Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/LVfhtV6CJDKIu7BYkZGcS46Vdl8.roa
File: LVfhtV6CJDKIu7BYkZGcS46Vdl8.roa (raw, json)
Hash identifier: w4/Ai6YathRG6jcQKe5W7HIi2/HXBo4OIatXU4/f2k0=
Subject key identifier: 2D:57:E1:B5:5E:82:24:32:88:BB:B0:58:91:91:9C:4B:8E:95:76:5F
Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial: 01860887A3BA15854C73DB3B92BA8DBC4C3E
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/LVfhtV6CJDKIu7BYkZGcS46Vdl8.roa
Signing time: Tue 31 Jan 2023 15:52:32 +0000
ROA not before: Tue 31 Jan 2023 15:52:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5406
IP address blocks: 194.53.172.0/24 maxlen: 24
2001:7f8:26::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:87:a3:ba:15:85:4c:73:db:3b:92:ba:8d:bc:4c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Validity
Not Before: Jan 31 15:52:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d57e1b55e82243288bbb05891919c4b8e95765f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:af:20:0d:84:cb:ef:85:36:34:fb:ca:dc:
02:af:b7:f9:58:21:a2:75:e6:9e:49:d8:ef:14:65:
35:91:23:fa:d0:c4:d7:a0:a1:a8:45:23:1f:2f:c9:
31:8f:50:2a:e2:7d:9b:41:de:7c:3a:b0:b5:59:57:
2b:d7:9a:e7:cc:17:e1:39:6e:03:ce:ed:2e:48:5c:
19:b5:c5:dd:c9:bc:30:1a:ac:a1:8b:3f:24:bf:9c:
49:7b:63:9e:bc:4b:58:93:b5:f1:d7:3d:1e:66:83:
18:de:1a:32:72:cd:a2:d6:85:e8:ee:d6:88:6b:01:
71:c0:d5:48:46:88:13:35:33:14:71:39:f5:e7:3d:
a2:53:9c:c6:3a:59:f6:94:a2:5a:ff:0f:12:26:55:
61:cd:9d:d0:a9:f5:36:8d:b2:44:7c:6a:5d:b9:c6:
35:49:2a:59:7f:a1:4e:0e:23:36:8f:a9:b5:ce:8a:
a2:2d:47:00:29:49:67:38:fd:8f:63:c5:5c:fe:46:
f7:29:53:70:cb:ff:ff:b3:e7:0d:8e:0b:db:12:c6:
13:d6:f9:28:53:01:3e:c1:2b:3b:1d:0c:2d:50:0d:
9d:23:84:e2:8e:65:2d:c1:f1:a5:b8:88:68:da:60:
d4:ca:19:e0:51:57:9f:2f:f3:ab:fd:66:bc:72:19:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:57:E1:B5:5E:82:24:32:88:BB:B0:58:91:91:9C:4B:8E:95:76:5F
X509v3 Authority Key Identifier:
keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/LVfhtV6CJDKIu7BYkZGcS46Vdl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.172.0/24
IPv6:
2001:7f8:26::/48
Signature Algorithm: sha256WithRSAEncryption
a1:62:6e:cb:48:2f:82:2e:0f:f1:3f:eb:02:fc:81:d0:c1:3d:
76:c4:75:de:c8:ba:cf:eb:30:1a:0f:2c:5f:25:71:4b:1b:52:
0b:19:c6:f2:a2:1e:40:00:47:87:22:16:56:01:bb:43:4e:33:
03:79:96:ef:f2:8f:30:ae:b3:7b:37:56:cd:e1:1f:1e:23:fb:
c8:12:cc:a9:87:b5:5d:e4:cd:b1:7f:54:a4:a5:a1:d7:51:ab:
d1:0d:98:fa:2c:47:20:82:02:86:f3:8f:c7:82:39:e0:95:2e:
12:6f:59:5c:bb:05:43:a3:d4:92:e9:4c:bc:a7:2a:6f:1d:9b:
4e:4a:15:81:e1:1d:c0:54:67:34:f2:4a:e9:ca:bd:ea:24:87:
9c:20:3a:73:b1:22:b2:ed:ef:34:ee:5c:0d:49:db:eb:99:9c:
ba:a5:e3:ee:fb:2d:6f:37:5e:29:21:86:b6:b7:a0:e4:4b:d0:
cf:89:b6:68:a8:25:ca:3f:8a:ef:c1:6f:65:aa:a4:a9:80:c3:
20:85:6b:7b:84:25:34:ac:92:54:6b:af:38:9a:2a:22:50:d6:
8e:48:df:c8:fc:ae:59:9b:4e:1d:91:93:3d:31:4f:6b:b2:bd:
40:87:69:d1:09:19:90:a0:77:7e:d5:ab:46:00:39:ba:c0:bc:
57:cf:43:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:04 2024 by rpki-client on console-fra.rpki-client.org