:ea:31:d1:a1:fc:
49:7a:5d:04:c0:ec:b4:91:a3:c0:c9:d8:d3:6d:5f:
06:de:e5:34:98:8b:3c:38:a5:88:f2:0b:ba:88:95:
5a:f3:9f:65:5c:f2:77:3c:7e:56:30:ff:ad:89:e5:
f9:4f:a0:93:d7:ee:99:51:b5:0d:a2:ed:aa:5b:4f:
95:03:70:8f:ad:d3:2d:2c:5f:b8:c3:9c:62:b2:59:
f7:26:41:a1:64:c7:dd:9b:37:00:f2:c1:64:12:30:
61:43:ab:78:5a:c7:c6:54:b8:d9:db:3c:f1:4a:32:
37:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:95:46:D9:26:0C:D5:85:04:7D:46:F9:5A:F1:9A:8F:C0:66:EC:BE
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/l5VG2SYM1YUEfUb5WvGaj8Bm7L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.88.0/21
185.109.84.0-185.109.86.255
Signature Algorithm: sha256WithRSAEncryption
1f:e3:88:ca:96:6f:bc:11:f9:b5:0d:aa:78:4f:bc:72:33:63:
7f:73:dc:41:05:0a:23:06:0f:ac:e1:98:fb:fc:71:08:55:1d:
8d:96:fa:c1:60:9f:96:9a:26:54:93:e9:5f:6e:cb:bf:50:1e:
87:c9:41:11:ed:95:70:eb:67:1e:ed:ba:b5:78:0b:c1:79:b5:
d8:7b:03:0f:a7:67:e0:85:38:49:9b:79:79:87:81:34:14:e4:
e5:99:1a:2a:4f:33:8c:a3:2c:c0:dd:88:41:62:74:d4:64:52:
5c:cd:21:c8:e1:e0:d9:79:48:af:b2:ed:c9:54:17:af:30:f0:
e2:6e:70:ba:0a:28:52:3d:0d:75:d0:3c:67:cb:10:1c:0b:17:
69:5c:bc:d7:2e:e8:42:83:1d:50:4d:51:d5:07:a6:99:fb:cd:
dd:16:14:94:1d:c9:8e:57:65:fa:96:60:e0:ef:d7:27:51:c5:
d3:a9:8d:ba:9c:d2:18:bd:14:f3:1d:f5:30:e0:c0:65:4a:9c:
5f:2d:62:1c:93:16:ad:00:8f:3c:af:a5:16:73:a6:3c:16:01:
32:6c:5e:48:db:f6:f3:a8:47:59:ef:dc:38:fa:96:5c:c8:af:
bf:b3:65:83:8d:0b:bb:4b:a5:ef:22:dc:69:6e:2d:db:cd:b8:
c5:b9:e4:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:19 2024 by rpki-client on console-fra.rpki-client.org