Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/LfV-izxVDf93rYH-ONm0klyxQCQ.roa
File: LfV-izxVDf93rYH-ONm0klyxQCQ.roa (raw, json)
Hash identifier: JQtW0LWhwb7Dx4Yw5AXrVwSasK1e/YpY1w7iplxaYwY=
Subject key identifier: 2D:F5:7E:8B:3C:55:0D:FF:77:AD:81:FE:38:D9:B4:92:5C:B1:40:24
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 01889B678221CDD5D9CBC3F3A1B8EC3BA05C
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/LfV-izxVDf93rYH-ONm0klyxQCQ.roa
Signing time: Thu 08 Jun 2023 14:27:11 +0000
ROA not before: Thu 08 Jun 2023 14:27:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.160.102.0/24 maxlen: 24
193.160.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9b:67:82:21:cd:d5:d9:cb:c3:f3:a1:b8:ec:3b:a0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jun 8 14:27:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2df57e8b3c550dff77ad81fe38d9b4925cb14024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:9d:5c:fb:6b:5f:56:39:0e:df:2d:57:2c:
20:88:99:0a:b9:f5:31:47:bd:27:98:1b:20:84:d6:
d0:2b:74:65:27:eb:77:48:69:3e:e4:a4:4c:9d:de:
f6:7f:4d:2b:7a:73:00:0e:96:a1:25:27:cc:1e:ac:
72:e7:03:3b:4b:de:cf:9d:36:52:6a:fe:dc:9e:60:
e6:ef:ef:7c:90:e7:dc:a1:8e:4c:d8:ee:fb:19:88:
d8:87:9c:e0:28:2b:ec:27:ed:e2:7e:78:e9:c6:b5:
4e:e8:10:a0:53:e7:a9:d6:41:71:a3:16:06:a3:83:
00:10:7d:71:36:70:3a:95:e8:d3:40:68:53:b0:08:
99:63:50:3d:b7:b5:f9:73:83:7c:13:7a:9f:67:73:
9b:d1:64:a9:65:a0:5b:b5:7e:7b:46:e9:67:b2:cc:
51:fb:e9:6d:c3:ec:8c:96:c4:1a:1f:49:ce:9d:2c:
db:47:22:3c:3e:ea:58:bb:53:4f:b4:bd:24:c6:f4:
20:2b:00:d6:21:67:56:e2:a3:51:5a:b7:6e:8f:cd:
ca:65:b5:de:ef:f1:2c:f1:cd:ea:7a:5d:98:ab:62:
8d:19:c7:7c:6c:8e:b5:5d:05:76:a7:35:60:06:7c:
73:01:30:5c:0e:99:f8:f2:0f:48:68:26:8a:29:a2:
60:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F5:7E:8B:3C:55:0D:FF:77:AD:81:FE:38:D9:B4:92:5C:B1:40:24
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/LfV-izxVDf93rYH-ONm0klyxQCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.102.0/24
193.160.136.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:57:a2:aa:2e:ca:d8:46:5d:a3:86:ed:d1:64:cb:ef:49:d0:
93:fd:69:a0:5a:9e:d1:d2:88:92:7c:76:e8:a7:6e:98:3f:af:
b5:1f:2c:6c:e1:2b:bc:1a:aa:ec:2f:d6:fb:2b:ee:f4:b9:17:
5e:65:cb:d9:89:34:8a:c2:dd:01:f7:38:9e:e1:ef:24:63:ab:
54:9e:bb:d0:55:45:68:a3:cf:b3:89:22:5a:54:c8:a9:bc:e0:
ab:57:04:60:82:05:14:83:b3:06:d5:85:46:ce:df:6f:ae:a3:
a3:71:6b:55:c2:97:91:0b:a2:ed:b3:41:54:13:ac:3d:2c:48:
29:c7:43:9a:45:aa:2d:07:38:89:cd:f3:9e:ef:3c:71:52:6c:
0d:01:ad:39:f8:e0:18:cb:f2:42:d7:62:f1:09:a8:4c:d7:4d:
c2:05:17:08:44:b5:84:60:bc:98:1f:ff:38:11:af:45:22:8f:
ae:ad:59:30:c1:74:f3:21:7e:02:c1:8d:13:a1:6e:38:0e:67:
ab:8b:34:32:5e:62:f3:ed:fd:2a:d2:5c:41:bb:40:9b:1f:ed:
2b:6b:e3:13:53:5d:9d:dd:6b:d7:4c:77:63:25:85:34:b2:81:
91:ac:21:45:4c:6d:b0:b1:57:07:8a:61:71:ea:b4:c2:ad:42:
fa:80:96:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:22 2023 by rpki-client on console-fra.rpki-client.org