Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/z_LBbUJw7lncIYZFILKbMYJoXjY.roa
File: z_LBbUJw7lncIYZFILKbMYJoXjY.roa (raw, json)
Hash identifier: o2bzPMMVp1ogQKUe09D0wacqEablJyNvAMdZMTtiTc8=
Subject key identifier: CF:F2:C1:6D:42:70:EE:59:DC:21:86:45:20:B2:9B:31:82:68:5E:36
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018AC3E8A08A42E4229145547F3100348BCE
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/z_LBbUJw7lncIYZFILKbMYJoXjY.roa
Signing time: Sat 23 Sep 2023 21:18:37 +0000
ROA not before: Sat 23 Sep 2023 21:18:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60683
IP address blocks: 188.132.153.0/24 maxlen: 24
212.68.55.0/24 maxlen: 24
188.132.223.0/24 maxlen: 24
188.132.229.0/24 maxlen: 24
188.132.240.0/24 maxlen: 24
188.132.242.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.147.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
212.68.48.0/24 maxlen: 24
31.210.48.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
188.132.200.0/24 maxlen: 24
188.132.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c3:e8:a0:8a:42:e4:22:91:45:54:7f:31:00:34:8b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Sep 23 21:18:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cff2c16d4270ee59dc21864520b29b3182685e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:c4:00:0d:85:65:a8:e6:05:2b:a0:de:dd:
dc:21:f3:48:98:3b:ca:a4:dc:33:97:68:50:b1:9c:
0b:c7:b6:11:f2:6c:ee:66:4c:2f:87:b4:84:26:c8:
35:7c:0a:47:b5:e5:e9:79:35:bd:57:c1:4e:bb:08:
a3:db:f7:ab:b6:37:f9:89:5f:ca:68:89:6e:0b:31:
6a:2b:0e:69:48:9c:42:4e:c0:2d:4b:99:36:c9:16:
15:99:50:75:03:68:89:3e:f8:8f:18:94:d4:45:23:
6c:7b:ab:4f:af:e3:dc:4e:49:7f:fe:1f:c6:54:f1:
e2:fb:9c:6d:9f:4b:a0:e0:19:f0:2e:e3:9c:ed:c8:
c2:77:0f:e2:5d:85:d0:7d:c1:37:20:5e:f0:6c:30:
b8:13:e3:9e:bd:46:a1:69:fc:a0:2b:5e:09:33:59:
94:91:f7:fb:3f:1d:7d:4a:b5:4e:eb:05:a4:ba:c3:
2b:f4:c4:02:83:2f:f1:42:22:db:31:fd:25:e1:69:
93:cb:04:b5:52:51:04:42:6b:2f:98:3d:35:75:33:
34:50:fc:d2:5a:3f:97:94:83:c3:b0:81:5f:05:48:
39:3c:80:82:6a:92:8e:8b:3c:5c:eb:14:d7:25:da:
26:db:93:6d:b9:7b:b0:ad:de:2a:9f:d5:3c:e6:6a:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F2:C1:6D:42:70:EE:59:DC:21:86:45:20:B2:9B:31:82:68:5E:36
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/z_LBbUJw7lncIYZFILKbMYJoXjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
77.92.143.0/24
77.92.145.0-77.92.147.255
188.132.153.0/24
188.132.184.0/24
188.132.200.0/24
188.132.210.0/24
188.132.223.0/24
188.132.229.0/24
188.132.240.0/24
188.132.242.0/24
212.68.48.0/24
212.68.55.0/24
Signature Algorithm: sha256WithRSAEncryption
93:db:8e:48:16:31:78:e1:f1:57:90:39:50:dd:3b:5f:fb:c8:
c5:34:6a:f7:c7:db:7d:12:01:83:52:b2:db:ce:de:fc:5e:a6:
f0:bb:b3:9a:71:81:2e:19:1f:b0:e8:d1:3b:0a:4b:67:7c:7a:
2b:50:87:96:ca:1a:5f:25:a0:b0:1d:c7:46:ca:7a:48:1f:29:
78:02:c4:82:22:c5:1a:a0:ed:53:5b:ae:77:ee:56:ec:43:47:
ea:fc:ce:da:87:b6:44:93:75:fc:62:43:46:fb:91:4d:47:9b:
b7:92:01:12:9f:f9:79:e8:0d:ae:b4:e6:cc:3a:00:f0:7b:5a:
c0:74:78:0d:06:0a:f9:51:9c:03:44:4c:d0:b7:8e:9e:98:e4:
a2:fa:c4:58:f0:a6:9c:f3:92:f6:56:49:f6:29:dd:a9:03:cb:
5b:7c:c7:3d:9c:91:e3:1d:2b:a2:ba:27:0b:9c:26:af:3c:a1:
d3:85:7b:69:8f:c7:27:78:fe:2a:92:30:64:73:fe:72:46:a7:
72:71:37:a1:09:a9:70:21:2c:cf:fc:c5:37:75:b7:5d:97:b9:
c8:ca:9f:ee:ab:5f:81:79:be:3b:e3:47:0c:b0:ad:15:ce:f0:
2c:1a:8a:7c:ed:d4:5b:11:4a:28:4a:00:15:de:fc:b3:8e:e9:
4e:26:b3:df
-----BEGIN CERTIFICATE-----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Generated at Mon Sep 25 18:25:33 2023 by rpki-client on console-ams.rpki-client.org