Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/lBiVvwMAvOFH0WvqaUfaykdgBkw.roa
File: lBiVvwMAvOFH0WvqaUfaykdgBkw.roa (raw, json)
Hash identifier: ATk1hHGB/DDqhb4tLuyDSTsb997rt5QvZgnBMLNkrfc=
Subject key identifier: 94:18:95:BF:03:00:BC:E1:47:D1:6B:EA:69:47:DA:CA:47:60:06:4C
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 01856BC11343A64C6EFD08E684AC6705B9ED
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/lBiVvwMAvOFH0WvqaUfaykdgBkw.roa
Signing time: Sun 01 Jan 2023 05:14:53 +0000
ROA not before: Sun 01 Jan 2023 05:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20649
IP address blocks: 188.132.169.0/24 maxlen: 24
188.132.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:13:43:a6:4c:6e:fd:08:e6:84:ac:67:05:b9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Jan 1 05:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=941895bf0300bce147d16bea6947daca4760064c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:37:0a:cb:b0:09:93:48:9d:6b:8f:0c:24:83:
b8:f6:45:bb:15:e4:e1:8e:d9:f1:b5:29:c6:5b:d5:
70:0d:97:db:2f:cc:a7:79:dc:93:36:d6:05:fd:13:
5b:40:da:e6:71:46:87:7f:88:1a:b1:ff:17:69:ad:
9a:26:4e:31:d6:c8:98:4c:aa:02:19:d4:1f:16:e7:
6c:52:c1:ad:85:64:2e:b3:75:3b:81:d2:1b:0d:95:
d0:29:3a:3f:39:aa:9b:ef:d2:75:49:16:29:ed:74:
76:60:dd:e9:df:c2:a7:b1:8c:dd:e0:fc:1e:af:43:
90:9b:23:cf:5e:7c:91:6a:fd:12:83:2a:6e:a2:aa:
7b:37:e5:a2:43:3f:69:59:f3:76:12:0d:0f:bf:39:
68:f4:92:c3:79:80:11:60:5c:72:c1:05:3a:44:54:
75:2b:39:c8:6a:6f:19:ed:b4:73:d0:de:8a:e1:82:
c0:e7:15:21:59:66:99:90:7d:e0:3e:a7:72:93:13:
6b:00:30:59:db:fa:2c:17:c9:7d:b9:1a:02:97:72:
41:9d:52:5d:8f:40:f7:58:68:bc:26:b5:c9:f0:c3:
e7:49:13:5c:24:6d:9a:f5:75:a5:f8:6e:14:c9:e5:
00:1c:9b:ad:84:54:c1:92:53:cc:53:25:34:60:e8:
61:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:18:95:BF:03:00:BC:E1:47:D1:6B:EA:69:47:DA:CA:47:60:06:4C
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/lBiVvwMAvOFH0WvqaUfaykdgBkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.169.0/24
188.132.179.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:c9:bd:9f:5e:67:ae:88:af:6d:a5:44:b8:63:4c:ae:50:28:
35:df:f8:0d:04:2b:71:b7:e7:c9:b6:3a:00:98:4e:32:9b:11:
04:56:74:0b:0a:ae:0e:f0:74:e8:4b:87:0d:8e:da:4e:a6:30:
fd:20:9d:2d:9e:22:fd:64:40:e5:a0:8a:5e:02:44:05:a1:11:
bf:de:04:6d:18:c0:87:1b:0d:63:01:82:bc:2c:02:37:6e:eb:
c2:a7:b7:2d:5a:49:06:e3:0a:66:fd:92:19:60:ed:48:8d:7a:
c8:cd:04:41:02:82:a5:17:a0:57:3b:53:d1:2c:34:5a:cf:64:
23:8f:a9:db:57:bd:d8:0d:72:1b:5a:7e:aa:ed:b2:5c:03:25:
29:4b:84:35:ae:a3:e5:d8:1a:61:bf:a8:56:6e:97:38:fd:b8:
9e:5b:05:f5:aa:5e:ff:7d:f9:03:95:97:84:39:07:74:78:01:
1d:25:88:31:7c:03:de:53:03:64:20:5d:2d:5c:9d:54:4c:85:
10:0a:57:20:4f:56:9a:9a:fa:7d:42:2b:c2:f8:aa:d5:27:8a:
0f:b8:26:bc:94:73:98:bd:49:01:6c:92:50:74:8b:69:ae:8c:
cf:7b:bc:c7:af:74:76:9b:09:6f:36:b4:40:2a:33:38:be:e5:
b8:84:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:15 2024 by rpki-client on console-fra.rpki-client.org