Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/lv_vnpFaHirLyF4l0CGOqmsBLDA.roa
File: lv_vnpFaHirLyF4l0CGOqmsBLDA.roa (raw, json)
Hash identifier: 4Dsb2pEzsoU9lNCggpCCxgWwV3Xa2ZPMU9nQ86+UMWA=
Subject key identifier: 96:FF:EF:9E:91:5A:1E:2A:CB:C8:5E:25:D0:21:8E:AA:6B:01:2C:30
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 01889EC33029772718FFE60EC90C8056A164
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/lv_vnpFaHirLyF4l0CGOqmsBLDA.roa
Signing time: Fri 09 Jun 2023 06:06:11 +0000
ROA not before: Fri 09 Jun 2023 06:06:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.160.102.0/24 maxlen: 24
193.160.113.0/24 maxlen: 24
193.160.130.0/24 maxlen: 24
193.160.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9e:c3:30:29:77:27:18:ff:e6:0e:c9:0c:80:56:a1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jun 9 06:06:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96ffef9e915a1e2acbc85e25d0218eaa6b012c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:d0:98:50:bf:6e:74:c0:89:4a:7a:18:22:
4b:3f:6e:00:ce:8a:98:3f:45:63:00:f8:01:b1:ee:
e5:23:41:bc:e8:b2:e8:93:f6:86:75:39:7d:d2:d5:
d3:c2:5f:94:7b:38:0d:66:2e:05:83:ee:92:a4:49:
50:aa:53:e1:53:4c:e9:9b:95:66:d4:cb:bc:b0:9e:
4b:e7:90:e0:90:e9:19:03:5a:60:78:51:c2:8c:45:
a9:ed:29:48:fc:bf:33:4c:b7:ca:61:59:6c:ea:b9:
40:2c:61:86:a7:32:59:33:06:c9:c0:90:78:42:2e:
ba:0b:84:3b:91:33:24:eb:bc:cd:87:cc:bf:d7:5d:
4e:f2:fc:7c:23:e2:fb:4c:e9:52:62:71:ea:fa:28:
1e:c4:0d:3c:60:85:73:cf:82:a6:e4:46:c6:ae:2a:
44:13:ec:bd:66:32:66:7e:78:3d:61:81:31:aa:03:
e1:3a:99:b6:e1:9a:af:59:31:7e:48:aa:9b:f5:fd:
a4:97:ab:58:9c:2c:e2:63:7f:9a:93:98:f9:42:9c:
d5:79:9e:5b:9c:58:4e:32:2e:aa:93:05:07:58:6f:
62:8c:9b:10:92:24:bf:1c:9c:4c:f6:9c:fe:d8:28:
83:04:1a:9f:cb:76:48:06:bd:c8:3b:5c:93:3b:ce:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FF:EF:9E:91:5A:1E:2A:CB:C8:5E:25:D0:21:8E:AA:6B:01:2C:30
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/lv_vnpFaHirLyF4l0CGOqmsBLDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.102.0/24
193.160.113.0/24
193.160.130.0/24
193.160.136.0/24
Signature Algorithm: sha256WithRSAEncryption
07:95:69:30:ea:f4:a3:e3:43:44:36:22:99:19:bf:65:6b:9f:
d0:e9:e5:62:d9:a1:9a:cd:69:c4:20:1b:13:9b:79:78:bc:7c:
f0:a0:35:ef:51:e7:c5:67:7e:c9:1c:f2:61:c0:69:68:82:cd:
44:fb:af:1a:5b:47:9f:99:7c:5c:e3:67:9f:7f:1f:98:27:99:
2f:05:1d:6e:72:5c:d0:b8:46:d8:32:f0:c7:f3:6a:47:2b:ad:
2f:96:3b:33:b0:87:44:52:cb:24:21:3b:25:eb:c6:7d:30:f5:
7c:05:47:7e:15:ad:b8:7f:18:16:9f:7f:77:26:cd:96:88:53:
84:40:4b:ab:11:b5:45:3e:b8:64:89:35:46:8b:1a:db:90:40:
34:4c:0b:1b:17:b6:67:6a:3a:15:d0:05:7c:37:7a:02:aa:c8:
4b:2a:ca:1a:5d:a9:9d:a1:7f:e4:ce:02:3d:f4:e5:6c:35:9b:
ce:e8:31:ca:ad:9f:1c:a0:68:08:0d:74:a1:98:63:30:cb:74:
b0:45:46:37:0a:f3:70:26:e5:fb:5e:e0:58:f8:b8:cd:87:7d:
23:11:d2:10:55:7f:b7:25:94:e6:5b:4e:99:66:b8:15:d1:d6:
8c:85:ad:ef:f7:09:9a:39:de:08:8e:71:c3:23:f2:b6:02:33:
56:88:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:22 2023 by rpki-client on console-fra.rpki-client.org