Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/lWACDWOkchmrmr4dptTriSnR3OA.roa
File: lWACDWOkchmrmr4dptTriSnR3OA.roa (raw, json)
Hash identifier: SwpN58K9uuUOdD672FE3gp2F1JSzgDSiyYN9UJMw0UM=
Subject key identifier: 95:60:02:0D:63:A4:72:19:AB:9A:BE:1D:A6:D4:EB:89:29:D1:DC:E0
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0189AC3C711171B85205EC1FDD6123D3E7AC
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/lWACDWOkchmrmr4dptTriSnR3OA.roa
Signing time: Mon 31 Jul 2023 13:56:29 +0000
ROA not before: Mon 31 Jul 2023 13:56:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 213.209.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ac:3c:71:11:71:b8:52:05:ec:1f:dd:61:23:d3:e7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 31 13:56:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9560020d63a47219ab9abe1da6d4eb8929d1dce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:28:a2:3c:5d:7d:d8:9b:85:b9:a5:fa:c9:f8:
86:8c:a9:4a:21:48:06:10:23:a5:e3:c1:76:d7:bc:
a1:58:a8:7c:ac:b4:3a:bb:79:bb:73:73:f7:9d:03:
fd:fb:3c:87:c8:df:dd:61:c3:35:ae:97:d6:9c:4b:
35:5f:86:d9:80:16:18:da:7b:e5:23:c3:03:ea:fa:
06:ac:79:d0:e4:e5:36:04:b8:cd:09:01:3a:42:61:
de:e2:cf:6f:27:8f:f3:61:79:51:14:b8:e9:ec:95:
05:8b:b5:8e:48:a3:f9:89:fb:00:5b:b2:ed:a9:26:
13:90:f9:3b:14:a6:e9:7c:91:60:c9:42:df:16:b8:
ce:cf:44:7f:04:68:b3:f9:e2:1c:b6:a0:bf:1b:91:
94:df:e0:70:fe:dc:23:e4:bc:5d:9e:e4:97:31:77:
0b:df:09:80:13:0f:ea:44:8a:f3:7f:db:05:df:77:
96:dc:1c:4f:0f:f7:22:c6:a0:31:ff:5e:fc:5d:32:
cc:f2:fa:4e:ce:b8:90:34:1f:3c:5b:fc:cb:8b:2e:
57:a7:64:35:e6:95:d6:15:f6:cf:30:b1:a6:b9:74:
a7:0d:54:9a:5a:7e:3c:b5:97:89:db:82:54:cf:41:
a4:1a:f6:1a:20:86:82:34:a2:90:68:21:d2:39:5b:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:60:02:0D:63:A4:72:19:AB:9A:BE:1D:A6:D4:EB:89:29:D1:DC:E0
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/lWACDWOkchmrmr4dptTriSnR3OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3b:d7:73:82:c4:10:cf:c6:ac:73:56:87:f8:d8:16:fb:df:
56:cd:ae:a5:78:51:5b:e7:89:5b:a1:6c:c5:cd:fb:b0:2f:3c:
a2:dc:d6:98:0f:1b:2d:85:f2:4f:3d:fa:b2:fe:70:f0:b8:4a:
8e:09:34:1e:da:1c:71:c0:ea:4b:09:18:ba:72:31:c6:92:0f:
af:9f:58:38:c1:2f:16:4b:45:e5:b5:3b:d6:10:d0:7e:2c:2a:
70:e5:c4:f8:ee:4a:fd:4c:dc:e3:da:29:6a:32:14:ff:7b:12:
c4:17:c8:b4:87:ac:81:d1:8e:e2:a0:53:45:2d:31:b0:ba:50:
89:64:17:74:1a:02:88:38:03:ca:a7:04:d2:83:c7:20:4b:da:
fb:de:36:62:21:28:04:6d:b4:34:10:d6:b8:ab:e2:3d:8d:c4:
e8:3b:a3:1d:56:3e:1c:21:3a:60:c5:62:1f:19:bc:fd:c8:60:
5b:9d:95:8d:b6:0d:47:06:98:e7:f4:e8:b9:f6:27:77:eb:86:
22:38:44:61:60:ab:15:67:93:c4:1c:78:92:3e:90:bd:7a:d6:
42:f2:41:1f:6e:73:5d:ad:19:f1:f8:04:f1:d2:48:3d:68:e0:
04:ef:65:a0:5c:dd:a8:5e:65:ac:f9:38:22:40:a9:2f:28:85:
f5:8c:ff:ff
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 19 09:18:07 2023 by rpki-client on console-ams.rpki-client.org