Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Lc6EVNctEFiNAAJhmUw0pEWM2qI.roa
File: Lc6EVNctEFiNAAJhmUw0pEWM2qI.roa (raw, json)
Hash identifier: kGBme74e4yJs+OXyLCdJurpcellFmlJkFHuhkdBjXYY=
Subject key identifier: 2D:CE:84:54:D7:2D:10:58:8D:00:02:61:99:4C:34:A4:45:8C:DA:A2
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01866890106D6E0D92C7BDE9EE6525759703
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Lc6EVNctEFiNAAJhmUw0pEWM2qI.roa
Signing time: Sun 19 Feb 2023 07:25:17 +0000
ROA not before: Sun 19 Feb 2023 07:25:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 217.113.24.0/22 maxlen: 24
5.134.84.0/23 maxlen: 24
5.134.86.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:68:90:10:6d:6e:0d:92:c7:bd:e9:ee:65:25:75:97:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Feb 19 07:25:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dce8454d72d10588d000261994c34a4458cdaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:ee:00:5a:2d:87:18:bb:91:30:e6:f3:9c:
8f:51:c0:af:85:b6:dc:59:b4:94:45:27:31:f0:7f:
6c:a2:4d:d8:db:71:f8:3d:64:07:28:01:3d:7b:c9:
3d:42:a9:64:9d:7e:0d:4a:f6:02:8f:84:1e:1d:66:
a1:88:c7:ca:ef:6d:37:72:a1:94:2d:36:05:0e:a5:
63:2a:95:17:63:67:73:11:bf:30:d6:43:17:95:39:
26:dc:91:40:21:41:76:a5:1d:17:19:ad:39:09:6d:
8d:76:4b:52:8d:bb:0e:a5:82:ae:8a:ea:32:b6:6d:
07:14:53:2c:a3:1a:60:f5:9b:ac:36:32:06:47:ea:
08:29:0c:e6:1f:6c:2c:d4:f0:6f:2f:75:48:f3:a8:
04:d7:18:e1:95:b4:dd:0a:bc:47:78:f1:b0:0c:49:
40:be:24:2f:6b:38:68:12:3e:ad:8e:3c:72:9c:4c:
9b:4a:20:35:65:c8:e9:14:97:4e:05:f8:c5:8d:f9:
78:59:40:49:49:95:ac:67:de:86:57:81:04:2e:f2:
7d:cb:77:30:dd:be:aa:d7:6d:08:3c:2e:04:13:9a:
9f:fc:8d:42:00:f9:70:40:5b:89:e9:05:d8:c4:fb:
4a:6f:df:08:7a:7d:11:23:1c:fe:37:c8:f2:6c:9a:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CE:84:54:D7:2D:10:58:8D:00:02:61:99:4C:34:A4:45:8C:DA:A2
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Lc6EVNctEFiNAAJhmUw0pEWM2qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.84.0/22
217.113.24.0/22
Signature Algorithm: sha256WithRSAEncryption
21:09:bd:e6:1e:60:28:5c:0d:f5:a1:56:53:e2:70:e0:b3:43:
c6:69:2d:2f:3b:0b:5a:d6:75:e4:75:da:15:ee:81:e2:28:b1:
4a:b1:f9:3c:37:7a:74:64:c4:c9:91:80:6a:ad:1f:fd:26:3a:
5b:4b:23:46:bc:e3:34:da:17:94:3c:74:2d:5e:a1:fb:72:58:
8f:b8:64:1d:26:84:0f:40:bf:25:22:15:7c:55:0c:f8:52:c1:
e2:76:b1:dc:fd:5b:b9:a1:42:f0:0f:aa:e5:6d:dc:49:2b:28:
74:b0:60:5a:56:91:f9:4d:73:29:1e:c6:b8:3e:17:0b:51:b0:
e2:64:9d:68:8e:92:34:61:92:84:ca:31:8b:e1:30:e7:37:85:
5f:43:5f:f8:e9:1b:19:e0:4b:fb:4b:92:cf:6b:68:ad:2e:dc:
d6:da:8f:7f:7a:2f:2d:9b:87:7c:af:88:49:7b:d5:5f:69:d8:
bf:cf:87:46:a7:d2:91:b2:75:4b:c9:01:3b:02:07:13:74:4f:
aa:5a:3f:ff:c4:8e:27:f6:6f:8f:6f:0b:3a:cf:55:2b:af:f5:
59:c9:ee:17:7f:d9:4a:b0:f8:a3:0c:73:e1:d2:42:42:0a:00:
48:d6:73:27:28:ec:db:15:b9:5d:82:cd:f7:83:4f:2f:61:3d:
2c:29:8f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:23 2023 by rpki-client on console-ams.rpki-client.org