Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/l69b19x6_VrW4XMR0MP-Wbjl8dk.roa
File: l69b19x6_VrW4XMR0MP-Wbjl8dk.roa (raw, json)
Hash identifier: b4vGzDqxzeIdvtlrR6JVOBb/cg0afLc9jrMnsErVR9A=
Subject key identifier: 97:AF:5B:D7:DC:7A:FD:5A:D6:E1:73:11:D0:C3:FE:59:B8:E5:F1:D9
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 018B28D7D7CEC2055A185CF9E5E3679E5604
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/l69b19x6_VrW4XMR0MP-Wbjl8dk.roa
Signing time: Fri 13 Oct 2023 11:41:55 +0000
ROA not before: Fri 13 Oct 2023 11:41:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54252
IP address blocks: 185.81.127.0/24 maxlen: 24
194.107.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:d7:d7:ce:c2:05:5a:18:5c:f9:e5:e3:67:9e:56:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Oct 13 11:41:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97af5bd7dc7afd5ad6e17311d0c3fe59b8e5f1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ba:3f:3c:67:6d:36:da:5d:89:7a:e1:1c:ed:
cb:cc:aa:3d:bc:97:62:0b:43:37:67:eb:19:14:fc:
2a:8c:02:16:c5:eb:cb:00:66:f9:5e:81:5f:a7:d4:
c9:2b:48:d0:8b:0a:c6:af:d6:d8:c2:70:be:2d:88:
81:63:9b:f0:df:39:b5:ed:4c:64:92:14:ed:da:1c:
c5:a5:47:7c:9e:d1:a9:8d:70:0e:84:8f:6b:04:a0:
31:c2:4e:ad:c7:70:08:b7:f9:3c:1b:61:57:c8:0b:
c9:e1:75:54:82:af:2c:9c:91:a8:2e:b0:a3:57:16:
40:22:f9:98:a5:d3:45:26:05:02:9c:df:e3:dc:86:
68:6b:28:5b:6d:fb:12:d0:81:35:a5:13:3e:13:00:
a7:0e:fd:a2:ae:03:89:0b:45:b2:7d:0b:55:0d:09:
e3:23:ce:86:34:80:ab:54:44:9a:62:94:05:ea:d3:
21:a3:1b:a4:ef:41:83:72:c2:3d:d2:85:fc:9c:0e:
22:24:84:90:e8:5a:83:26:66:c9:d3:23:39:15:00:
69:24:8a:b3:9a:3a:43:fb:0c:47:40:e5:97:b7:ce:
a8:ff:9c:63:08:c4:c4:5f:4b:5a:7c:6a:cb:c8:37:
2d:1d:a2:fe:98:63:ad:b4:ea:ad:fe:c3:57:70:e0:
28:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AF:5B:D7:DC:7A:FD:5A:D6:E1:73:11:D0:C3:FE:59:B8:E5:F1:D9
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/l69b19x6_VrW4XMR0MP-Wbjl8dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.127.0/24
194.107.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5e:c9:dd:98:0d:46:3c:4d:dc:bc:47:0b:43:c7:27:43:3d:
aa:4c:b4:5c:7b:5d:9d:70:19:02:f2:4e:37:52:19:d5:02:30:
6c:b3:74:c9:9c:d5:5a:58:2f:0e:16:b1:e7:65:06:71:0e:f1:
ab:7c:42:c4:99:b6:c1:61:bc:18:77:a9:31:c6:8d:3e:d6:6c:
21:0c:60:2a:14:64:e2:7f:1c:9c:c0:91:b9:ae:47:d5:e0:64:
88:45:ad:be:fe:66:08:89:72:15:70:f3:3b:88:94:31:80:a1:
87:72:04:5d:b6:a3:61:d9:0f:cd:93:f8:60:00:94:43:e7:90:
52:a9:f3:4f:14:2f:22:bf:76:b1:f7:5b:07:e5:d3:ee:48:a2:
65:81:04:ab:b8:40:1a:fa:44:bb:29:c4:8c:fe:ac:71:25:84:
ab:66:14:1b:9a:58:dc:ff:f2:d4:3b:ab:5e:be:91:32:50:e1:
6c:81:aa:83:97:32:e4:ec:bf:87:56:4a:5a:b2:d4:54:be:a7:
9c:de:ac:fa:9b:74:3b:fe:93:4f:21:9c:c1:f8:e3:e2:23:ca:
6e:bb:7f:9b:3f:81:58:81:bd:a9:38:be:00:2c:13:a7:be:40:
41:55:5d:8d:80:41:50:db:2c:ab:5c:1e:df:d3:86:7d:cc:8f:
d5:2a:06:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:46 2024 by rpki-client on console-fra.rpki-client.org