Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/LrANy2x_O4K88VeXbvZ3KRQ7dD4.roa
File: LrANy2x_O4K88VeXbvZ3KRQ7dD4.roa (raw, json)
Hash identifier: iwvmt7smIIH2vg7raR91zpfSLRpT2eXCJGTAqxxW6z4=
Subject key identifier: 2E:B0:0D:CB:6C:7F:3B:82:BC:F1:57:97:6E:F6:77:29:14:3B:74:3E
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 01856C813F1C7BC529354122634A5577E1CB
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/LrANy2x_O4K88VeXbvZ3KRQ7dD4.roa
Signing time: Sun 01 Jan 2023 08:44:47 +0000
ROA not before: Sun 01 Jan 2023 08:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196615
IP address blocks: 93.175.147.0/24 maxlen: 24
2001:7fb:fd03::/48 maxlen: 48
2001:7fb:fd04::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:3f:1c:7b:c5:29:35:41:22:63:4a:55:77:e1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Jan 1 08:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2eb00dcb6c7f3b82bcf157976ef67729143b743e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:3d:6f:b9:ca:d6:be:c7:3e:56:cc:3a:0a:
95:74:ab:84:db:e2:29:eb:0a:3a:d5:a6:69:3a:35:
5e:9b:b8:be:16:9e:78:dd:70:4d:2a:67:e0:41:0e:
c2:53:a6:b9:d7:cd:be:25:9e:3f:b6:85:13:d8:db:
5a:a1:87:d6:98:51:f7:39:90:c1:ed:ab:60:a9:e2:
50:ce:8b:1b:9d:b8:e7:0e:2e:33:33:a5:4b:ad:7a:
e2:0b:1f:3e:fd:0e:c8:02:29:32:4d:a3:81:c9:fb:
c9:49:ec:15:39:34:10:ce:0e:dc:ac:ac:cd:e1:a9:
90:2c:4b:33:df:a9:5e:0e:e3:7d:4d:a9:4f:69:20:
f3:a5:4a:be:27:a8:99:6a:01:7d:1a:b3:ce:f6:44:
20:a2:20:1b:28:cf:5c:b4:42:51:aa:da:cc:8f:a2:
e2:46:ec:6f:93:84:6c:1b:07:5f:f8:c4:4f:09:8d:
12:ae:c4:3b:00:1c:93:72:4f:77:63:ea:6b:d2:d0:
63:b8:f6:c4:0e:7b:7e:bc:5c:ef:61:40:9d:fb:c2:
7d:b0:bb:94:e1:9a:b0:b6:8c:1b:d3:9d:04:48:b5:
51:62:e7:0d:56:c9:f8:63:01:b9:42:61:c9:f0:14:
83:f5:3b:f7:19:80:75:17:d0:3e:35:17:98:b1:dc:
c1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B0:0D:CB:6C:7F:3B:82:BC:F1:57:97:6E:F6:77:29:14:3B:74:3E
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/LrANy2x_O4K88VeXbvZ3KRQ7dD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.147.0/24
IPv6:
2001:7fb:fd03::-2001:7fb:fd04:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
15:a2:df:91:88:de:33:eb:1c:93:02:3f:98:07:d6:4c:a8:37:
46:1a:a2:4a:d1:d0:0e:50:6a:81:87:d2:a4:a1:6a:91:e9:81:
0d:3a:55:07:68:e5:06:34:18:79:de:f7:c4:ec:40:a7:a9:16:
4a:49:cd:1c:92:0e:6c:69:2d:b4:e3:bb:6b:1b:77:a8:84:fe:
41:ee:01:a6:4c:2e:70:05:ce:e3:76:97:85:5d:3d:47:06:8a:
31:20:a7:85:bb:8e:60:72:30:bd:c0:16:9f:16:cd:62:56:2d:
1e:c9:ad:87:57:48:dd:60:9c:3d:e2:da:04:3d:cf:14:f2:39:
8a:cc:79:ab:64:05:62:1a:9e:30:9e:8c:37:10:1a:94:59:be:
50:57:b9:44:e3:17:0b:55:12:27:c0:7b:4d:d6:9d:b7:55:ac:
33:fb:a3:d3:18:5b:62:fe:d2:a9:9a:bf:57:b6:e9:94:f4:f6:
b0:b8:28:77:5a:d9:c9:02:eb:24:12:3a:d7:c8:c1:63:21:d6:
be:e1:92:64:93:25:8f:eb:e3:5a:3b:d9:4d:a1:3f:04:34:18:
3a:44:89:84:79:20:e5:0a:d5:de:66:23:5c:01:78:16:da:1c:
0a:0b:92:f6:fe:20:50:24:41:eb:4b:75:0a:b9:ca:a8:9c:46:
7a:33:50:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:15 2024 by rpki-client on console-fra.rpki-client.org