Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/LvRg3wDitA5Fi4pW9SVLKfuRTKo.roa
File: LvRg3wDitA5Fi4pW9SVLKfuRTKo.roa (raw, json)
Hash identifier: Xj3M12RrFfvLINy0EQAYR2RZ16eUhx4h3PROfd0wQLc=
Subject key identifier: 2E:F4:60:DF:00:E2:B4:0E:45:8B:8A:56:F5:25:4B:29:FB:91:4C:AA
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 018C5DEF3245A7B0CD7DF4B381CB4D701B6C
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/LvRg3wDitA5Fi4pW9SVLKfuRTKo.roa
Signing time: Tue 12 Dec 2023 12:10:06 +0000
ROA not before: Tue 12 Dec 2023 12:10:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 5.252.10.0/23 maxlen: 23
5.252.8.0/23 maxlen: 23
5.252.8.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:ef:32:45:a7:b0:cd:7d:f4:b3:81:cb:4d:70:1b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Dec 12 12:10:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ef460df00e2b40e458b8a56f5254b29fb914caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9e:e3:c4:fd:e5:9d:ae:2a:1e:39:14:fc:25:
93:32:dc:69:bb:d9:ae:13:94:82:f8:77:a5:35:4e:
97:dd:3a:7e:bc:15:a0:a6:47:fb:9b:3e:9f:0e:78:
7c:17:c4:c9:a0:0d:4e:47:35:9f:72:3a:42:da:42:
ed:34:58:ad:e5:6e:21:7c:8b:34:78:84:0f:e0:9e:
47:43:aa:af:15:b7:d7:d8:ce:1c:24:72:d0:a3:67:
46:65:9e:97:c7:56:9b:64:41:c2:b9:65:76:1f:4b:
52:df:a0:46:e2:a2:7c:8e:ad:13:35:6a:82:25:79:
7c:6a:79:f2:d4:44:7a:39:56:85:7d:b1:84:ba:03:
7a:93:7c:9f:75:9b:30:02:fa:85:d6:12:b4:3c:28:
1a:a7:4e:b8:fc:81:a3:c7:76:23:2b:ac:89:6a:af:
e0:49:25:f6:ff:f4:2c:05:bd:b1:20:7c:85:87:72:
98:73:04:a3:fe:b3:84:c9:40:e7:f9:14:c6:de:db:
8d:eb:9e:eb:7e:7d:22:c4:08:db:d8:e7:12:97:d5:
cb:09:9e:ff:e3:d5:85:48:79:62:ad:05:a4:c1:be:
37:34:02:44:5f:e7:ce:78:8a:4d:cc:81:e4:71:0f:
32:c6:fa:b5:95:2c:44:ad:aa:ee:37:b5:a1:41:1c:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F4:60:DF:00:E2:B4:0E:45:8B:8A:56:F5:25:4B:29:FB:91:4C:AA
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/LvRg3wDitA5Fi4pW9SVLKfuRTKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:d9:75:b0:c0:3a:66:1c:4b:b0:32:14:53:da:09:04:c6:87:
ba:e9:56:05:4e:6a:9c:d0:5c:a6:39:da:21:57:7f:24:d1:3f:
47:9d:b5:ef:f7:00:75:f8:10:e1:b7:2d:95:a7:06:51:b3:cd:
83:44:fd:ed:06:dd:1c:6e:c5:93:80:9f:3b:27:af:22:0f:44:
b9:0b:3e:d0:f4:7a:1d:76:a0:02:7b:48:28:c9:81:8e:f4:fd:
25:7b:d3:1b:11:7c:e5:9a:95:a6:57:3d:c7:46:28:f2:d3:ec:
bc:1b:5e:c4:73:a4:25:0c:81:a2:07:22:98:46:0a:f8:f8:07:
b2:35:5d:58:26:48:c7:e0:e9:c4:0a:ab:71:f9:e6:fa:dc:4a:
32:9e:8a:20:ea:68:8d:e6:37:cd:0e:60:64:20:e2:85:16:58:
fc:71:ef:93:28:d9:be:42:01:f8:f7:a9:b8:ae:2e:a3:aa:b1:
e2:d5:7d:3d:87:0e:a8:f6:00:36:ea:9e:e1:19:39:80:5c:d7:
87:d8:bb:83:8e:1f:79:9c:ba:8d:24:8a:95:fb:de:b0:f8:33:
aa:60:58:a7:9f:e3:94:36:2f:c6:bc:86:a3:a3:e9:cd:8f:25:
a4:4e:2e:0d:28:e8:d0:82:41:38:68:47:09:88:2e:0e:56:d6:
9f:57:0e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 10:41:36 2023 by rpki-client on console-fra.rpki-client.org