Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/0kLC04ji0517laEj6CJJMEBIp3g.roa
File: 0kLC04ji0517laEj6CJJMEBIp3g.roa (raw, json)
Hash identifier: ucmJONa7XSCYnmdCj1PkWKFBpBdDJvmnycY3tStSviY=
Subject key identifier: D2:42:C2:D3:88:E2:D3:9D:7B:95:A1:23:E8:22:49:30:40:48:A7:78
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 018570CBE46F6B9BFBAF93588D6F61F7A8CC
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/0kLC04ji0517laEj6CJJMEBIp3g.roa
Signing time: Mon 02 Jan 2023 04:44:48 +0000
ROA not before: Mon 02 Jan 2023 04:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47331
IP address blocks: 178.217.236.0/22 maxlen: 24
93.155.0.0/17 maxlen: 24
2a00:1d30::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:e4:6f:6b:9b:fb:af:93:58:8d:6f:61:f7:a8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Jan 2 04:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d242c2d388e2d39d7b95a123e82249304048a778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6d:df:8c:4e:9c:ae:06:0f:ac:76:4c:eb:32:
45:53:96:5e:7b:6f:d4:15:6b:47:b2:52:62:0f:d1:
1b:dc:4a:c6:14:89:54:1e:11:df:31:b9:9e:7c:6b:
75:55:1d:86:c7:ae:05:f6:ed:69:56:18:19:df:5f:
20:9f:43:38:30:53:c6:f4:34:8b:63:19:26:37:20:
b1:75:3d:87:17:f1:41:22:2b:bf:fd:0d:85:02:44:
94:d4:51:7e:67:31:68:f3:06:0f:52:aa:8b:01:79:
28:e7:dc:26:1a:56:27:25:d6:34:a7:cf:15:29:cc:
67:23:e7:9a:56:bd:7e:59:d5:bb:80:2c:d0:ea:52:
92:d1:d2:26:c9:3d:8c:72:8a:12:2d:1d:15:56:84:
47:d0:72:95:65:9d:2e:0f:0c:7a:bb:9f:02:25:c4:
34:67:dd:57:0d:ba:6f:78:43:39:a2:e1:64:3c:4f:
c6:2f:12:23:30:2b:ff:b8:6d:af:a1:a7:a2:32:09:
04:4d:bd:3a:54:ef:d7:44:41:00:39:c1:5f:de:d1:
49:cd:16:b5:f7:d5:7d:fa:63:3c:e3:1d:d9:89:c3:
f2:ef:5b:24:8d:78:d7:08:3e:d3:11:79:41:25:bd:
ab:fa:44:d7:6e:f6:c8:df:48:ae:c6:af:8d:cc:35:
dd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:42:C2:D3:88:E2:D3:9D:7B:95:A1:23:E8:22:49:30:40:48:A7:78
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/0kLC04ji0517laEj6CJJMEBIp3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.155.0.0/17
178.217.236.0/22
IPv6:
2a00:1d30::/29
Signature Algorithm: sha256WithRSAEncryption
33:a6:a8:e1:6f:96:8f:ac:62:34:ed:df:6d:7a:b6:80:be:ba:
8a:ff:f9:f3:e6:cb:5f:9f:82:cf:71:4e:82:77:04:44:db:9b:
e6:92:06:bf:b4:b2:98:53:dc:6a:ff:2d:20:b8:64:5f:a5:7a:
b0:76:e3:98:cd:50:af:d3:b4:3e:50:0f:cb:f2:b5:66:d8:ad:
d1:c7:32:3e:7f:33:83:cd:0c:b0:79:95:4d:36:c2:ba:d5:26:
ee:3c:92:3d:c5:e1:51:c0:d3:06:16:f6:5f:6d:82:97:28:d0:
c6:e9:48:7c:04:47:44:ad:8d:af:c8:89:04:36:5f:a8:60:8d:
9b:69:77:aa:b8:02:c6:d4:6b:8a:4e:8f:d7:cf:42:63:2c:7a:
1b:3e:e8:9b:c5:12:17:94:35:dd:01:10:9c:6e:a5:0e:39:af:
34:b2:e4:86:68:6a:63:10:3b:81:70:6f:92:28:dc:d6:2e:42:
e0:81:7b:d5:07:9e:dc:0c:99:90:54:be:62:23:00:b1:71:ee:
43:ef:e8:e0:75:7b:03:24:e3:fa:c1:21:d3:57:55:11:fd:10:
76:54:9a:68:74:3a:b7:1b:d3:3d:cd:23:b5:4d:ad:ed:44:5f:
af:80:1b:fc:50:8d:41:9c:e9:fb:f6:88:ac:64:e6:e9:66:3e:
3b:ac:25:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:26 2024 by rpki-client on console-ams.rpki-client.org