Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/lmjiovnInOVYK7DClYaWr-PsWVM.roa
File: lmjiovnInOVYK7DClYaWr-PsWVM.roa (raw, json)
Hash identifier: PApN2YUKvHQQ95v3mJ69d44eqm/Y+ZfA3mRqAm6duns=
Subject key identifier: 96:68:E2:A2:F9:C8:9C:E5:58:2B:B0:C2:95:86:96:AF:E3:EC:59:53
Certificate issuer: /CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Certificate serial: 018C9B3A4CA747487927CD8E0236E38B1C49
Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/lmjiovnInOVYK7DClYaWr-PsWVM.roa
Signing time: Sun 24 Dec 2023 09:48:58 +0000
ROA not before: Sun 24 Dec 2023 09:48:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211467
IP address blocks: 193.34.83.0/24 maxlen: 24
185.98.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9b:3a:4c:a7:47:48:79:27:cd:8e:02:36:e3:8b:1c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Validity
Not Before: Dec 24 09:48:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9668e2a2f9c89ce5582bb0c2958696afe3ec5953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:9f:e7:1f:35:40:98:6d:79:30:0b:7d:8b:
39:d5:f1:a6:fc:78:f4:14:77:51:86:64:5a:a7:af:
97:45:d7:90:ff:12:0f:3a:27:28:0f:a9:17:bc:3a:
73:74:03:a7:64:c8:fd:d7:43:50:ee:33:9b:15:0f:
a4:42:67:40:8d:fe:e5:5c:08:ad:44:c3:42:89:63:
ab:2d:e1:5a:8b:0d:18:bb:db:13:84:e8:19:39:1d:
4e:77:88:6f:f3:f5:32:05:17:15:72:56:65:7a:36:
07:c1:86:ba:c6:43:26:db:3b:cd:fc:66:ca:31:9b:
9a:d8:1d:b0:41:ec:7c:4d:6d:71:8e:d5:54:4a:5d:
7d:10:a2:da:83:62:71:d6:f4:ef:ad:31:c6:b3:6e:
43:94:9f:79:45:d1:94:23:33:54:f3:68:9b:c8:6d:
cf:aa:ac:d0:41:67:a8:63:4e:fa:54:45:4a:a4:02:
37:68:5b:b0:c9:da:8d:82:f0:c9:2a:08:f6:4c:7c:
d3:ac:5b:b8:85:bf:91:1a:31:46:a1:43:b2:e4:c9:
71:bb:88:93:0b:fa:04:4c:37:a7:fb:c9:9e:e4:b8:
1e:02:08:28:a6:56:70:9a:e2:69:db:36:f2:b3:33:
0f:ce:94:18:fe:b2:7e:27:de:c8:f3:eb:d5:e3:cd:
0e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:68:E2:A2:F9:C8:9C:E5:58:2B:B0:C2:95:86:96:AF:E3:EC:59:53
X509v3 Authority Key Identifier:
keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/lmjiovnInOVYK7DClYaWr-PsWVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.219.0/24
193.34.83.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:13:b0:18:69:52:93:a0:e1:37:3d:b8:9a:8c:a8:3f:f9:61:
9a:08:5f:48:e0:81:4b:d5:4c:d8:40:38:d3:0b:4b:ed:40:a0:
79:f5:91:22:e7:5f:de:1f:f3:18:f3:18:dd:1f:e5:8a:b0:46:
24:04:2f:f2:c5:91:1c:e3:28:a6:8a:a0:d9:c2:b6:9a:dd:c5:
f4:88:7a:6f:79:37:b5:96:fb:93:4e:e7:e9:8f:42:9f:6f:ce:
3e:23:a6:aa:e3:ed:8f:45:7c:22:18:7b:33:ec:65:66:66:64:
93:49:db:f4:db:b5:c8:3a:ff:4d:61:76:75:c1:4a:a2:76:d1:
cb:d0:27:61:1d:69:44:7f:cc:e7:9d:f6:24:70:fe:ec:a6:f0:
ff:ec:86:2e:e5:8f:90:06:7a:7d:a9:70:c9:88:c2:a3:da:2b:
47:6f:9a:34:59:8b:aa:32:6d:48:7a:e4:a3:af:a2:45:bf:e7:
e9:cc:32:1f:5b:d2:53:28:a5:5b:6f:d7:7a:41:b7:4c:f9:b5:
6a:f6:7e:1c:b5:ed:8b:33:19:88:34:f3:5a:8e:36:ed:4e:c4:
95:d0:00:b5:ed:9d:b3:70:ca:9c:8b:30:9b:aa:53:04:71:99:
f6:53:aa:e6:fe:21:15:17:1b:cb:8c:55:b7:45:94:31:c4:40:
d5:4b:17:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:33 2024 by rpki-client on console-fra.rpki-client.org