Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/LHrg2AJpMfod-tu9VnZUPGBdYwc.roa
File: LHrg2AJpMfod-tu9VnZUPGBdYwc.roa (raw, json)
Hash identifier: A6Qz7Ct4o0OEHf21qiNI2HNYfGxVzFnnD7yvM2MP0v0=
Subject key identifier: 2C:7A:E0:D8:02:69:31:FA:1D:FA:DB:BD:56:76:54:3C:60:5D:63:07
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01856F5DD8B31C758495F7039C5193C87B22
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/LHrg2AJpMfod-tu9VnZUPGBdYwc.roa
Signing time: Sun 01 Jan 2023 22:04:59 +0000
ROA not before: Sun 01 Jan 2023 22:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31679
IP address blocks: 213.215.100.0/24 maxlen: 24
213.215.82.0/24 maxlen: 24
213.215.85.0/24 maxlen: 24
213.215.84.0/24 maxlen: 24
213.215.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d8:b3:1c:75:84:95:f7:03:9c:51:93:c8:7b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 22:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c7ae0d8026931fa1dfadbbd5676543c605d6307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:86:73:04:90:d7:68:9d:4f:58:1a:f4:fd:
36:c9:0d:ae:a1:68:66:e7:19:8c:95:54:eb:7b:8e:
0d:2f:48:d1:ec:6c:af:c9:cf:80:b8:06:d0:ce:48:
0a:47:54:44:4a:63:6d:3a:95:25:8f:11:ef:7a:ac:
08:5e:4f:45:52:2e:46:ae:5c:03:41:1e:01:d3:00:
44:f1:0e:13:21:38:01:5d:23:5b:1c:5f:c5:66:07:
da:84:15:ad:bf:b5:6d:9f:8a:c0:dd:1c:40:d9:ad:
d4:80:06:86:9d:e2:ea:b1:d3:85:43:d2:f5:8a:9c:
19:23:bc:87:ff:94:26:8f:6a:7a:6f:b1:ba:0d:ba:
cb:b6:bf:42:dc:46:75:15:43:c4:88:10:7a:d2:77:
5d:b6:1e:70:6e:62:3c:cc:7b:63:8b:d2:35:db:64:
25:4b:b2:cc:15:0e:2c:df:02:94:0e:9e:6e:3d:96:
0e:71:db:fd:83:9f:04:56:15:c4:00:84:50:40:93:
eb:00:3f:57:80:7d:19:df:3c:6d:02:62:ce:6c:15:
a5:3e:03:2c:0c:3a:43:f3:0f:5d:3d:f7:09:66:24:
33:b5:da:f8:41:56:8b:9a:77:04:6e:30:63:88:71:
ea:32:f4:9c:59:f7:48:78:a2:8b:91:dc:47:09:e7:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7A:E0:D8:02:69:31:FA:1D:FA:DB:BD:56:76:54:3C:60:5D:63:07
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/LHrg2AJpMfod-tu9VnZUPGBdYwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.215.82.0-213.215.85.255
213.215.100.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:9d:44:da:b8:7d:b1:e4:c3:f2:26:69:89:ef:5c:60:55:d4:
23:14:25:41:c6:62:7c:6a:fd:f9:82:fc:ed:28:a3:22:df:0a:
ef:4c:91:d4:1f:b6:85:fd:1c:54:ba:d3:7c:15:3f:c0:38:5c:
03:94:f8:b0:01:0c:4f:0a:12:b5:b6:e7:bb:94:b8:41:96:22:
c4:48:3a:ec:53:3a:6d:0d:0b:06:d6:93:90:24:7b:a4:14:56:
43:0d:2a:74:1e:31:8c:a2:43:5c:dc:cd:40:57:80:90:3a:12:
0b:31:d0:e8:89:54:8c:30:96:81:eb:58:57:48:13:bf:e0:bb:
4d:af:d5:61:4e:ac:2f:98:31:bc:c3:7f:3d:ca:13:f3:80:c2:
e8:fc:82:e5:ff:20:55:55:8a:f6:d6:0c:5a:e3:d5:83:fd:c9:
4d:f7:1c:c5:1b:6e:41:3c:08:5a:78:a6:54:92:1c:b5:f0:c5:
93:72:b9:72:52:59:0b:ca:69:09:62:85:14:47:6d:eb:be:b2:
19:5d:9e:b2:31:00:90:da:6c:cb:3b:16:b1:32:df:da:e5:f0:
b3:91:23:e8:75:6d:dc:77:90:ea:62:8a:22:f9:97:11:09:5c:
dc:4c:91:a6:93:87:64:7d:c4:1c:63:10:c4:50:35:b1:5d:50:
60:8e:de:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:44 2024 by rpki-client on console-fra.rpki-client.org