Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/Lnp3Tu9xyznDpMoM6_9ncfV2ZJ8.roa
File: Lnp3Tu9xyznDpMoM6_9ncfV2ZJ8.roa (raw, json)
Hash identifier: Bnr9gnCjw5hOvOvuVw7Qeqq/L0/kGS3fhM6QPvdItcc=
Subject key identifier: 2E:7A:77:4E:EF:71:CB:39:C3:A4:CA:0C:EB:FF:67:71:F5:76:64:9F
Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial: 0185739F2923F0EBF1F1406BCE49D15D6D6C
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/Lnp3Tu9xyznDpMoM6_9ncfV2ZJ8.roa
Signing time: Mon 02 Jan 2023 17:54:48 +0000
ROA not before: Mon 02 Jan 2023 17:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211633
IP address blocks: 185.221.245.0/24 maxlen: 24
2a04:3f83:49::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:9f:29:23:f0:eb:f1:f1:40:6b:ce:49:d1:5d:6d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
Validity
Not Before: Jan 2 17:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e7a774eef71cb39c3a4ca0cebff6771f576649f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:38:96:91:7f:8e:82:56:8b:3f:dd:58:61:
c5:c7:85:4c:e2:9a:55:70:ff:5a:f4:89:e3:ed:65:
2a:f4:ca:7a:f8:ae:00:5f:51:a4:14:a9:b1:9d:c0:
dd:5c:2b:f6:cf:98:b3:67:fd:2a:98:92:11:2d:39:
1e:67:25:6b:c5:da:4e:b3:d5:4e:8e:bb:97:b6:e4:
17:d4:77:51:dc:92:dd:73:7b:a9:e9:0f:7b:75:b8:
ed:87:e2:0a:79:d7:81:b3:b6:d4:41:61:46:ef:26:
66:3b:c6:6e:95:f8:fe:24:20:a3:5a:d7:df:32:86:
18:c6:15:01:b5:cf:2e:30:0f:29:33:0e:58:ce:d1:
9f:3d:0b:89:5e:c3:4b:a8:93:07:a9:e2:f4:c5:ab:
7b:d3:01:9c:5f:4f:94:5f:0a:3c:38:39:4b:1a:7f:
34:29:a5:0f:cd:08:e0:47:d8:70:0f:13:4b:5d:ca:
c4:e5:b0:dd:57:f5:e7:50:bb:43:7a:6f:97:ca:93:
45:87:8d:86:f1:f8:2a:af:12:09:1b:07:36:b1:4e:
9c:09:62:da:29:4a:0b:5b:2a:bd:23:c7:a1:87:f3:
f6:b1:32:1c:1a:b5:3f:f8:4a:b3:06:c8:3f:6e:88:
51:ae:64:ff:2a:db:23:0f:c1:6c:41:0d:9a:36:7a:
2a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7A:77:4E:EF:71:CB:39:C3:A4:CA:0C:EB:FF:67:71:F5:76:64:9F
X509v3 Authority Key Identifier:
keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/Lnp3Tu9xyznDpMoM6_9ncfV2ZJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.245.0/24
IPv6:
2a04:3f83:49::/48
Signature Algorithm: sha256WithRSAEncryption
2c:31:40:77:69:42:1a:c5:d4:96:e4:60:f4:6e:c6:36:d6:1d:
2b:ce:87:94:6b:6a:7b:b4:13:ce:a9:01:f0:4b:cf:58:6f:d2:
d1:dc:c7:0d:14:8d:04:9d:6f:11:fa:70:e4:ad:b2:4f:8a:45:
90:53:32:81:00:d9:ee:c2:e1:14:7a:6f:f2:7e:2d:ff:33:e8:
eb:31:76:6f:c7:57:97:f3:48:e3:60:29:29:e9:17:79:9c:25:
ff:44:37:ba:50:9e:19:c9:6c:5c:bb:07:3b:70:9f:34:2f:43:
37:6a:52:b2:9a:b4:3b:0d:05:b8:8c:37:7a:86:d5:38:00:48:
f7:04:ea:cb:16:73:4d:73:5a:eb:18:6b:43:f7:3b:86:7a:11:
39:48:7b:00:fc:87:10:4e:26:0d:e2:36:3f:fc:89:eb:83:82:
cd:0b:8b:11:68:c4:f8:70:03:86:20:03:2b:18:ee:8b:ed:97:
b3:72:e6:73:0b:00:f3:da:66:d5:3f:1a:1f:19:28:26:29:95:
00:79:06:77:cc:99:94:c8:58:e6:18:bc:e5:6a:a4:8f:59:a6:
33:34:17:38:12:6d:0e:59:db:86:89:70:f8:2c:3a:43:6f:84:
95:7a:39:f8:45:a4:38:ec:14:30:98:67:84:03:f7:f4:be:7a:
5d:75:21:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:24 2024 by rpki-client on console-ams.rpki-client.org