Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/L7aIsSGZBsRDopZHGEQEVjJxtPs.roa
File: L7aIsSGZBsRDopZHGEQEVjJxtPs.roa (raw, json)
Hash identifier: Jq4HpvPYa8Vz/2bv+zbTv1Ypae8WB9pCML3BaLLHteg=
Subject key identifier: 2F:B6:88:B1:21:99:06:C4:43:A2:96:47:18:44:04:56:32:71:B4:FB
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DDD448E63BA2CB4617FCB46BD2799
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/L7aIsSGZBsRDopZHGEQEVjJxtPs.roa
Signing time: Sun 01 Jan 2023 20:55:06 +0000
ROA not before: Sun 01 Jan 2023 20:55:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 193.177.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:dd:44:8e:63:ba:2c:b4:61:7f:cb:46:bd:27:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fb688b1219906c443a29647184404563271b4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b1:7f:1b:7f:ca:7b:49:79:c4:fa:0f:14:65:
05:52:85:33:05:cc:25:5e:dd:5e:3b:2b:ab:1b:15:
5f:44:8e:c7:6b:fc:ed:a4:43:0a:c6:2d:90:4f:c8:
e0:4b:63:78:9a:fd:76:08:a3:0e:2b:85:b6:50:15:
7b:20:a6:2c:3b:90:3f:de:cc:92:cf:98:39:57:bc:
c7:a6:e9:0f:e6:63:7b:30:46:a4:d0:3a:c5:68:a1:
37:c1:19:52:1d:a7:72:c2:1f:e4:e9:c4:1a:87:3b:
87:a5:89:1b:d1:ba:33:fc:ff:5c:16:c6:4c:26:14:
aa:f9:20:da:dd:08:8e:8c:1e:a4:c7:d5:b9:3b:67:
fe:fc:de:de:58:c9:ce:e8:7a:c5:6f:eb:8a:54:3f:
e6:9f:09:a3:7f:df:5f:1f:a9:58:73:55:8b:c2:c4:
e4:39:2f:64:aa:c8:90:1a:19:6a:c8:ad:dc:b5:78:
6c:cd:94:37:ee:ee:2e:a6:77:9a:94:cb:62:de:72:
eb:8d:4e:69:ac:c0:1c:83:84:f8:94:2f:ce:29:08:
45:d1:3e:9e:51:68:62:bc:24:f1:29:b5:36:76:33:
4b:fc:7f:1f:d3:b1:95:b9:9e:a8:bb:7b:7f:08:a3:
cf:8c:b5:ab:80:f4:50:fd:2e:88:b1:4e:cb:a5:f8:
33:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B6:88:B1:21:99:06:C4:43:A2:96:47:18:44:04:56:32:71:B4:FB
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/L7aIsSGZBsRDopZHGEQEVjJxtPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.222.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:91:8f:be:25:9e:6e:f6:1b:49:56:93:56:f1:c8:1c:61:33:
70:03:09:cb:da:78:21:18:dc:fd:f0:78:d2:a5:28:92:e6:82:
85:6c:b6:6d:81:7e:08:21:53:a1:7c:6c:21:af:01:90:8b:c2:
77:28:2e:93:e5:eb:90:29:df:8e:f4:75:88:41:eb:66:d4:63:
7b:f5:a8:52:b3:1a:a3:25:d6:9b:71:f4:98:6e:95:40:86:6c:
8d:da:c2:52:e2:61:af:98:da:df:f8:a4:3d:3f:b1:21:cd:48:
60:c1:96:fb:92:57:16:37:45:f4:e5:d3:86:75:f4:9c:81:1c:
de:d0:d5:69:f1:cf:3b:5b:99:8b:2d:14:f6:5d:77:3f:cc:6f:
3c:36:ce:e7:78:31:34:2b:58:bc:8b:aa:f0:32:f1:75:29:31:
ab:c0:62:d8:cd:61:b1:8f:bf:17:d2:5e:35:01:18:a3:53:b5:
e0:10:03:97:f9:c1:8a:9a:a7:0c:e3:48:e4:24:7c:6f:f9:b3:
9d:00:0e:c1:10:7d:49:c5:09:d2:f1:e7:67:f6:ea:a8:8a:ce:
6b:47:1e:2b:24:76:5a:e2:a0:c4:c4:13:40:0c:b7:3b:11:5c:
c5:65:e5:9e:7d:a1:c6:08:fa:50:64:07:a1:02:a1:33:5a:c7:
2b:ee:bc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:34 2024 by rpki-client on console-fra.rpki-client.org