Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/LQi3-PXFxHzZKwbSfpHegCGYlfM.roa
File: LQi3-PXFxHzZKwbSfpHegCGYlfM.roa (raw, json)
Hash identifier: r+yv2Zo/Y9pTHjixhBTirZ37MbkngjpkwEYBO3HBM2w=
Subject key identifier: 2D:08:B7:F8:F5:C5:C4:7C:D9:2B:06:D2:7E:91:DE:80:21:98:95:F3
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0A963278844BCBCF75E7176B6838A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/LQi3-PXFxHzZKwbSfpHegCGYlfM.roa
Signing time: Mon 02 Jan 2023 05:24:58 +0000
ROA not before: Mon 02 Jan 2023 05:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50625
IP address blocks: 194.183.60.0/23 maxlen: 23
82.177.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a9:63:27:88:44:bc:bc:f7:5e:71:76:b6:83:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d08b7f8f5c5c47cd92b06d27e91de80219895f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:01:2b:49:17:1c:32:e9:af:cb:c0:5a:94:
2a:79:28:d0:af:bf:e6:8f:00:43:52:6e:1e:29:fd:
48:6b:a1:e8:49:3b:24:ea:66:b0:bf:1c:cd:71:78:
07:11:d4:d6:09:c6:62:36:c4:43:67:05:b7:d5:76:
0c:8a:70:8c:f7:92:42:10:08:23:6f:51:4c:ff:ee:
da:26:fc:be:12:e4:2c:35:f5:c9:bd:98:8b:0c:7f:
56:30:b1:97:9f:2a:f3:94:63:49:b0:d1:cf:ba:1d:
93:88:a1:46:99:77:92:f8:e1:2a:74:3a:22:04:3a:
95:6e:dc:24:13:0a:2b:ee:b2:90:b2:b7:e2:77:b3:
1a:ae:22:da:2f:94:ff:12:d3:bc:3a:3d:45:1a:03:
28:fd:e7:6a:5e:87:e9:7c:59:3c:31:92:01:c8:73:
c5:8d:96:4e:56:0a:55:6a:6c:55:da:c6:eb:07:86:
c7:26:1d:05:33:e7:4a:ca:a4:6e:50:ea:40:c5:0d:
a0:00:8e:76:35:fc:54:66:05:eb:bd:fb:c2:a0:47:
1e:bf:9a:6a:0a:ea:a3:57:0e:49:9d:d8:22:f5:23:
a8:85:9b:c6:fe:87:e3:ae:27:7e:0a:94:7c:a4:79:
e1:fe:87:35:aa:b9:7a:8a:e4:8f:96:cb:3e:7d:b6:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:08:B7:F8:F5:C5:C4:7C:D9:2B:06:D2:7E:91:DE:80:21:98:95:F3
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/LQi3-PXFxHzZKwbSfpHegCGYlfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.204.0/24
194.183.60.0/23
Signature Algorithm: sha256WithRSAEncryption
01:8b:0e:ed:13:b5:63:8d:0a:e1:32:48:1d:22:b6:2e:6f:73:
56:e4:0d:50:5e:8a:a5:ba:2e:44:1d:e6:98:d0:d0:70:90:b3:
6a:be:2c:52:a3:81:52:26:4f:ad:53:2b:4e:a7:75:8d:b4:2b:
76:6e:00:75:2d:c0:fa:b6:cc:b7:0f:64:d4:d0:f8:93:ec:c6:
77:37:c1:0c:7a:3a:23:f9:a8:2a:b9:ca:33:f4:f0:f1:fd:0b:
4e:65:d1:49:cd:91:c5:0f:0b:01:46:b1:68:7d:c9:07:55:bd:
48:92:52:2a:bb:36:89:c4:47:1e:e2:ed:7b:96:e0:3f:71:ab:
27:d6:e0:f1:e6:6d:f7:9b:87:37:77:5e:69:83:d5:5e:43:f8:
8c:40:2e:c2:61:56:25:84:25:20:ec:41:3f:06:3a:5c:63:0f:
39:05:1b:66:18:6a:96:c4:24:c1:ec:c1:53:82:af:08:0b:d4:
f1:9e:3b:cd:3c:b9:2a:24:59:d5:18:5f:8e:e4:7e:bd:db:4c:
0b:99:af:2d:25:91:db:98:01:d4:fe:4d:fe:e7:88:ba:39:10:
dc:7f:b1:39:41:a1:97:5d:38:08:8f:2f:16:93:75:93:76:d4:
18:42:f6:27:19:e9:c8:4f:d7:86:ec:38:ad:79:87:34:0c:36:
64:9d:06:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:20 2024 by rpki-client on console-ams.rpki-client.org