Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/LJMvGcbF83n139-DUB7zE9mU6Qc.roa
File: LJMvGcbF83n139-DUB7zE9mU6Qc.roa (raw, json)
Hash identifier: NdccvaxLFq+shCUxeCNrDVhCjdvGBiRTq0IN+5LfROA=
Subject key identifier: 2C:93:2F:19:C6:C5:F3:79:F5:DF:DF:83:50:1E:F3:13:D9:94:E9:07
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 01856B532B07EE47B16B67ACE78FE18083F9
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/LJMvGcbF83n139-DUB7zE9mU6Qc.roa
Signing time: Sun 01 Jan 2023 03:14:50 +0000
ROA not before: Sun 01 Jan 2023 03:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213261
IP address blocks: 213.238.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:2b:07:ee:47:b1:6b:67:ac:e7:8f:e1:80:83:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 03:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c932f19c6c5f379f5dfdf83501ef313d994e907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6c:60:f6:a4:be:3b:51:c2:ce:d3:94:12:6d:
48:48:7c:a8:16:e8:e3:22:14:ae:77:34:4a:c8:d9:
a6:40:75:06:74:50:03:19:95:23:09:f5:af:43:9b:
75:15:d9:16:b9:a9:25:4f:b7:ac:5b:b7:34:a5:ce:
80:59:80:72:b6:d2:aa:f3:a0:29:9b:33:e4:ef:29:
6d:ed:82:e7:e3:54:df:6f:75:ad:cb:77:ee:d4:1c:
95:5a:d0:f1:12:26:92:a2:92:bb:14:94:d0:ee:f7:
65:3f:c4:49:44:22:d9:01:a4:2c:69:70:4a:32:dd:
15:dd:66:91:6f:13:f6:52:85:bc:3f:26:f2:4b:ee:
d5:ed:0d:02:c0:d9:c2:94:63:7f:79:3b:fa:86:75:
42:9b:1a:d9:fb:aa:2c:d4:45:b4:75:35:61:3e:c4:
a6:1a:b1:32:06:94:71:a3:ea:be:55:90:e0:84:14:
5e:6d:b2:81:0d:e8:7c:51:fa:27:02:6c:50:83:59:
4c:50:12:25:3d:ae:2c:6d:78:d5:75:31:9b:66:e7:
c4:32:dd:a3:06:fb:82:4c:8b:fc:0c:e1:68:c4:a3:
77:fc:b0:87:88:b1:45:e3:ed:82:0c:fb:23:c1:75:
54:d9:6d:cc:cf:e8:93:b2:11:93:c2:23:54:b9:c8:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:93:2F:19:C6:C5:F3:79:F5:DF:DF:83:50:1E:F3:13:D9:94:E9:07
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/LJMvGcbF83n139-DUB7zE9mU6Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.188.0/24
Signature Algorithm: sha256WithRSAEncryption
08:51:bc:73:26:71:6e:20:99:74:f2:9a:f2:2b:88:85:75:75:
de:02:87:f2:34:6c:53:84:2b:17:55:5b:cd:85:22:61:ce:d7:
ed:39:af:6d:2e:c9:e3:f2:4d:54:59:8f:61:f7:76:5c:2d:a8:
87:d2:81:53:ac:aa:28:40:17:1b:3a:f3:90:a5:5f:8c:b7:75:
72:f7:21:c2:bc:00:b3:9c:f9:cb:2a:0b:c8:28:fd:cf:8f:dd:
ae:25:a8:d4:55:d5:4b:9a:ad:7f:a6:c4:3a:12:7e:21:a0:b9:
19:9c:81:e2:50:07:11:89:41:b5:6e:ba:2e:53:01:5d:a9:bd:
21:1a:4d:04:54:13:02:37:55:c6:67:b8:fa:b6:c4:68:7f:b2:
37:1c:b7:ae:35:8b:54:90:02:98:19:37:cb:85:eb:63:e6:e5:
b7:8f:5b:85:4d:db:e9:59:06:d5:1b:69:48:af:ba:b3:41:21:
57:17:e5:c1:b1:5e:78:14:83:9e:32:ee:b8:f5:b1:ab:3d:12:
b8:9d:cb:5e:ab:a4:df:dd:e7:ea:02:86:82:4a:61:a3:ec:fa:
c8:2b:00:9f:79:04:03:c7:fb:82:9a:04:90:11:bb:bb:b5:be:
0c:12:1a:3d:82:6b:9c:d6:3d:bc:88:ce:12:43:07:b7:93:4a:
2b:46:d1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:32 2024 by rpki-client on console-fra.rpki-client.org