Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/lCI8MhRICwGTKSboHALCT5gSrX0.roa
File: lCI8MhRICwGTKSboHALCT5gSrX0.roa (raw, json)
Hash identifier: maJ9MYlThP6kuc069qpV8eWveV1McCUTZYQhGo/YvJk=
Subject key identifier: 94:22:3C:32:14:48:0B:01:93:29:26:E8:1C:02:C2:4F:98:12:AD:7D
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 01856DE671DFDC7904641CCBBD0AC6B7B78F
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/lCI8MhRICwGTKSboHALCT5gSrX0.roa
Signing time: Sun 01 Jan 2023 15:14:57 +0000
ROA not before: Sun 01 Jan 2023 15:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12912
IP address blocks: 193.91.1.0/24 maxlen: 24
193.91.6.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:71:df:dc:79:04:64:1c:cb:bd:0a:c6:b7:b7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: Jan 1 15:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94223c3214480b01932926e81c02c24f9812ad7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f6:a7:14:e5:03:eb:bf:35:f3:e1:45:8f:81:
d5:9b:73:c5:a7:db:42:44:79:15:03:9c:d8:23:8e:
5e:99:04:25:e0:6d:94:d4:2a:e1:2b:7a:a9:5d:62:
67:21:b0:4e:a9:f0:f5:ee:20:eb:1b:c2:16:bc:57:
cb:9f:32:2f:a2:4c:7e:56:a9:9d:68:f5:65:e9:45:
27:ab:3e:19:9b:65:64:be:40:c7:7b:f2:8b:98:3d:
26:ca:ea:35:41:d3:df:c6:24:b9:8c:ec:cf:6e:af:
84:8f:af:08:32:ff:8e:ca:7d:08:5f:e4:c2:59:be:
eb:67:01:02:ef:0a:d0:e2:8e:60:3b:91:ab:95:13:
ac:d6:f1:d1:ce:e5:84:08:67:7a:97:77:77:f3:be:
7e:52:e2:d5:16:e7:4b:9b:a6:b1:bc:7a:66:ff:ed:
30:e3:78:5c:ea:3b:ef:fc:39:44:4d:92:8a:9f:5d:
b5:dc:3f:e8:67:02:6e:e6:f8:74:61:af:6c:c3:d4:
48:d3:1e:0f:ad:80:8b:bd:77:5a:f6:c8:68:ed:3a:
91:e5:2d:a9:61:01:45:87:6c:7d:6c:59:f5:35:3f:
37:9f:fd:72:bd:ef:2d:e2:c5:79:f3:01:97:f0:78:
65:89:ac:59:58:d8:b3:67:11:ce:17:d4:3a:7f:db:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:22:3C:32:14:48:0B:01:93:29:26:E8:1C:02:C2:4F:98:12:AD:7D
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/lCI8MhRICwGTKSboHALCT5gSrX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.91.1.0/24
193.91.6.0/23
Signature Algorithm: sha256WithRSAEncryption
09:cd:6f:bd:2c:c3:54:8f:bd:d2:ac:a8:29:5e:ae:b0:d6:ce:
1b:07:86:53:c3:17:ef:9d:8f:6d:cb:49:18:32:1e:88:39:45:
2f:d2:35:c9:39:bc:b8:26:e9:2e:e2:74:42:1f:ab:48:44:3b:
9c:29:5d:08:4c:3f:2b:74:d3:81:dc:16:a7:f1:4a:fe:04:9d:
fe:76:ba:46:a6:d3:02:3b:75:ff:6e:f6:1a:f1:62:da:90:d4:
1b:07:61:c1:6c:a7:c1:7a:12:e4:95:8d:4d:f9:4b:f1:49:13:
7c:f2:4a:eb:cd:0f:c2:6c:e5:da:df:4a:0c:8d:cb:3f:ed:98:
05:fe:95:fd:cf:19:e5:c8:f8:2e:f2:76:0f:60:8e:cb:70:8f:
9b:8c:2a:8e:c2:6e:70:61:2d:1c:e4:69:65:9f:1e:12:d2:94:
e6:92:9e:c9:8e:46:7c:08:c3:a7:19:46:f6:f1:02:f1:90:15:
a4:34:2b:d6:19:19:8f:91:00:88:69:99:11:8c:90:7d:7d:36:
e7:a8:c2:6f:0c:59:d1:39:f1:ec:f1:5e:03:eb:37:60:ba:f0:
61:0a:ac:b2:18:89:b5:d6:f3:6a:6c:8c:73:e1:52:b1:14:2b:
cf:10:6d:02:e6:b3:f9:83:95:c8:76:60:1e:87:a6:a3:f3:ec:
53:d8:ac:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:41 2024 by rpki-client on console-fra.rpki-client.org