Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/lHC68ZY_i15V4BfsIUZUa9y9Yis.roa
File: lHC68ZY_i15V4BfsIUZUa9y9Yis.roa (raw, json)
Hash identifier: wgmKukhI7VWByEQL2+LHoWam485plioNaC+Z8CfWS/g=
Subject key identifier: 94:70:BA:F1:96:3F:8B:5E:55:E0:17:EC:21:46:54:6B:DC:BD:62:2B
Certificate issuer: /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial: 018573F1AA950D1E73BF7141263F5104B3A0
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/lHC68ZY_i15V4BfsIUZUa9y9Yis.roa
Signing time: Mon 02 Jan 2023 19:24:55 +0000
ROA not before: Mon 02 Jan 2023 19:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203293
IP address blocks: 185.139.92.0/22 maxlen: 24
2a07:1440::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:f1:aa:95:0d:1e:73:bf:71:41:26:3f:51:04:b3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
Validity
Not Before: Jan 2 19:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9470baf1963f8b5e55e017ec2146546bdcbd622b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7b:ac:99:64:61:dd:7e:16:27:ff:3b:f8:62:
02:bb:10:ab:0d:42:b4:67:0c:2e:76:3c:26:af:6c:
90:4e:e1:68:68:f2:97:07:be:75:11:8d:cc:fe:b2:
4f:12:64:31:d8:6c:63:39:0e:cf:6c:01:2b:fc:5c:
1d:fe:8b:93:7b:69:1d:81:6c:94:6b:c4:68:11:ad:
1d:d2:0d:25:c7:1d:9a:04:d7:73:1b:2f:40:ba:e2:
03:48:f2:93:97:59:35:9b:ff:93:98:05:a2:3d:47:
6a:a5:a4:51:be:c8:92:05:2b:ce:d8:13:a8:69:5c:
8b:3e:e2:52:fa:2f:31:76:cb:5b:f4:41:4b:24:31:
eb:3b:d6:0f:45:91:c2:0a:da:07:09:c4:ce:a1:af:
67:6d:16:35:58:fd:b4:c0:13:e7:2d:a3:5f:1f:6e:
eb:a1:cd:8c:69:5a:e8:42:35:d3:59:cb:21:b8:e9:
52:d9:19:53:09:20:9c:ed:8f:9b:35:1b:71:b5:bc:
5c:d5:1c:8a:2f:19:62:de:8e:d2:37:df:73:b6:b8:
4c:de:4d:ed:ca:67:a9:69:e4:66:95:9b:3c:45:a0:
cd:6d:ba:24:c5:16:92:d8:9a:11:62:63:34:5f:c9:
bd:a5:a2:9d:9a:94:b9:3c:ae:ec:12:4f:44:20:47:
f1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:70:BA:F1:96:3F:8B:5E:55:E0:17:EC:21:46:54:6B:DC:BD:62:2B
X509v3 Authority Key Identifier:
keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/lHC68ZY_i15V4BfsIUZUa9y9Yis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.92.0/22
IPv6:
2a07:1440::/29
Signature Algorithm: sha256WithRSAEncryption
4b:b3:15:08:d1:d9:bd:35:15:fe:0e:83:5e:e3:63:a0:84:6b:
0b:99:06:d7:1a:ac:f2:e1:e8:1b:7c:6b:2c:52:6f:e0:32:95:
bd:2b:80:de:44:a9:60:86:21:86:01:01:4a:f2:17:ed:5b:41:
34:90:43:e7:54:a1:d3:60:69:2d:a0:d2:80:c9:a4:07:18:65:
e3:f0:cb:92:bd:98:28:b8:45:71:18:03:74:58:b0:04:65:03:
70:f2:40:5c:d6:65:f5:5a:34:3a:b6:c3:cb:d3:fb:7e:9d:3c:
5f:ef:7a:1e:7d:a1:cd:b5:f1:9d:88:92:f6:e2:2b:17:23:bd:
81:3b:69:24:11:a6:21:e9:d6:21:d6:f7:4e:9c:43:f1:38:9a:
79:66:c4:12:ed:3d:d4:a2:73:df:1c:ae:fb:54:93:72:ea:ff:
78:0c:0d:2c:50:33:fb:a3:49:0f:47:55:27:91:f9:19:d8:36:
c2:24:1c:44:7a:a4:33:fc:95:4b:ed:4b:ba:b3:5e:7a:05:3c:
64:7b:42:23:ce:f5:fe:5b:c2:90:c9:aa:9e:cf:58:d2:cf:80:
a4:86:f2:ba:48:d2:19:55:36:79:0b:b7:81:11:f5:26:21:59:
66:db:91:a5:ee:82:a7:e9:9b:f3:f6:d1:31:49:53:86:f9:bd:
54:8d:28:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:51 2024 by rpki-client on console-fra.rpki-client.org