Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/7lc_LuzH_P1tqNyBU2SdWO10_F4.roa
File: 7lc_LuzH_P1tqNyBU2SdWO10_F4.roa (raw, json)
Hash identifier: LYMxSnA31QCbeB3PemQWfvJxotFT84bpS6zZii8r+2E=
Subject key identifier: EE:57:3F:2E:EC:C7:FC:FD:6D:A8:DC:81:53:64:9D:58:ED:74:FC:5E
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 018B0BAD881434291D0CF77F4F36A0343E7A
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/7lc_LuzH_P1tqNyBU2SdWO10_F4.roa
Signing time: Sat 07 Oct 2023 19:46:43 +0000
ROA not before: Sat 07 Oct 2023 19:46:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.0.0.0/24 maxlen: 24
2001:7f8:133::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0b:ad:88:14:34:29:1d:0c:f7:7f:4f:36:a0:34:3e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Oct 7 19:46:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee573f2eecc7fcfd6da8dc8153649d58ed74fc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:20:78:d6:85:3b:f5:cb:35:ca:46:60:bf:
99:da:b7:9b:61:58:3b:cf:85:ec:68:84:9e:e3:cd:
4e:7c:f0:c1:db:ee:a6:32:f2:37:ff:6d:06:b3:1f:
33:27:74:a0:fb:eb:e0:a7:78:9d:a2:eb:4c:01:f2:
73:f6:ff:8a:23:60:75:85:1e:34:fc:b9:18:15:49:
08:8f:8d:64:0c:bd:a9:da:e5:7b:d9:ec:0f:88:45:
5f:04:20:4f:43:0f:58:87:33:83:86:91:97:5e:1f:
8d:4e:7b:f5:57:9a:16:65:74:23:bd:7c:0b:55:42:
a6:e6:1b:d4:50:f5:b4:64:a1:c0:cd:fc:0b:30:b5:
13:60:2c:2e:4b:8d:45:29:12:7d:71:81:ff:c8:42:
b2:24:4d:ca:b0:75:13:47:e1:97:7f:fd:9b:c3:4b:
40:62:e6:32:7c:7c:69:25:15:08:02:c3:16:a0:fb:
d5:ce:ab:13:5e:6f:33:b0:90:16:57:7f:26:1b:2b:
03:f4:60:50:21:1b:1f:08:ca:de:da:02:e3:b0:ee:
f5:88:87:2d:38:44:12:69:29:1a:1d:b2:4e:9d:96:
00:41:a6:a1:80:74:d4:b6:a7:76:53:25:7d:7f:80:
09:ed:05:6e:82:03:54:5b:8e:25:e6:51:8d:23:ff:
69:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:57:3F:2E:EC:C7:FC:FD:6D:A8:DC:81:53:64:9D:58:ED:74:FC:5E
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/7lc_LuzH_P1tqNyBU2SdWO10_F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.0.0.0/24
IPv6:
2001:7f8:133::/48
Signature Algorithm: sha256WithRSAEncryption
13:94:ff:25:d4:b3:e1:f6:fc:3c:80:30:41:cf:99:dd:1d:cc:
93:67:cc:ea:42:0c:32:85:94:76:b5:de:46:35:e1:57:51:fd:
50:7d:26:df:69:81:1f:61:8d:a4:d4:62:da:8d:98:40:3c:18:
01:db:ef:5b:9d:e5:5d:9d:93:66:62:dc:e3:fe:04:f8:f5:13:
39:70:aa:d1:03:6a:65:7e:57:fa:16:d4:da:3e:f8:b6:0b:b3:
8d:65:7c:30:4a:d5:ea:bc:f4:11:70:0f:29:1f:05:5e:41:a6:
4d:8c:7f:59:04:c0:d4:76:e8:ea:4a:36:a8:f8:df:09:c1:5e:
17:ec:7c:5d:a4:38:bd:7f:36:78:08:d1:70:ee:d5:d1:82:92:
f7:7d:39:49:52:cc:38:83:a3:6e:e1:e3:14:d8:fa:01:1d:c3:
f2:b8:ca:05:f5:01:6b:43:15:52:e1:11:e1:99:9d:ed:e4:f3:
ee:f2:d5:ea:f4:d4:c9:7c:7b:36:07:a6:3b:8b:d7:be:a3:d8:
23:2e:48:b2:33:ed:4d:64:bf:9a:ff:41:50:37:f2:fb:38:db:
bd:0e:dc:f8:6b:bc:7a:f2:a0:80:01:8f:d1:4f:76:d4:66:1b:
86:5c:eb:e4:05:75:40:3a:8e:ce:75:4a:35:d7:30:bb:3d:c0:
36:84:9c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:00 2024 by rpki-client on console-ams.rpki-client.org