Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/773553-2f46-4db0-baca-007b3b7afa65/1/lCYKI4Hualk_IKUVfUg2N4qmYfE.roa
File: lCYKI4Hualk_IKUVfUg2N4qmYfE.roa (raw, json)
Hash identifier: WHztlHlJQIyRxoORcd9Xo7hP5iCHP2yYztzZpEwRYJ8=
Subject key identifier: 94:26:0A:23:81:EE:6A:59:3F:20:A5:15:7D:48:36:37:8A:A6:61:F1
Certificate issuer: /CN=fac46e0633fc4b5ce2d81a7faceb6167ce42a895
Certificate serial: 01856F39208DFEBEE61E73960156F772EC6D
Authority key identifier: FA:C4:6E:06:33:FC:4B:5C:E2:D8:1A:7F:AC:EB:61:67:CE:42:A8:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRuBjP8S1zi2Bp_rOthZ85CqJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/773553-2f46-4db0-baca-007b3b7afa65/1/lCYKI4Hualk_IKUVfUg2N4qmYfE.roa
Signing time: Sun 01 Jan 2023 21:24:52 +0000
ROA not before: Sun 01 Jan 2023 21:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61207
IP address blocks: 185.215.196.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:20:8d:fe:be:e6:1e:73:96:01:56:f7:72:ec:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac46e0633fc4b5ce2d81a7faceb6167ce42a895
Validity
Not Before: Jan 1 21:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94260a2381ee6a593f20a5157d4836378aa661f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:88:1d:67:6c:99:91:e4:18:2a:0b:91:fe:
b0:24:bd:df:ab:9a:97:a4:96:b1:46:72:43:4e:21:
4e:06:af:18:2a:6d:18:cc:d5:2e:03:d1:20:f7:b3:
cd:1e:72:4b:2f:e1:16:9a:4a:89:28:91:52:b1:86:
42:d6:07:d6:a4:e1:1e:ae:d6:17:6e:b3:e1:a4:cc:
fa:64:5d:bf:01:77:b4:f3:86:b6:82:1e:6a:10:7f:
b9:87:94:dd:c5:2d:52:80:d6:0a:f4:c7:95:14:c3:
fd:32:41:9d:e7:c2:22:1c:11:f6:cf:24:1e:7b:a2:
54:1b:7c:27:8f:47:fa:54:30:ee:2e:7a:7f:a9:8a:
92:36:06:0a:10:d5:cc:e3:13:19:1f:8d:4f:6f:ab:
59:bd:5a:a0:92:ce:15:a0:f5:14:04:43:dd:be:62:
6c:ba:21:2d:9e:82:60:4e:f5:d7:be:bd:8c:4e:0e:
3a:5b:ca:3c:05:0c:c1:7c:28:11:cb:10:74:fb:cf:
75:46:08:94:8a:cc:a3:57:44:26:b1:73:26:61:9f:
30:5b:61:1c:c8:3a:0a:05:ac:dc:7b:13:ee:e1:81:
5d:2a:28:9c:2f:72:95:f8:cf:0f:a0:43:a7:bd:45:
60:56:6c:a0:7b:97:12:f7:8f:d1:14:c4:aa:ce:98:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:26:0A:23:81:EE:6A:59:3F:20:A5:15:7D:48:36:37:8A:A6:61:F1
X509v3 Authority Key Identifier:
keyid:FA:C4:6E:06:33:FC:4B:5C:E2:D8:1A:7F:AC:EB:61:67:CE:42:A8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRuBjP8S1zi2Bp_rOthZ85CqJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/773553-2f46-4db0-baca-007b3b7afa65/1/lCYKI4Hualk_IKUVfUg2N4qmYfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/773553-2f46-4db0-baca-007b3b7afa65/1/1-sRuBjP8S1zi2Bp_rOthZ85CqJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.196.0/22
Signature Algorithm: sha256WithRSAEncryption
26:31:87:95:42:9e:00:14:dd:ea:8e:f5:5c:0e:7c:7c:fc:23:
7e:ba:40:e6:f6:75:41:55:01:c2:e9:0c:a0:23:56:51:78:67:
46:fe:ca:81:6a:9f:c2:a9:d5:d7:7e:cb:0a:ea:e4:11:3f:fe:
45:99:0e:d5:c0:d3:c2:0c:16:93:c2:ae:38:ec:87:1c:90:b4:
3f:d2:48:c1:1c:04:f5:e4:68:32:b3:0b:86:36:29:1f:e4:cc:
cb:a7:83:2c:14:78:48:4c:61:90:08:75:39:a3:84:db:0d:3e:
9d:00:8c:fa:aa:e7:d5:ad:6e:41:78:f2:d9:67:0e:d2:57:75:
b3:10:01:4b:9c:41:e0:af:2b:14:00:ee:bf:b9:92:98:44:57:
37:77:50:b8:f5:2e:be:43:01:fe:af:c9:20:98:0d:ab:36:78:
02:55:84:e0:8d:2b:30:c9:82:d7:65:cf:16:f0:a9:f8:1e:41:
76:bd:b5:c4:f2:05:54:21:3f:c4:2a:a3:05:b8:26:93:5f:93:
60:91:ed:d5:49:2a:81:d1:b6:ed:49:b6:ac:6e:db:79:ea:e6:
b0:f4:38:66:fc:d5:2e:a5:78:15:dd:25:07:1b:a0:50:cf:5c:
a5:3f:86:19:e0:ec:71:68:2a:4c:db:cb:07:ab:d7:b6:f5:55:
5a:36:d7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 13:04:23 2023 by rpki-client on console-ams.rpki-client.org