Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5ec1a9-44e2-436d-bacf-197abed4d16a/1/1-LC7E0zR7n90PeKYoHyLujNFenc.roa
File: 1-LC7E0zR7n90PeKYoHyLujNFenc.roa (raw, json)
Hash identifier: 8crjp1Hf4G9qxjkRmm8/y0iuwqw7JsyHVaLugjJaRZs=
Subject key identifier: F8:B0:BB:13:4C:D1:EE:7F:74:3D:E2:98:A0:7C:8B:BA:33:45:7A:77
Certificate issuer: /CN=f06603f0282ed590135f33645f55f2b62c298e3c
Certificate serial: 01856C0135CCC59D8E10BC8ECBF3580F4962
Authority key identifier: F0:66:03:F0:28:2E:D5:90:13:5F:33:64:5F:55:F2:B6:2C:29:8E:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GYD8Cgu1ZATXzNkX1Xytiwpjjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5ec1a9-44e2-436d-bacf-197abed4d16a/1/1-LC7E0zR7n90PeKYoHyLujNFenc.roa
Signing time: Sun 01 Jan 2023 06:24:56 +0000
ROA not before: Sun 01 Jan 2023 06:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 94.154.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:35:cc:c5:9d:8e:10:bc:8e:cb:f3:58:0f:49:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06603f0282ed590135f33645f55f2b62c298e3c
Validity
Not Before: Jan 1 06:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8b0bb134cd1ee7f743de298a07c8bba33457a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e2:d6:c9:63:80:8f:a3:88:31:5e:09:c8:94:
92:06:31:28:58:a6:3c:88:9c:70:b8:c6:1e:c4:3d:
3b:28:ed:a6:9b:3f:4f:c5:93:bf:70:2f:33:ff:75:
87:db:46:4a:64:a4:44:9e:4f:c2:ad:20:5d:46:23:
2c:5c:19:79:07:99:fc:ca:ef:55:30:1b:b2:40:9d:
f5:82:0a:5c:6e:9d:9b:4a:a9:b4:d3:5a:84:8c:01:
96:e9:57:ec:65:54:4a:6b:63:a7:c5:32:6d:4d:30:
99:4a:af:57:6b:c0:60:ef:32:22:97:4f:38:64:1a:
7b:3a:b3:b1:45:de:73:24:a6:ef:7a:20:b1:eb:70:
de:8d:a5:c6:97:0f:62:6c:37:8e:04:17:12:07:f3:
a6:63:b2:f4:0c:e7:84:ac:bd:d3:83:a0:a2:fa:61:
60:21:38:0b:5f:8a:34:22:0e:dc:1e:16:0d:b5:0b:
1d:12:96:c6:34:19:54:79:61:38:b7:63:26:6f:7e:
a3:dc:70:ce:61:ea:6f:71:ca:59:68:2a:82:45:45:
9a:26:12:60:cf:8b:8f:ae:eb:c2:a5:85:e6:e4:9a:
5b:e8:aa:09:a3:ba:52:9a:67:9c:8d:11:61:02:75:
b9:48:7e:5b:18:0f:f7:6e:0d:c1:1a:55:e3:6a:b7:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B0:BB:13:4C:D1:EE:7F:74:3D:E2:98:A0:7C:8B:BA:33:45:7A:77
X509v3 Authority Key Identifier:
keyid:F0:66:03:F0:28:2E:D5:90:13:5F:33:64:5F:55:F2:B6:2C:29:8E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GYD8Cgu1ZATXzNkX1Xytiwpjjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5ec1a9-44e2-436d-bacf-197abed4d16a/1/1-LC7E0zR7n90PeKYoHyLujNFenc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5ec1a9-44e2-436d-bacf-197abed4d16a/1/8GYD8Cgu1ZATXzNkX1Xytiwpjjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.126.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ae:59:eb:99:1c:9c:f9:7f:e2:ef:4b:9c:34:80:b3:80:de:
5e:54:81:34:44:40:a4:34:39:b4:3a:ba:3b:db:25:9c:d3:86:
1b:91:c3:24:47:fd:54:6b:d8:8c:07:f0:e3:0d:2b:cc:fc:d3:
9c:a6:45:8e:6d:86:08:7b:3e:e9:ff:7e:52:1e:fd:aa:9d:da:
d6:fa:2f:57:8e:65:5d:d4:20:de:2a:e7:70:86:e1:63:b6:66:
9f:ba:63:b9:69:4e:05:c9:76:f1:4b:39:fe:4d:09:aa:ea:c4:
86:5a:14:d5:79:5a:ec:e0:ea:1f:07:23:44:64:7b:ab:ba:07:
a4:7d:d9:f6:d4:97:5b:c1:cd:b9:51:61:bb:ae:92:35:e5:f2:
7d:c1:37:b9:c0:6b:04:46:26:04:7f:38:bd:bd:b1:df:4a:84:
b7:42:64:a8:ca:21:d0:1d:46:1d:47:8f:19:1d:f0:cd:ae:8b:
75:7c:5a:4e:23:0b:68:a4:e2:1d:5e:a1:2f:e4:6a:18:5e:d1:
72:76:58:d6:95:71:f6:3f:d5:7f:78:43:6b:c7:66:48:d4:58:
5a:3d:d1:bf:79:ca:16:dd:11:18:51:44:01:a8:15:94:7e:de:
69:26:1e:e3:90:b2:49:97:08:b4:ad:83:6e:4f:2c:a1:d6:d9:
f1:8a:6a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org