Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/lSqv4Eq1oEgqFGYM650_uU4PDQI.roa
File: lSqv4Eq1oEgqFGYM650_uU4PDQI.roa (raw, json)
Hash identifier: yL5RXFS1bbBlyVCLzeBOT9hGa4GyXszSQ5HxyWfOzho=
Subject key identifier: 95:2A:AF:E0:4A:B5:A0:48:2A:14:66:0C:EB:9D:3F:B9:4E:0F:0D:02
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 0185718C485FD631FEFF8C4666ED4B9D48A4
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/lSqv4Eq1oEgqFGYM650_uU4PDQI.roa
Signing time: Mon 02 Jan 2023 08:14:57 +0000
ROA not before: Mon 02 Jan 2023 08:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47237
IP address blocks: 195.216.237.0/24 maxlen: 24
185.117.148.0/22 maxlen: 24
194.152.36.0/23 maxlen: 24
2a0b:d7c0::/30 maxlen: 31
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:48:5f:d6:31:fe:ff:8c:46:66:ed:4b:9d:48:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Jan 2 08:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=952aafe04ab5a0482a14660ceb9d3fb94e0f0d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:14:6d:72:d2:c9:cf:c1:c0:bb:4b:8e:7f:
be:a2:5c:ba:23:57:3f:5e:76:d6:9f:62:0c:84:78:
2d:1d:d0:3f:68:03:71:4a:a4:a0:eb:bd:6a:62:e3:
b9:5a:d3:82:95:08:91:28:e6:29:07:49:72:8a:f3:
f9:c2:8c:c3:4c:c9:12:36:4a:ac:25:39:31:ad:90:
ae:b8:46:c7:24:e4:23:03:01:2f:3e:7f:0a:e2:eb:
36:ab:60:81:e3:89:68:3e:ba:6d:8c:1a:2c:f0:a6:
73:64:1b:c0:33:ee:b9:9f:cb:4c:9b:b2:9f:ef:44:
bb:f3:4f:6a:a5:4f:95:b5:51:a9:f5:53:1a:d5:08:
6e:db:51:48:f3:d3:97:e1:52:e3:f2:10:d4:71:c5:
58:6b:eb:3c:a7:3a:31:64:9c:a4:7e:a8:79:6c:5d:
b9:4d:2a:b9:0a:7b:50:db:74:5c:8c:d5:2e:6b:39:
e1:0b:0e:60:f1:eb:48:32:f5:58:95:ce:14:f8:52:
15:89:e7:64:f5:db:10:d1:e1:2e:f0:71:0f:d0:72:
cd:8e:11:32:37:d8:52:53:1a:71:1d:c7:65:92:9a:
7d:25:d0:b0:88:f2:74:bd:aa:b3:e6:4d:fe:46:9d:
d7:40:61:43:d9:7e:b4:bc:90:9b:bf:1d:0f:db:9f:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2A:AF:E0:4A:B5:A0:48:2A:14:66:0C:EB:9D:3F:B9:4E:0F:0D:02
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/lSqv4Eq1oEgqFGYM650_uU4PDQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.148.0/22
194.152.36.0/23
195.216.237.0/24
IPv6:
2a0b:d7c0::/30
Signature Algorithm: sha256WithRSAEncryption
56:93:36:53:ed:b7:a2:19:b4:34:a7:19:82:52:bc:f2:97:ad:
b9:e0:c3:14:ad:88:aa:70:1b:d5:d8:26:dd:47:70:54:bd:ac:
6a:87:ec:77:9d:43:74:94:2d:df:67:04:7f:a4:d0:44:b3:19:
af:16:d6:e8:53:e0:15:3f:61:61:23:ef:c3:1e:9c:a9:6c:5f:
a3:90:bd:c8:20:9f:fd:4c:6e:65:60:4a:49:7a:c6:b3:5a:55:
f2:fe:58:d5:57:11:ad:5a:07:48:f7:f4:fc:f5:ae:f2:18:71:
cf:d7:31:99:58:e3:db:d8:cf:95:da:44:6f:ee:fb:01:8a:e9:
38:fb:6a:2f:06:4e:ed:2d:b3:c8:37:04:de:5d:5e:fd:88:cb:
04:1d:4e:11:4b:d4:08:ea:c9:f7:6d:13:39:d5:bc:f2:11:7c:
53:8a:36:c0:ab:e7:ed:84:ce:74:ee:45:d3:4d:48:97:13:87:
b8:2a:22:7e:30:62:1d:ae:e9:f3:fb:88:aa:45:73:c3:86:9a:
ef:2f:41:f2:04:15:56:02:61:2e:a0:76:2b:0f:5a:1d:d0:a3:
af:03:45:3a:e4:b9:05:55:21:5a:95:f3:ac:e5:7c:8b:4f:8c:
e1:c5:80:60:be:e1:7b:b1:dc:7c:d0:bb:dc:39:79:ef:a3:27:
f4:1c:b9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:30 2023 by rpki-client on console-ams.rpki-client.org