Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/lySJbum9hm2RkAByC4l57haqtSE.roa
File: lySJbum9hm2RkAByC4l57haqtSE.roa (raw, json)
Hash identifier: R+l0LOlcMnNQm7bkefZmeYa2eqFrEgaUjthA6uLYV7o=
Subject key identifier: 97:24:89:6E:E9:BD:86:6D:91:90:00:72:0B:89:79:EE:16:AA:B5:21
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 018B620CED946124FB731220466561D9E0C0
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/lySJbum9hm2RkAByC4l57haqtSE.roa
Signing time: Tue 24 Oct 2023 14:18:16 +0000
ROA not before: Tue 24 Oct 2023 14:18:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 217.147.180.0/24 maxlen: 24
217.147.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:0c:ed:94:61:24:fb:73:12:20:46:65:61:d9:e0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Oct 24 14:18:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9724896ee9bd866d919000720b8979ee16aab521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b2:99:fc:b4:92:da:b0:af:91:65:7a:20:19:
96:ba:f3:6a:7e:ee:a3:d0:63:e9:09:fc:82:2f:ce:
38:17:6e:ba:1d:ba:cc:08:99:8a:e0:ec:86:5c:f7:
c7:41:e8:3c:f5:2c:84:c0:b7:ad:fa:63:67:d6:99:
f3:f4:b0:d1:41:95:9e:2f:95:8e:ee:fc:30:76:a8:
17:87:40:ed:be:8b:cd:a0:2f:b9:16:57:6a:ec:79:
39:a8:4e:45:cf:f2:17:31:1e:ad:cb:2c:20:5c:51:
9b:2f:18:0e:26:1b:fa:d8:b7:62:1b:55:40:3c:ac:
b7:d8:c0:e3:9c:53:27:f0:9e:73:17:3b:0e:fd:b7:
a8:ee:d0:a6:7e:33:ca:80:5a:6f:46:d2:59:2a:07:
d9:3e:91:9e:b7:0c:af:38:11:7b:c8:ef:d9:23:8e:
27:d4:cd:5c:31:58:4a:7f:84:ca:52:8a:1f:3e:ae:
d5:63:05:05:38:0a:1d:a7:ec:71:52:38:40:7f:c6:
aa:e6:aa:dd:54:9b:78:a6:1d:4d:ff:18:cc:e0:f7:
61:32:3a:b8:99:83:8b:47:3f:f9:8f:8a:73:cc:19:
d4:61:51:1f:02:fb:4e:42:b3:b3:a1:80:b9:16:36:
b1:ab:1e:d3:17:31:93:67:0c:00:4e:2d:0d:9d:b4:
5a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:24:89:6E:E9:BD:86:6D:91:90:00:72:0B:89:79:EE:16:AA:B5:21
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/lySJbum9hm2RkAByC4l57haqtSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.180.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:49:9c:ab:76:7b:55:de:55:2f:e0:1c:71:c9:db:87:dd:48:
3c:c1:4f:5a:43:e3:f7:9b:98:b9:63:b9:49:f2:0e:a4:96:86:
53:ed:94:2b:27:9f:4c:79:dd:86:cc:65:0c:c1:35:b6:da:8d:
9a:11:c6:ff:f7:5f:be:4a:d4:c4:c3:c3:b2:b0:e5:d2:69:8a:
6c:92:88:e6:56:0d:53:7c:63:ad:07:4f:2a:72:58:3a:4d:fb:
03:ec:a8:db:db:3f:2b:21:46:18:ec:49:6e:12:0f:b7:31:03:
7e:3d:6b:7e:19:7b:45:f3:b8:d8:3c:d2:dc:da:9e:b8:74:f4:
43:63:cc:8d:ff:50:f8:ac:73:69:ee:ce:52:cc:22:fd:69:6f:
37:5d:c6:65:28:05:e1:11:f3:f4:18:1f:b3:9d:af:21:1a:30:
d6:a0:70:c8:d7:6d:40:ac:c3:a1:7b:7b:ea:b2:5b:45:c4:56:
44:65:d2:6f:d6:b6:4f:c4:d6:d5:45:0b:d8:99:67:8e:62:82:
af:60:2e:32:dd:f2:86:cf:76:36:87:e8:9d:31:05:bc:af:2c:
34:ea:96:ae:7b:dd:9f:3f:f3:91:0f:d9:d2:80:0b:bf:3e:e9:
64:be:fd:f0:eb:05:e8:80:5f:b7:22:b4:8c:e0:63:dc:9f:38:
4f:09:58:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 11:55:31 2023 by rpki-client on console-fra.rpki-client.org