Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/LjGgj_8cwc0WLwp3q5s9WNRwl88.roa
File: LjGgj_8cwc0WLwp3q5s9WNRwl88.roa (raw, json)
Hash identifier: QjlcyQqAN8g1Asw0k6g89OOy3nsEPQxLoC2yCH76xeY=
Subject key identifier: 2E:31:A0:8F:FF:1C:C1:CD:16:2F:0A:77:AB:9B:3D:58:D4:70:97:CF
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 01856F6FF1BAC863C8CB5E54A593B36666FF
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/LjGgj_8cwc0WLwp3q5s9WNRwl88.roa
Signing time: Sun 01 Jan 2023 22:24:45 +0000
ROA not before: Sun 01 Jan 2023 22:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211699
IP address blocks: 194.113.156.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:f1:ba:c8:63:c8:cb:5e:54:a5:93:b3:66:66:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Jan 1 22:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e31a08fff1cc1cd162f0a77ab9b3d58d47097cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:22:78:27:0a:9d:98:bd:17:73:dd:57:3c:
ea:04:3b:e2:9c:1c:af:b5:2a:8c:8a:4d:30:e7:e8:
e4:15:4f:9c:bf:62:32:6f:82:91:a5:11:5a:7b:84:
d4:03:40:8d:34:f9:34:5c:3a:8f:fd:21:21:95:61:
c9:5f:f6:60:78:62:e1:6b:0a:99:db:29:9c:67:db:
96:ed:c5:f0:6b:39:6c:26:5f:85:8f:f9:a6:b1:20:
73:ea:d4:74:75:ed:15:0f:70:a6:3f:22:8f:98:9f:
b7:91:98:fc:b5:92:e2:a9:27:55:5b:4e:1b:68:9c:
27:0e:50:7e:bd:f0:f9:29:c2:d1:65:2e:38:56:30:
8e:be:d5:87:98:23:e6:bc:db:1d:05:f7:7d:12:1e:
e2:18:6b:4b:e9:5b:3e:a6:26:30:f1:5c:3b:7c:dd:
6e:2e:94:70:27:9a:0a:b3:5a:f5:72:37:57:e2:83:
5c:54:4c:a6:5e:76:1b:49:e7:4c:c6:32:17:de:f6:
c4:e3:20:18:bc:97:53:b2:2b:83:c6:7c:48:e5:18:
3e:72:4b:aa:83:e3:01:08:95:df:e1:ab:42:e1:c3:
8a:c9:8b:24:82:c0:c1:cb:02:d9:17:7d:9c:61:42:
79:40:e1:c4:28:7b:cf:eb:b0:bd:31:eb:cb:30:6f:
85:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:31:A0:8F:FF:1C:C1:CD:16:2F:0A:77:AB:9B:3D:58:D4:70:97:CF
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/LjGgj_8cwc0WLwp3q5s9WNRwl88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.156.0/22
Signature Algorithm: sha256WithRSAEncryption
33:e2:19:89:de:a2:4c:c6:e3:df:1a:f0:f7:9e:0f:e8:41:54:
df:a7:1f:07:15:a6:d9:80:ca:96:2d:5a:04:0f:a9:7c:4a:43:
d9:c8:be:4b:bb:2c:42:7f:cf:ac:98:f4:2c:b4:f1:e2:56:f4:
fc:f2:77:50:4a:05:8a:09:99:9e:62:a4:60:fe:e0:6e:3c:ba:
b2:bb:5a:29:85:36:9e:4b:30:52:2a:9c:00:55:5e:d3:88:8c:
5c:24:d9:1e:d3:a4:fe:8f:f3:4b:82:0d:d8:20:ab:83:4b:5f:
e4:83:77:77:11:1f:41:f8:5a:36:7f:fe:25:88:3f:17:02:b4:
9f:14:3e:cf:a0:bb:61:6e:a9:84:21:86:81:08:ed:2b:b9:ad:
4e:90:70:8b:a4:d3:c3:3c:bc:8a:ce:3c:9a:ac:fb:5c:e2:02:
fa:e6:84:42:f3:18:65:5b:c6:b2:9b:10:cd:01:27:74:2b:95:
c9:b2:63:40:e4:d5:80:94:95:51:61:6b:b7:fa:6c:ad:67:fc:
af:d2:81:c3:07:e2:58:37:30:27:26:93:f2:45:af:e2:53:51:
3c:5b:ed:0e:df:5e:04:38:73:2d:13:f3:84:a8:d6:8a:47:dc:
e6:a3:4c:68:70:84:82:87:1c:b0:46:89:95:36:bd:26:e3:9d:
6b:aa:fd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:12 2024 by rpki-client on console-ams.rpki-client.org