Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/lN4khO3Py2neDWL9qY8XhQJi2jw.roa
File: lN4khO3Py2neDWL9qY8XhQJi2jw.roa (raw, json)
Hash identifier: /c6V/m+7cwd2p4fegOLEDKZ44w/ExsWOLZwozrCe1/o=
Subject key identifier: 94:DE:24:84:ED:CF:CB:69:DE:0D:62:FD:A9:8F:17:85:02:62:DA:3C
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 01856FF0657DE7EB1853D525FB7D59785DE8
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/lN4khO3Py2neDWL9qY8XhQJi2jw.roa
Signing time: Mon 02 Jan 2023 00:45:03 +0000
ROA not before: Mon 02 Jan 2023 00:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 394973
IP address blocks: 213.19.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:65:7d:e7:eb:18:53:d5:25:fb:7d:59:78:5d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Jan 2 00:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94de2484edcfcb69de0d62fda98f17850262da3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:b3:ce:7d:1b:e2:51:c0:d9:a3:ad:4d:c5:
1e:04:da:10:b2:75:d5:4e:91:c2:c3:35:2a:d1:76:
0b:c3:a5:8b:4d:9f:6a:06:ec:5d:89:13:58:d2:6a:
b3:fe:8e:2c:25:b7:e6:dc:ea:b6:e2:e2:d4:a4:f6:
93:4c:50:67:be:af:2e:71:5d:1d:0c:91:8d:73:ed:
d9:b1:be:95:84:78:6d:78:34:a0:5b:3b:c8:9b:75:
c3:a5:75:65:4b:35:30:a6:e9:45:d9:2f:e6:1a:69:
8f:2c:4f:a8:73:e4:a2:e6:bd:14:14:71:63:b7:15:
a2:69:f5:2f:a1:f8:e1:d6:27:91:bc:41:eb:c4:97:
b9:a5:67:53:c4:00:38:5f:42:bc:64:a0:91:b0:1d:
0f:79:39:13:4b:cf:92:0a:8a:03:2c:0e:79:31:87:
e6:72:e7:3e:7b:c0:08:e0:4a:7a:1c:9c:db:51:05:
18:dc:2d:61:b8:c8:bb:9d:8a:d0:25:34:a1:2e:90:
03:42:8a:18:b6:7c:f7:f2:59:39:0a:09:ed:60:3f:
c6:00:b5:86:46:37:d9:c6:1a:b4:9d:87:26:45:e8:
0b:72:b1:ac:06:9d:c6:77:ae:ac:2f:cd:fe:cc:de:
d4:04:54:66:83:1f:1a:ed:58:25:84:c7:0d:a2:22:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DE:24:84:ED:CF:CB:69:DE:0D:62:FD:A9:8F:17:85:02:62:DA:3C
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/lN4khO3Py2neDWL9qY8XhQJi2jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.19.145.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:6b:16:9d:7b:a1:1e:64:16:83:de:db:b5:9a:f1:10:ff:a8:
9e:cc:02:40:bf:c4:95:d8:c5:40:7e:d4:33:21:9f:ae:b2:e3:
37:62:ae:44:12:20:6e:2f:75:55:cb:ae:67:f0:45:a4:8f:e3:
31:e4:93:9f:95:29:ee:63:d5:0a:99:9d:b9:ab:62:3e:a2:1f:
58:45:94:25:6a:83:f0:c0:39:f4:c1:f3:5b:36:69:c6:67:04:
6d:cd:f6:75:5b:34:37:36:27:ea:13:b3:d3:49:24:31:4f:73:
8b:b3:9f:93:54:24:39:a7:0a:29:36:fd:24:05:ac:ab:e5:82:
dc:5a:42:ea:13:20:84:f8:83:8e:ca:cd:41:38:e7:65:78:93:
2e:1c:51:06:ba:41:bb:e1:18:df:9f:8f:bd:c6:54:63:09:91:
6b:0a:7f:7c:93:aa:d4:ac:2e:80:c1:b0:f7:62:28:70:02:53:
2a:74:1f:b6:90:e6:c1:06:38:2c:19:db:83:a5:65:cf:fd:46:
9a:0a:b1:a0:64:e4:c9:4e:d2:da:05:ef:5c:72:61:e9:39:9d:
de:d5:47:cb:31:4a:2c:15:ba:31:cd:a0:3f:4c:04:60:47:94:
59:55:30:f9:8b:21:6c:bf:89:b6:0f:ee:60:0a:6d:00:5d:9f:
df:a6:2a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:41 2024 by rpki-client on console-ams.rpki-client.org