Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/LDUlQuW7PkpDqcl52RdQP7M1Dqg.roa
File: LDUlQuW7PkpDqcl52RdQP7M1Dqg.roa (raw, json)
Hash identifier: qbN6YfPm70XJCJ2UEWalhgykGUFtGdkcENfOUZmmGY0=
Subject key identifier: 2C:35:25:42:E5:BB:3E:4A:43:A9:C9:79:D9:17:50:3F:B3:35:0E:A8
Certificate issuer: /CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Certificate serial: 0186CC43FE14C5A8262AF204FF8806F47FDC
Authority key identifier: ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/LDUlQuW7PkpDqcl52RdQP7M1Dqg.roa
Signing time: Fri 10 Mar 2023 16:04:13 +0000
ROA not before: Fri 10 Mar 2023 16:04:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51738
IP address blocks: 195.162.64.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:43:fe:14:c5:a8:26:2a:f2:04:ff:88:06:f4:7f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Validity
Not Before: Mar 10 16:04:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c352542e5bb3e4a43a9c979d917503fb3350ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:bf:60:f6:6d:dd:ee:6b:8b:d1:4b:88:7d:64:
55:b8:a2:35:72:73:72:92:fb:21:90:9b:6b:6a:0f:
8d:fd:cc:4e:bb:2f:e5:2e:f4:29:f8:a5:a2:b9:34:
ac:07:00:73:ea:a4:36:f0:ea:18:69:8c:52:20:a4:
5a:4c:52:22:20:14:f6:4f:85:5d:52:41:80:ec:75:
4b:a5:17:93:56:28:15:b4:95:2e:51:27:ba:1f:0f:
22:4c:4e:7e:5c:3c:da:dc:85:c5:3f:f7:e3:35:49:
3b:75:0b:c5:e1:4e:d3:e8:a1:f9:7b:db:6b:d8:2a:
39:85:74:33:86:cf:dc:9d:be:e9:60:c4:81:58:85:
6e:c1:f0:cb:04:2f:8c:cc:54:f5:03:a4:70:2e:e8:
58:10:e8:cc:83:3e:95:14:a9:41:05:53:51:13:9a:
ee:70:a3:91:f0:8c:4e:a8:e7:3b:3f:9d:3c:37:77:
ba:03:30:4b:74:1e:0c:07:dc:70:3f:1c:03:9b:3b:
93:d1:3b:e4:70:8b:21:b4:05:ca:7b:30:00:fd:f9:
aa:f3:8d:bf:91:47:fa:a7:2b:22:4e:70:50:4f:38:
6f:e0:d2:c4:53:d3:f4:bb:a1:fc:d8:51:e6:bd:4e:
ab:eb:79:1a:5f:be:b5:f8:de:15:ba:26:f7:21:96:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:35:25:42:E5:BB:3E:4A:43:A9:C9:79:D9:17:50:3F:B3:35:0E:A8
X509v3 Authority Key Identifier:
keyid:ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/LDUlQuW7PkpDqcl52RdQP7M1Dqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.64.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:20:02:e1:84:9b:ba:99:1d:41:60:1e:af:f4:d8:31:93:42:
ef:79:5d:21:c1:ed:b4:3f:31:e2:44:1f:ef:9b:d9:78:02:2e:
38:76:b8:ee:be:e1:f8:d4:b8:b9:65:b0:26:18:00:de:aa:e7:
c3:b0:9f:9f:35:ee:d1:f6:01:bd:a6:63:7b:5a:84:e3:68:b3:
4b:16:54:dc:1d:0b:cf:ee:6e:de:a5:ea:3b:54:98:5d:c0:7c:
ba:fd:79:b8:c1:05:f0:05:36:fd:e2:90:69:6a:ef:c2:7a:82:
bc:f6:fa:95:13:2f:6f:30:5c:c0:8d:16:cf:a2:64:f4:d3:77:
36:e9:d6:3a:bd:5f:ea:8e:a5:96:9c:8d:0f:51:9a:e3:3b:a1:
82:d1:e8:fa:a2:7f:ca:44:5c:ad:a3:65:79:74:5e:ef:14:6a:
97:94:a0:06:44:6e:47:52:a4:a2:35:62:1e:f0:e3:49:4e:43:
f2:08:e1:fe:ce:ea:10:c6:a0:59:0c:85:ca:01:fd:1f:ac:45:
0c:fd:00:c2:d8:04:81:b1:90:48:33:65:38:44:16:a5:09:5d:
ed:19:4c:8e:68:51:66:2f:6f:48:e0:65:62:61:98:a8:73:fd:
04:f2:1b:57:a6:ba:57:ce:da:a8:c1:31:c9:36:cd:d5:0a:a3:
f0:15:11:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:58 2024 by rpki-client on console-fra.rpki-client.org