Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LVfPaPBwLzTLDx_S9hvTUa3c-as.roa
File: LVfPaPBwLzTLDx_S9hvTUa3c-as.roa (raw, json)
Hash identifier: lQjojfW2lTl0No76MKsJxLH2iNxSm3sA68CUolYZcwE=
Subject key identifier: 2D:57:CF:68:F0:70:2F:34:CB:0F:1F:D2:F6:1B:D3:51:AD:DC:F9:AB
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01857355DB3A9CD4E89FCE4B23C5E89D7D90
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LVfPaPBwLzTLDx_S9hvTUa3c-as.roa
Signing time: Mon 02 Jan 2023 16:34:44 +0000
ROA not before: Mon 02 Jan 2023 16:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42816
IP address blocks: 212.115.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:55:db:3a:9c:d4:e8:9f:ce:4b:23:c5:e8:9d:7d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 16:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d57cf68f0702f34cb0f1fd2f61bd351addcf9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:7a:07:3e:d4:ec:47:bf:f3:45:6c:2e:7e:
19:a5:6c:01:48:e5:ef:ec:cc:ea:8c:dd:c9:02:72:
c5:00:59:51:97:cc:84:54:92:bd:a1:1e:20:cc:31:
76:7f:9a:c6:89:c8:85:49:ab:f0:24:1a:57:65:d9:
36:ae:91:3f:26:7a:3d:37:4c:9a:78:0d:60:e8:f3:
e7:dd:96:c5:dc:8c:ab:24:c7:a8:23:22:9a:98:7d:
22:ec:df:1f:57:d4:47:f2:bd:3a:4c:e7:f8:e0:9f:
5b:34:50:8b:57:8e:23:a8:70:14:a7:b6:3c:08:e2:
ac:fe:bd:e2:ab:9b:bd:09:ab:d9:be:09:98:fe:c8:
4b:97:6d:2b:5e:3d:6d:a2:4c:70:00:c7:07:b2:9d:
6d:d6:b4:a2:0c:cb:d2:a4:25:75:a8:77:0a:5e:3d:
e9:22:48:4a:19:5e:2b:2d:95:9c:ed:16:26:0a:92:
75:76:e5:5d:4a:c0:cc:b0:b6:a1:fd:d1:c4:87:2d:
fa:55:92:e2:9d:80:97:b2:37:0f:84:d2:e7:9a:6d:
08:13:06:e2:ca:46:f6:2e:a6:77:fa:6c:29:d6:9a:
57:ab:4f:85:70:7b:f4:36:d7:7a:97:37:69:3e:f1:
dd:43:1f:e7:0e:29:21:81:3c:5a:09:86:63:bf:d8:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:57:CF:68:F0:70:2F:34:CB:0F:1F:D2:F6:1B:D3:51:AD:DC:F9:AB
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/LVfPaPBwLzTLDx_S9hvTUa3c-as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.141.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:14:89:e3:5d:02:1c:1e:7a:a0:fb:a5:e6:77:53:33:67:4e:
98:ba:49:8f:69:8c:2e:4c:56:ed:bb:95:e8:97:c6:46:4a:ef:
20:6d:30:e9:c0:87:6f:66:53:b5:0a:59:f6:33:6f:a6:26:b3:
ca:b9:69:f0:3b:44:df:cb:3c:0d:8a:c7:9d:d7:ea:41:4f:b1:
cb:c0:e8:59:bc:9d:90:6d:d1:01:ea:21:fe:7d:66:97:e3:98:
3c:84:64:cd:79:d1:6f:ed:40:67:96:83:62:a5:58:e2:24:ac:
3d:ed:ba:1d:38:df:d3:fa:cb:75:c0:0b:36:44:20:99:b6:dd:
19:32:4a:ea:8d:17:4a:a8:20:ad:cc:9a:94:d0:2c:74:fc:b9:
6e:a9:fb:26:31:24:4c:96:26:3c:94:44:18:ed:b5:40:e4:c4:
1b:de:c1:7e:33:e5:b8:01:ac:e7:a5:3f:c6:5a:5b:11:bc:a9:
6e:46:77:59:fd:27:57:f7:54:1b:df:9d:07:32:a2:cf:7c:cd:
d0:e8:fc:45:7c:c6:c4:31:b5:d1:57:25:52:52:1b:75:6f:2c:
05:15:31:91:24:ea:7d:8c:fa:76:5c:71:79:bd:96:46:42:48:
ff:8c:06:ed:1d:39:d9:ee:7b:eb:36:96:d5:38:3a:a0:7b:9b:
b0:61:b2:b8
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 9 14:19:22 2023 by rpki-client on console-ams.rpki-client.org