Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/lI97Gi6LCdyAoYL8wtm-kn_7N74.roa
File: lI97Gi6LCdyAoYL8wtm-kn_7N74.roa (raw, json)
Hash identifier: 8zqsgs1OJYu8XkuVF4LgaS1gpkH0fpU7iaQRblzur0k=
Subject key identifier: 94:8F:7B:1A:2E:8B:09:DC:80:A1:82:FC:C2:D9:BE:92:7F:FB:37:BE
Certificate issuer: /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial: 01856E6FD263184220C0C2C7344809AF1424
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/lI97Gi6LCdyAoYL8wtm-kn_7N74.roa
Signing time: Sun 01 Jan 2023 17:44:59 +0000
ROA not before: Sun 01 Jan 2023 17:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47279
IP address blocks: 185.97.179.0/24 maxlen: 24
157.97.72.0/24 maxlen: 24
2a03:4340::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:d2:63:18:42:20:c0:c2:c7:34:48:09:af:14:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Validity
Not Before: Jan 1 17:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=948f7b1a2e8b09dc80a182fcc2d9be927ffb37be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:45:83:fd:56:f3:c4:b0:70:8a:b6:8d:67:a2:
66:99:cc:a1:18:06:6b:f2:90:59:34:a4:a7:15:f7:
86:77:b8:7e:27:9f:77:e6:fd:75:b3:b4:d1:ea:bd:
74:04:25:e7:2f:a0:2a:f6:c4:39:c1:06:73:db:fb:
1c:f0:0d:0b:18:3b:8e:f3:49:ae:ae:80:d8:dd:ea:
9c:5c:27:7a:db:d2:a2:67:72:31:0a:34:04:e5:95:
85:ae:17:df:b4:1a:07:cb:43:af:57:67:83:66:af:
df:e0:86:fc:e8:d2:c5:d5:7d:cd:8c:e1:f7:44:d9:
67:d9:a5:fe:c1:7d:07:93:3d:c6:db:f9:0a:f6:bc:
ef:5d:71:8f:97:44:35:fd:6e:81:da:da:44:3f:3d:
6b:7f:b7:da:52:c1:be:f5:62:1e:fc:c0:62:3c:f0:
f6:13:a3:b1:dc:ca:c2:c7:c3:4b:11:84:88:60:0d:
d4:b7:ea:03:4a:a1:0d:d1:b9:10:ba:8f:5a:e3:f2:
4f:21:fd:d7:ff:c2:cf:ac:9b:a0:4f:a9:0b:15:d5:
cc:f2:60:a2:17:7c:d3:0a:c9:cf:86:3a:54:a8:ce:
27:c8:c4:07:79:15:85:ad:f3:52:71:c5:61:76:ee:
6a:f3:19:48:c5:32:93:e4:8c:e3:fa:63:d9:42:bb:
58:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8F:7B:1A:2E:8B:09:DC:80:A1:82:FC:C2:D9:BE:92:7F:FB:37:BE
X509v3 Authority Key Identifier:
keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/lI97Gi6LCdyAoYL8wtm-kn_7N74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.72.0/24
185.97.179.0/24
IPv6:
2a03:4340::/32
Signature Algorithm: sha256WithRSAEncryption
25:20:38:40:9a:1a:c2:26:7d:99:49:92:fa:ec:c9:93:90:5f:
11:7e:bd:29:25:ea:04:bf:a2:af:d9:b6:c5:5a:a3:6b:81:24:
8c:30:05:db:c6:82:90:0a:3d:d3:1e:4e:9b:4e:37:62:bd:f2:
fa:a2:b9:29:00:5d:c3:c3:7f:ea:85:a5:f5:2e:b3:0a:06:00:
1e:ca:e9:f1:26:c3:a8:20:17:39:df:2e:66:32:35:58:a3:35:
fc:aa:b3:92:4d:82:13:fe:c9:a1:3c:73:dd:5b:a4:89:dc:2d:
42:40:e7:73:94:aa:d3:d6:94:19:08:d5:f7:cb:3d:7a:87:b0:
ec:e1:9b:d1:aa:76:7e:df:59:ac:53:b1:36:06:3d:83:6d:89:
ef:61:ec:c9:97:a0:ba:48:a6:08:bb:ec:23:a7:58:8e:73:36:
94:9c:07:ef:33:35:ce:7e:1f:76:cf:a1:4c:29:8d:bc:07:da:
2f:04:c4:ba:87:0d:6b:f3:4f:32:44:56:04:87:ba:22:b4:57:
27:5f:da:a2:91:30:15:40:0e:75:88:9e:16:f0:22:60:9e:8b:
34:55:1b:41:6b:36:8b:fb:f5:d8:d3:b4:ab:5e:aa:e0:81:52:
c3:09:ce:db:e8:68:c7:47:5b:bf:d3:a9:93:ca:65:ec:6c:6d:
f0:f2:3b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:57 2024 by rpki-client on console-ams.rpki-client.org