Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/LcZBxQRUonRJ33nolw5jIFx6vLQ.roa
File: LcZBxQRUonRJ33nolw5jIFx6vLQ.roa (raw, json)
Hash identifier: Pt81IgEiwwA48VTuPwpfHWPY8bbIjPCqkX/0eAJpepM=
Subject key identifier: 2D:C6:41:C5:04:54:A2:74:49:DF:79:E8:97:0E:63:20:5C:7A:BC:B4
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 0189B15F3F8E7D27E82CDA1D3E504A35A8AA
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/LcZBxQRUonRJ33nolw5jIFx6vLQ.roa
Signing time: Tue 01 Aug 2023 13:52:36 +0000
ROA not before: Tue 01 Aug 2023 13:52:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15372
IP address blocks: 193.36.120.0/22 maxlen: 22
212.111.224.0/19 maxlen: 24
195.248.83.0/24 maxlen: 24
91.90.167.0/24 maxlen: 24
188.239.188.0/23 maxlen: 23
2a01:7700::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:5f:3f:8e:7d:27:e8:2c:da:1d:3e:50:4a:35:a8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Aug 1 13:52:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dc641c50454a27449df79e8970e63205c7abcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:09:3a:0c:66:57:02:30:75:8b:b5:f3:8e:c0:
53:28:19:d3:d8:1d:01:ae:df:f0:0a:2f:c2:47:a4:
35:38:af:37:4a:15:e2:d5:4e:0b:2d:0d:51:d9:37:
14:36:a1:af:cb:74:d8:e7:40:fd:04:bb:6c:ad:41:
8a:4b:be:cb:69:04:20:21:88:40:db:8f:42:44:6e:
19:0c:a3:00:bf:d9:b8:b1:a5:bd:b7:91:dd:25:b4:
0f:9a:10:a3:38:75:23:30:43:39:4a:1b:03:13:a2:
be:59:72:f4:e1:82:11:99:9b:a4:65:b1:b8:28:a1:
be:3e:df:05:a5:8b:a3:18:27:55:67:d2:2a:f2:7a:
46:22:d0:61:80:c9:af:f3:d4:b2:1c:fb:66:3a:55:
85:2f:e7:33:1f:d7:d3:98:86:d5:bd:03:cb:67:4e:
92:5f:4d:d7:81:36:d9:46:d3:ac:fd:5a:77:86:ac:
4d:77:ba:6a:3b:b2:21:61:47:c6:1c:84:83:3b:31:
6e:43:65:71:d6:af:a0:0d:23:e4:28:7a:e2:29:e3:
19:05:ea:05:30:2b:ad:d2:1f:28:d6:c1:d2:5a:db:
8a:ba:5c:e8:6b:56:57:15:88:e8:ac:f7:88:ea:8a:
bc:bc:da:43:30:ca:8e:1a:07:82:68:ba:50:db:2d:
58:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C6:41:C5:04:54:A2:74:49:DF:79:E8:97:0E:63:20:5C:7A:BC:B4
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/LcZBxQRUonRJ33nolw5jIFx6vLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.167.0/24
188.239.188.0/23
193.36.120.0/22
195.248.83.0/24
212.111.224.0/19
IPv6:
2a01:7700::/32
Signature Algorithm: sha256WithRSAEncryption
23:d1:93:e1:bb:5f:61:ef:61:c3:fb:27:bd:10:c5:f6:67:57:
f1:2e:d1:e4:38:d1:fa:11:57:6b:d4:a8:9d:43:2a:69:83:b0:
14:ed:9b:07:08:63:10:6b:d5:f9:1e:f0:e8:af:29:b5:fb:1e:
b3:f4:0a:51:af:0c:e1:6d:16:f0:22:d4:bc:e9:07:ce:89:b4:
83:c3:5e:3a:fb:37:1d:2d:51:7f:e9:d9:fd:32:62:a7:cd:da:
bc:a0:78:56:04:ab:b6:ba:da:8b:4d:e5:b2:e2:e3:ee:d2:d6:
ac:d7:24:6c:d0:64:85:9c:d5:9b:49:7b:49:94:18:e5:c7:81:
77:38:c9:86:b7:36:6b:c3:1e:24:05:88:a5:0a:09:12:39:36:
bc:06:da:4b:0d:02:66:f6:9a:e2:0d:5d:37:d2:ba:83:fa:bc:
16:31:2c:1b:bc:c9:d2:28:88:da:85:7f:d3:af:46:65:1c:df:
9e:61:36:81:b0:51:e2:cc:a1:2c:15:a6:4c:86:d0:82:61:40:
c3:d7:48:9e:9c:ec:7c:bd:f0:d7:20:c7:f3:2d:04:93:ad:93:
fd:da:62:fa:f5:75:3c:42:c4:99:97:9a:c2:da:a6:52:63:f2:
d7:e2:29:cb:44:cf:13:e4:98:c0:a0:5d:2f:2c:14:77:08:5d:
8b:5d:24:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 07:33:31 2023 by rpki-client on console-fra.rpki-client.org