Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/lFIjXiVkyIJRNdLxAImG3wYblnQ.roa
File: lFIjXiVkyIJRNdLxAImG3wYblnQ.roa (raw, json)
Hash identifier: t03eJC+mdVNF4kXO5LYjM6/tmVWC4erM6XRkRJmqI1o=
Subject key identifier: 94:52:23:5E:25:64:C8:82:51:35:D2:F1:00:89:86:DF:06:1B:96:74
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0187515764D8BA0A904FB21F7874E675FE51
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/lFIjXiVkyIJRNdLxAImG3wYblnQ.roa
Signing time: Wed 05 Apr 2023 12:14:54 +0000
ROA not before: Wed 05 Apr 2023 12:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 5.144.183.0/24 maxlen: 24
5.178.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:57:64:d8:ba:0a:90:4f:b2:1f:78:74:e6:75:fe:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Apr 5 12:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9452235e2564c8825135d2f1008986df061b9674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:51:2b:4b:eb:87:24:d0:5a:bb:8b:40:c8:ea:
34:fa:03:1d:f0:49:55:be:f3:de:25:6e:32:ad:9d:
2d:3b:9f:ff:95:69:46:f3:67:74:c6:46:c4:98:93:
4d:e4:cf:30:2f:63:98:f5:44:06:21:9c:a1:d0:2b:
9f:24:22:fc:8c:97:7d:2e:4f:34:58:2a:09:fd:27:
88:c9:97:84:b6:99:22:55:25:e9:1c:79:6f:b5:8c:
97:67:59:37:79:1e:82:19:dd:73:39:57:59:dd:8e:
00:2b:57:8b:1f:e4:b4:b9:c7:fd:48:4b:90:7f:5f:
ff:91:62:d0:58:06:fe:ea:51:94:49:b0:00:5f:e2:
af:9e:d3:4f:92:9c:a5:7b:df:99:4f:09:3a:f0:ef:
d6:b7:4f:7e:45:87:11:b3:12:43:4b:57:33:b8:5e:
e0:d3:fe:be:5c:2d:5d:b8:27:cd:1b:ca:38:35:a7:
5c:6c:66:a3:a6:90:ad:5d:1d:84:1c:e9:21:d4:f9:
7f:6c:eb:58:a2:d2:60:07:d1:e8:66:3a:84:06:bb:
7e:00:06:37:dc:63:b4:29:05:9c:04:06:20:2c:d4:
18:46:16:03:72:a0:11:e7:d1:67:d0:3b:d4:f8:1d:
7c:f3:37:56:20:87:91:32:61:1d:00:08:f0:a6:38:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:52:23:5E:25:64:C8:82:51:35:D2:F1:00:89:86:DF:06:1B:96:74
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/lFIjXiVkyIJRNdLxAImG3wYblnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.183.0/24
5.178.103.0/24
Signature Algorithm: sha256WithRSAEncryption
37:0f:49:36:4b:7e:44:71:99:86:b1:e1:7b:ad:11:f2:e6:87:
e8:cf:81:19:40:b8:4c:6b:3c:a1:14:35:e9:2a:44:1e:27:a1:
ec:33:cc:b5:37:99:65:1a:3f:84:7f:89:a1:92:d2:d2:df:20:
d5:bf:58:26:be:ef:2d:5c:b9:0b:04:24:64:21:12:e4:58:44:
d0:6b:13:91:de:7c:60:77:77:9a:e5:74:a7:f4:7d:c8:4c:46:
f0:63:ad:18:e2:c6:1e:3b:39:2f:e9:40:e8:cd:9b:15:b3:09:
e7:20:bb:3b:03:63:47:0e:d5:ab:98:6e:db:d5:94:ca:d9:8e:
5a:cc:08:61:6f:e7:5e:9e:9e:2a:f2:00:0f:75:72:e2:39:7a:
6a:9f:b8:ca:45:ba:3c:f4:91:0d:bd:8a:19:bf:8b:44:7a:d2:
88:ff:d0:08:c2:4f:ba:9d:d4:76:f8:91:eb:29:5f:1f:68:3d:
7e:de:bf:ef:1d:a5:b2:9d:fc:8d:46:8b:34:1e:33:22:90:2b:
fa:3f:94:e4:dd:9f:54:2f:07:6b:fc:c5:05:70:98:87:7f:53:
82:d3:19:e0:1b:0f:42:31:8d:a5:88:6e:78:6b:1a:69:b2:64:
d6:31:ea:eb:6f:05:93:7b:d6:a2:fe:ad:c9:bd:0e:f2:86:37:
57:82:71:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:44 2023 by rpki-client on console-fra.rpki-client.org