Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-pb9_lyxapV6CoFXOyT8K3apjcs.roa
File: 1-pb9_lyxapV6CoFXOyT8K3apjcs.roa (raw, json)
Hash identifier: MbpKCCoNWeowYg2yYd+NMQQ3Bw0lHOeote2ksiJTrGc=
Subject key identifier: FA:96:FD:FE:5C:B1:6A:95:7A:0A:81:57:3B:24:FC:2B:76:A9:8D:CB
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018A1D7DD4841FB7F1FB551FF5FA6E7C6E26
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-pb9_lyxapV6CoFXOyT8K3apjcs.roa
Signing time: Tue 22 Aug 2023 13:45:00 +0000
ROA not before: Tue 22 Aug 2023 13:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 213.209.129.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:7d:d4:84:1f:b7:f1:fb:55:1f:f5:fa:6e:7c:6e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 22 13:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa96fdfe5cb16a957a0a81573b24fc2b76a98dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:a8:93:05:bd:86:ef:2c:4b:f9:a6:fe:aa:
c8:9b:34:4d:73:f1:83:51:5e:53:05:8e:86:90:cd:
34:3c:4e:8c:79:12:39:99:11:55:a4:10:b8:ec:5e:
a6:c4:2b:f8:3a:53:c8:75:13:11:d2:3d:5d:b6:22:
36:88:7e:20:6a:14:9f:50:fb:e8:53:0f:3a:87:e4:
ce:39:09:d0:5c:50:90:27:58:70:c0:84:c3:a9:91:
ec:96:39:b6:1b:38:87:24:89:8e:45:d1:a2:c8:b5:
47:4d:ce:be:86:54:4a:af:92:83:63:d7:b3:8e:ce:
cc:a2:28:df:67:01:03:3d:a5:13:88:ea:1d:3b:ff:
74:35:e8:3f:2c:20:64:31:2a:e1:03:91:ff:b3:c9:
8b:ff:b3:ef:47:4a:b8:1f:a9:35:fb:e9:b2:e6:1c:
1c:8c:4d:70:23:38:af:7f:f6:05:b8:e6:3e:5b:12:
84:fa:89:44:b1:28:50:08:9f:95:ce:41:49:13:d5:
dc:16:bd:76:76:4b:6c:93:c9:56:b4:d9:5f:bc:48:
c2:6f:62:7c:e4:5d:1d:0f:7e:4d:20:29:68:14:a8:
5b:24:a5:55:ba:69:6a:d6:5f:a3:85:05:2b:de:21:
77:37:ce:a2:1e:8e:e4:85:f4:90:52:3b:41:9b:2b:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:96:FD:FE:5C:B1:6A:95:7A:0A:81:57:3B:24:FC:2B:76:A9:8D:CB
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-pb9_lyxapV6CoFXOyT8K3apjcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.145.0/24
213.209.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:cc:e8:01:d4:63:b3:36:de:05:2f:54:a6:52:28:bf:6d:25:
bd:94:be:56:61:f9:50:65:49:8e:a2:56:cd:67:0b:b9:81:e2:
91:26:ea:36:a7:9b:fc:e7:45:e6:d9:b8:d3:0d:64:0c:71:db:
5e:48:42:fc:68:01:8f:00:39:bd:7c:68:2f:11:1e:38:91:fc:
e2:8e:86:23:2a:22:6d:e9:6f:c1:4e:d8:38:f6:ce:3c:28:7d:
1e:55:b6:99:ae:63:5d:77:6a:39:16:13:a6:1b:d5:f5:bd:f1:
48:f3:5d:c6:db:20:45:a7:d7:bb:3e:1e:cc:0c:d8:e6:cc:35:
73:a0:0f:c8:ae:11:83:d2:c9:d9:8c:14:2f:8f:5a:cf:38:4a:
bd:01:1d:f4:1c:b5:4b:b9:fe:c9:ed:b8:8e:cf:80:15:58:43:
c2:85:f5:10:be:53:19:39:da:42:94:74:d8:07:66:63:8f:aa:
8c:33:3e:56:8c:17:50:a4:9c:e0:85:99:fe:e9:a7:29:47:90:
3c:44:5d:a7:bf:1b:af:9c:0f:05:28:33:f6:b4:fe:fd:b6:05:
d7:12:bd:13:78:ad:19:77:93:5f:85:b7:74:71:75:8b:db:59:
be:e2:b1:cb:fb:44:79:ca:c6:d9:b6:bf:e4:5b:6b:18:38:37:
c1:1b:a8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 11:44:36 2023 by rpki-client on console-fra.rpki-client.org