Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/rLfsMrKi_GGuMv7BT-_T7jojXgs.roa
File: rLfsMrKi_GGuMv7BT-_T7jojXgs.roa (raw, json)
Hash identifier: xusIvOuCnDwbQ5/1F8cKeqP+DGjb3sQFFKD7+17qwfk=
Subject key identifier: AC:B7:EC:32:B2:A2:FC:61:AE:32:FE:C1:4F:EF:D3:EE:3A:23:5E:0B
Certificate issuer: /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial: 018756813D6416AED9C91F4E0CBF09A7F9A5
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/rLfsMrKi_GGuMv7BT-_T7jojXgs.roa
Signing time: Thu 06 Apr 2023 12:18:43 +0000
ROA not before: Thu 06 Apr 2023 12:18:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41540
IP address blocks: 31.172.143.0/24 maxlen: 32
91.231.127.0/24 maxlen: 32
92.60.190.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:81:3d:64:16:ae:d9:c9:1f:4e:0c:bf:09:a7:f9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Validity
Not Before: Apr 6 12:18:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acb7ec32b2a2fc61ae32fec14fefd3ee3a235e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:b6:12:1b:d6:0c:31:47:02:d8:79:18:d6:
e6:43:8c:c6:d0:68:d0:00:f4:9c:11:6a:12:03:2d:
2d:80:02:99:ed:8c:8d:e7:d4:03:a9:ef:5d:67:ba:
3d:a3:81:84:d7:15:5d:c7:d9:7d:6f:3d:a7:cf:8c:
ae:c4:e7:81:64:b6:a0:32:8c:b2:32:dd:3d:a2:57:
c8:5b:f3:d6:72:43:69:9a:48:08:34:01:d2:67:b1:
93:74:61:ed:d2:54:7d:65:ec:84:ee:33:bb:28:10:
08:bc:f0:4d:c6:b0:3e:19:3e:77:1c:65:ae:89:82:
b4:72:42:09:4a:31:96:0a:a8:da:d2:08:13:39:c3:
09:2a:92:5b:5d:0e:82:44:1f:05:5e:d3:64:26:b5:
65:bf:80:50:81:ce:82:40:48:e7:5d:5b:76:51:7e:
c7:4b:2d:b9:f0:35:33:02:e3:87:10:97:41:a1:57:
5e:aa:39:8b:5d:e8:45:a9:59:67:ab:34:79:d6:4a:
68:c5:fa:b3:66:e5:af:37:1b:84:a9:7b:cb:02:5d:
37:c0:1c:4b:7c:20:75:35:55:4b:47:f9:1d:94:74:
ee:38:8f:9a:50:9a:39:b1:8d:e7:61:bf:0a:8e:97:
f6:a4:d7:23:8f:e1:c1:2c:94:5b:fb:8b:04:49:b2:
ca:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B7:EC:32:B2:A2:FC:61:AE:32:FE:C1:4F:EF:D3:EE:3A:23:5E:0B
X509v3 Authority Key Identifier:
keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/rLfsMrKi_GGuMv7BT-_T7jojXgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.143.0/24
91.231.127.0/24
92.60.190.0/23
Signature Algorithm: sha256WithRSAEncryption
36:8f:a3:9a:36:d6:95:6e:63:05:34:49:d1:94:f2:36:62:ab:
63:4d:97:3f:9d:ca:ee:51:6a:92:25:97:30:bb:eb:b4:3b:72:
41:73:ba:c0:a3:ca:5c:45:ee:f8:3e:d5:84:d8:dc:b5:0d:f1:
35:2e:61:82:5e:2c:2b:45:7e:5c:f8:ea:c8:69:4b:a7:cd:b3:
e7:9c:eb:db:23:95:c1:cd:c1:82:48:97:96:f6:3c:6a:62:e4:
b9:fd:cb:2a:62:7b:65:72:07:fa:8b:38:a4:8b:4f:2d:69:31:
82:d5:51:b5:f8:fd:ef:5d:9d:3b:ce:1a:67:3e:90:ff:85:a6:
27:0f:77:e3:76:43:33:2c:aa:94:e3:e2:c1:9d:3d:72:d0:e0:
97:ad:3d:4c:b5:58:75:9d:77:7c:6f:55:1b:4c:e0:10:39:d2:
2a:49:4b:73:d7:10:6c:47:60:6c:2c:91:ea:2f:36:f0:ce:7f:
b7:b1:48:77:18:fc:70:1e:c3:14:f5:b5:54:bb:de:89:6b:30:
86:18:f8:20:e7:a1:40:af:c4:78:de:1a:fc:8e:78:f5:c6:97:
4a:f2:a5:1d:b0:4d:7f:99:71:10:7e:a3:9b:08:94:53:e1:4a:
fa:69:6f:92:92:17:e0:79:bf:2b:db:9c:5b:95:bd:26:fd:b2:
4d:99:33:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:10 2024 by rpki-client on console-fra.rpki-client.org