Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/LsuARUQR69ryPMlFfOr5lmXUbJA.roa
File: LsuARUQR69ryPMlFfOr5lmXUbJA.roa (raw, json)
Hash identifier: 7UJp+jTQbBAmjFd5gNGbIJXY2a4qikeDTKVVcoQ2roo=
Subject key identifier: 2E:CB:80:45:44:11:EB:DA:F2:3C:C9:45:7C:EA:F9:96:65:D4:6C:90
Certificate issuer: /CN=9b868a76f5b4748e1e4bba834701a68577c63462
Certificate serial: 01857139EFEC95FC5361548660B1C1E61489
Authority key identifier: 9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/LsuARUQR69ryPMlFfOr5lmXUbJA.roa
Signing time: Mon 02 Jan 2023 06:45:00 +0000
ROA not before: Mon 02 Jan 2023 06:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51234
IP address blocks: 176.117.0.0/21 maxlen: 21
176.117.2.0/24 maxlen: 24
195.191.78.0/24 maxlen: 24
195.191.78.0/23 maxlen: 23
195.191.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:ef:ec:95:fc:53:61:54:86:60:b1:c1:e6:14:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b868a76f5b4748e1e4bba834701a68577c63462
Validity
Not Before: Jan 2 06:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ecb80454411ebdaf23cc9457ceaf99665d46c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:54:4b:c0:78:d3:1b:95:4e:e8:65:52:ac:
48:cf:0b:58:f3:01:c6:21:3a:fd:e5:ae:66:88:22:
34:0f:7d:2f:90:66:51:50:e2:06:8b:ad:4f:a2:28:
8c:29:01:af:6f:05:c5:71:62:01:92:b6:57:b8:3f:
21:0a:87:06:b1:8f:59:aa:f7:79:d5:82:99:d2:89:
0f:3e:5d:09:f5:fa:0e:01:64:19:b6:0f:37:fd:f3:
96:d7:ee:1f:50:56:b5:b2:a1:6d:4d:2d:bb:f8:a0:
67:48:db:78:71:90:9c:f9:43:93:b6:e2:82:66:5a:
19:f4:f5:74:0a:97:78:6a:36:f0:05:30:04:d4:ae:
6a:6a:13:f8:c1:e9:8e:be:54:d2:81:2d:66:e6:e8:
e8:86:4b:7a:e2:32:bd:0c:71:26:4b:09:5e:a9:ed:
de:c9:4e:8b:9c:cb:62:45:7c:e3:1f:9b:c5:91:a3:
d2:f3:ca:f5:b4:f5:c0:fc:2d:a7:1b:4a:2a:7f:5f:
dd:b2:52:d6:95:a0:98:b1:5f:96:18:93:4a:8e:47:
19:24:db:b2:09:ab:ac:a2:9f:f0:e5:3b:04:f7:a7:
96:8d:a3:59:38:64:42:52:26:b2:34:52:bf:b3:cf:
42:a8:f5:25:8d:26:3e:2c:c0:80:bc:9b:7c:0d:9f:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CB:80:45:44:11:EB:DA:F2:3C:C9:45:7C:EA:F9:96:65:D4:6C:90
X509v3 Authority Key Identifier:
keyid:9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/LsuARUQR69ryPMlFfOr5lmXUbJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.0.0/21
195.191.78.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:2f:1d:38:79:08:f7:1b:30:10:1a:72:0b:f3:7e:3c:5e:21:
3d:5c:d7:60:67:eb:46:70:d2:dd:4b:2b:20:92:9b:0b:81:79:
ca:09:28:85:1f:01:60:4b:14:13:80:d0:8a:7c:d9:17:5b:79:
b1:91:67:1a:e1:f8:dd:49:b7:65:6a:95:be:30:f7:86:0d:ae:
25:ce:1a:11:f5:6d:ba:2e:5f:a3:70:06:f0:00:0f:57:25:0c:
d4:77:a1:41:2f:20:ed:61:57:00:d7:3a:c7:64:5c:7a:fe:a4:
8f:88:8e:5b:fc:e1:47:64:26:b9:08:4f:cd:f5:80:84:28:e9:
63:b2:df:f9:44:e0:2b:11:ce:74:1a:fe:9b:6c:ee:98:ce:74:
32:e1:8c:c5:c2:5b:b0:d9:54:a9:60:d9:98:44:a5:34:de:2f:
91:6a:b9:00:ec:8c:96:6c:dc:59:37:5c:d0:00:9f:4d:32:76:
d4:f3:87:b1:ea:3f:a4:a9:93:81:e7:85:a8:98:6f:b3:4a:71:
8c:16:bd:83:e2:1d:93:9a:cc:25:f8:0f:e7:75:37:88:26:3c:
1e:a5:60:cd:12:29:4d:f2:f6:49:ca:f1:c0:41:66:e7:ec:c2:
3c:4b:9b:2f:fa:d4:ea:52:aa:31:52:d6:dd:62:ed:f7:c6:76:
64:28:18:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:49 2023 by rpki-client on console-ams.rpki-client.org