Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/lcQaDrnoyMGX9siduXaebDhKUXo.roa
File: lcQaDrnoyMGX9siduXaebDhKUXo.roa (raw, json)
Hash identifier: 3ajmyWlGMUhdm9fXzi8Rud9kFKlo/DQWKE//LyKncxw=
Subject key identifier: 95:C4:1A:0E:B9:E8:C8:C1:97:F6:C8:9D:B9:76:9E:6C:38:4A:51:7A
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01857139D0BBED3B822A70DD05580FF56FD1
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/lcQaDrnoyMGX9siduXaebDhKUXo.roa
Signing time: Mon 02 Jan 2023 06:44:52 +0000
ROA not before: Mon 02 Jan 2023 06:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61209
IP address blocks: 194.225.82.0/23 maxlen: 24
194.225.84.0/23 maxlen: 23
194.225.80.0/23 maxlen: 23
194.225.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:d0:bb:ed:3b:82:2a:70:dd:05:58:0f:f5:6f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 06:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95c41a0eb9e8c8c197f6c89db9769e6c384a517a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:1e:01:89:50:48:6a:4f:3d:4e:f5:f4:00:
62:63:ef:30:71:70:cd:0e:b1:95:cb:7e:92:16:8f:
3e:b5:29:d7:a4:39:50:5a:d3:59:f8:c2:79:1f:72:
de:d5:36:78:e6:22:4b:12:1d:50:6a:87:2f:1d:16:
0f:60:ef:65:af:00:ea:87:9d:e9:8a:28:cb:3c:39:
7d:16:e7:bd:a4:00:e9:ad:60:dd:23:d6:2e:a3:cb:
7b:2d:10:01:2a:2b:c7:dc:a0:0e:3e:31:88:a1:e0:
cd:d8:d4:46:9d:7c:43:b7:56:3d:fb:63:5e:1b:15:
ae:ef:d6:c5:57:18:2a:e2:5c:84:26:90:42:25:3f:
ef:b1:53:64:b2:8e:61:1e:38:54:c3:25:19:17:a6:
3b:d3:53:b7:5c:5a:ac:11:b8:71:34:15:63:89:bf:
37:02:e7:f1:34:d1:d7:ea:1f:e5:fd:2d:4e:f2:d5:
38:b7:ea:c3:20:24:4a:9a:3f:9c:ec:95:06:db:2a:
0a:cc:98:db:da:84:f8:e6:ee:ba:c5:62:8c:c5:53:
40:9b:1c:20:59:68:c8:bf:ee:7b:00:72:be:86:fe:
08:e3:e5:70:35:2d:80:47:be:59:9f:99:86:18:02:
17:de:94:66:61:7e:dd:d2:82:31:60:b5:5a:af:74:
2b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C4:1A:0E:B9:E8:C8:C1:97:F6:C8:9D:B9:76:9E:6C:38:4A:51:7A
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/lcQaDrnoyMGX9siduXaebDhKUXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.80.0-194.225.85.255
Signature Algorithm: sha256WithRSAEncryption
3e:23:29:50:81:09:22:8f:4d:6b:5d:23:3b:a7:da:05:b2:93:
73:33:1a:fa:7a:24:db:51:14:06:95:ae:2d:32:62:30:62:75:
8d:9c:e7:14:ae:3a:fb:bc:fa:ef:34:35:40:1c:6c:76:28:2f:
b3:55:9d:1e:6f:cd:fd:cf:96:88:b8:ed:73:7e:30:b1:fa:9d:
27:3a:cc:06:27:6a:fa:ae:0c:ad:06:1f:5c:98:2f:c0:1a:45:
2c:9d:8b:f5:2a:00:c4:fa:9a:91:5e:c9:68:d1:d8:b8:4b:5a:
6e:30:71:93:dd:68:4a:c6:85:ee:be:bb:36:21:f1:15:3f:9d:
4f:63:31:fa:3a:51:a0:37:a1:9f:ef:34:a4:e5:34:61:d0:2b:
ca:7c:58:f0:c2:2f:57:90:0a:45:d2:85:21:b4:c2:5b:22:20:
3f:04:2b:d8:5c:25:83:4f:79:0b:57:89:f4:ce:6a:3c:ee:b0:
f5:f9:8b:eb:e5:cd:df:e4:f7:12:b9:c0:9a:e1:5a:e8:b7:84:
a3:a9:aa:7a:4b:7e:93:a9:67:a3:ba:83:f4:5e:16:63:b7:b4:
4a:bd:86:69:2b:71:01:a0:94:3d:90:d6:33:aa:e1:75:a3:46:
a2:b4:46:98:97:2f:58:e0:a8:33:af:85:e8:9c:7f:45:91:44:
7c:d6:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:11 2024 by rpki-client on console-ams.rpki-client.org