Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/9_LGcCBdYvodRGJW2VyZT7GlLIc.roa
File: 9_LGcCBdYvodRGJW2VyZT7GlLIc.roa (raw, json)
Hash identifier: jF/H5hkgdhx2TBUKoz754rMeEGmtA6g9vo6qGh3ZGcs=
Subject key identifier: F7:F2:C6:70:20:5D:62:FA:1D:44:62:56:D9:5C:99:4F:B1:A5:2C:87
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 018570B0A335CAB05755105D9A9DF94221B5
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/9_LGcCBdYvodRGJW2VyZT7GlLIc.roa
Signing time: Mon 02 Jan 2023 04:15:02 +0000
ROA not before: Mon 02 Jan 2023 04:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50592
IP address blocks: 193.105.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:a3:35:ca:b0:57:55:10:5d:9a:9d:f9:42:21:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: Jan 2 04:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7f2c670205d62fa1d446256d95c994fb1a52c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:91:8c:82:64:e3:5f:61:ae:e2:54:86:b5:
2a:3b:87:f1:9f:54:d7:e8:cf:39:af:cf:5a:4e:fb:
b2:3e:48:26:40:b7:9d:70:ba:c4:c8:24:f6:f8:8f:
15:6e:e8:03:e6:30:5c:f8:ab:78:7c:8b:90:96:8a:
3d:8e:36:e1:d9:9c:fe:fb:e8:57:0d:c6:6a:7c:a3:
10:f5:88:7e:76:7a:0e:f4:11:94:05:97:0f:09:f8:
7c:5a:31:a3:54:2b:74:ee:74:c7:6c:53:4c:84:5a:
66:16:50:de:31:95:fd:c8:a0:b0:09:ff:65:d7:a8:
72:de:fe:57:53:bc:c7:b3:d6:2c:73:6f:95:0a:7f:
12:b1:25:cd:5e:83:15:a6:e8:62:da:25:6b:38:73:
cd:1d:3e:51:b3:53:59:8f:03:40:d0:eb:ee:b4:91:
b9:47:60:31:af:98:b6:80:e7:0a:99:f1:dc:6d:7d:
fa:71:cc:a7:52:13:95:a7:9e:7a:03:2c:fa:04:dc:
8d:3d:f8:7f:1d:7a:22:97:89:ac:3f:f4:53:52:a8:
ba:4d:4d:36:04:fa:66:0b:53:bb:c7:fd:bb:b8:97:
9a:8f:8c:69:a1:ec:6b:a9:d4:03:ca:90:f9:e3:0f:
fe:99:cc:fe:fb:91:d2:73:b9:76:07:bc:96:c3:e7:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F2:C6:70:20:5D:62:FA:1D:44:62:56:D9:5C:99:4F:B1:A5:2C:87
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/9_LGcCBdYvodRGJW2VyZT7GlLIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.115.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d0:c4:e1:bc:b6:c5:b2:af:06:67:17:3e:e8:1b:0a:c9:b8:
8c:9f:d1:7a:73:ef:38:ca:e9:63:ee:bc:ad:e3:4f:1e:39:68:
00:ec:e0:a4:9d:ff:c5:c8:d4:e9:d0:db:2f:7a:07:14:41:6f:
3a:c5:bb:c5:5d:cb:11:f4:e2:ca:04:e8:f4:63:37:ae:47:d0:
27:26:6d:dd:91:e7:27:8d:de:1e:4a:16:7b:c5:76:33:d3:a3:
c6:f6:3a:5b:5d:03:56:6c:17:a1:2f:54:99:a9:be:b3:3b:f1:
d2:84:39:f0:6f:f6:fd:b3:6f:2a:05:3c:27:a2:ad:b8:b7:90:
d5:0d:2b:58:71:57:82:7e:f0:40:2b:9a:d0:cd:b1:72:97:05:
e8:0a:d6:04:b9:ea:cc:5a:29:2a:22:b4:8e:76:34:74:81:d1:
9b:5c:61:7d:eb:35:67:79:02:76:8b:98:4f:bb:5f:84:ce:81:
dc:d6:05:8d:33:1e:71:81:ff:c6:96:6a:a6:ef:0f:1b:08:bc:
ad:3d:5a:53:44:6e:8f:9f:90:70:12:33:a5:d2:ec:8b:84:31:
39:38:90:09:2e:5e:d5:68:b0:b6:71:74:81:f2:73:0e:72:93:
3a:52:c9:77:05:26:9c:50:f1:27:d1:97:1b:5a:c5:b7:7c:b3:
3f:e2:52:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:11 2024 by rpki-client on console-ams.rpki-client.org