Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/llr8dNbVlbXY5kzNYDl4hEBvZNA.roa
File: llr8dNbVlbXY5kzNYDl4hEBvZNA.roa (raw, json)
Hash identifier: ezp7PbMlybQnjy2IYvY9eOGm5/yV71x7bOXUWRORusk=
Subject key identifier: 96:5A:FC:74:D6:D5:95:B5:D8:E6:4C:CD:60:39:78:84:40:6F:64:D0
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0185709510894A9F8EBD59C7B731529E8EB0
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/llr8dNbVlbXY5kzNYDl4hEBvZNA.roa
Signing time: Mon 02 Jan 2023 03:44:55 +0000
ROA not before: Mon 02 Jan 2023 03:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210546
IP address blocks: 194.113.233.0/24 maxlen: 24
87.251.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:10:89:4a:9f:8e:bd:59:c7:b7:31:52:9e:8e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 03:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=965afc74d6d595b5d8e64ccd60397884406f64d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e3:e5:4d:dd:a8:81:95:9b:83:06:ef:67:42:
ba:f5:6a:2e:72:7f:d8:bc:99:8b:f7:da:9d:cb:ca:
f0:95:58:5e:e8:57:2e:df:df:df:1f:fb:bd:21:5d:
13:23:ca:18:6e:c1:dc:7b:a7:8f:bc:05:e9:71:55:
47:57:13:ef:01:9c:b2:33:25:40:dd:dd:c4:7c:6e:
9c:54:01:10:d7:e2:6a:63:62:99:ed:aa:6b:b5:4d:
28:6f:1e:1e:5c:d8:55:78:11:81:07:18:2a:3d:24:
df:76:51:f2:bb:f5:24:59:83:d8:8e:08:79:5c:fd:
80:f1:eb:86:16:b8:75:82:66:7f:eb:c2:9d:37:06:
b7:52:ed:f0:e8:c6:d4:2c:ea:0d:43:28:0a:2d:09:
02:3b:82:de:11:df:ef:7e:d2:4d:9c:38:d4:06:68:
20:2a:63:a0:40:b8:80:52:f2:b1:bc:df:97:55:99:
fb:d8:f8:cb:55:07:2e:92:7d:7f:e0:b7:82:51:35:
1a:54:c4:06:8e:70:04:e1:b4:6b:f2:43:03:b9:ba:
3c:db:48:42:df:25:4e:ce:9a:3b:da:da:0e:1a:da:
a2:82:77:04:d6:2c:eb:20:12:6d:db:ab:7f:a7:5b:
c3:b3:fb:1b:09:d7:b8:d6:95:20:fd:b6:2a:99:3b:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5A:FC:74:D6:D5:95:B5:D8:E6:4C:CD:60:39:78:84:40:6F:64:D0
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/llr8dNbVlbXY5kzNYDl4hEBvZNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.78.0/24
194.113.233.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:92:bb:e8:55:c3:08:69:3c:d3:d6:04:be:f1:b4:e2:a9:42:
14:16:d9:20:56:70:92:b5:0b:b2:7c:68:9e:1e:b0:03:5c:7a:
17:e6:34:07:0b:96:4d:92:75:3d:8f:14:95:4e:c1:84:27:62:
a6:1f:3f:52:82:4d:56:55:f3:93:c6:11:86:08:70:a7:87:7f:
f0:75:6d:cd:0d:e9:4f:71:2c:18:34:46:26:ed:80:d9:f4:b0:
82:8a:a9:25:3e:35:d5:93:92:fa:d6:82:82:4d:5b:5a:ea:14:
c8:4a:67:56:a7:e8:2d:95:c8:97:e3:c9:e5:74:42:99:fa:7e:
0e:45:cc:6a:04:03:8c:1b:45:46:af:54:f0:e1:77:1b:7c:8c:
5c:34:83:1b:2e:46:26:07:48:7d:4e:19:24:3e:ef:94:ce:8f:
06:de:e6:a1:ca:51:0a:3b:e1:b2:14:3a:88:71:90:7e:68:15:
2e:ca:a8:d3:a1:cf:b1:49:4d:db:67:d8:92:c2:8f:97:7c:49:
84:10:d8:ad:1f:ec:39:33:fd:f0:bb:e7:55:b8:c3:d0:ee:89:
dc:73:8b:d9:47:41:c2:03:22:ff:83:ba:ae:c3:7b:7a:03:fb:
6c:c1:b9:15:62:7c:34:f2:d6:c3:ed:d8:b6:60:3d:0e:9f:b3:
cb:f4:ae:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:53 2023 by rpki-client on console-fra.rpki-client.org