Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/lZADUdLrPDbQH8ys0VnCittCj1o.roa
File: lZADUdLrPDbQH8ys0VnCittCj1o.roa (raw, json)
Hash identifier: zqdAPEzY+HJHeUPpLAaIP4nhb53plJVLd5Q6d+gyL3k=
Subject key identifier: 95:90:03:51:D2:EB:3C:36:D0:1F:CC:AC:D1:59:C2:8A:DB:42:8F:5A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187483E4B2779307A250FFAD4C7D0BE827A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/lZADUdLrPDbQH8ys0VnCittCj1o.roa
Signing time: Mon 03 Apr 2023 17:50:54 +0000
ROA not before: Mon 03 Apr 2023 17:50:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 78.142.242.0/24 maxlen: 24
78.142.243.0/24 maxlen: 24
185.9.55.0/24 maxlen: 24
194.4.157.0/24 maxlen: 24
223.27.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:48:3e:4b:27:79:30:7a:25:0f:fa:d4:c7:d0:be:82:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 3 17:50:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95900351d2eb3c36d01fccacd159c28adb428f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6d:db:75:42:30:ae:9d:98:18:e7:1d:35:2f:
d0:85:ed:18:3f:6c:01:d4:86:d4:c8:43:d3:a3:55:
73:ff:de:b3:89:36:d3:e5:f9:8f:09:56:14:eb:10:
8b:bb:ec:f3:eb:95:e9:85:4f:45:9f:3b:09:93:8e:
fd:81:50:6d:37:0d:83:49:5e:38:2d:97:d8:a8:fc:
01:81:7b:52:b5:23:67:be:f6:03:a0:c5:13:90:5f:
8a:84:91:d9:63:01:d8:3c:42:d4:4f:67:e1:4a:1e:
91:04:87:e2:d1:38:82:e3:6b:fd:b4:08:df:b3:45:
13:c0:c0:99:57:74:4d:23:b3:3a:4f:d6:ed:16:40:
65:69:8f:88:3d:3e:21:7a:6b:72:a6:11:ef:dc:76:
63:d8:44:90:09:fe:1d:8a:96:ce:d7:72:42:78:aa:
45:fb:81:a0:2f:50:a5:6e:c1:6a:d8:4d:90:d6:e0:
15:a9:96:ea:96:14:01:ee:81:a7:88:e3:85:32:eb:
32:63:7e:50:4e:51:ea:0c:a2:a7:17:3f:54:6e:3d:
8a:b1:27:e9:93:b4:18:97:13:d1:e6:e5:59:f8:88:
b9:73:30:7c:d3:06:90:78:ef:d1:9b:a0:29:59:d0:
a2:b4:fb:34:36:35:a5:b4:f9:62:4a:a3:37:c8:72:
41:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:90:03:51:D2:EB:3C:36:D0:1F:CC:AC:D1:59:C2:8A:DB:42:8F:5A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/lZADUdLrPDbQH8ys0VnCittCj1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.242.0/23
185.9.55.0/24
194.4.157.0/24
223.27.114.0/24
Signature Algorithm: sha256WithRSAEncryption
93:00:3d:c0:3c:7f:a2:fc:10:ee:c1:63:46:9b:19:8c:40:f0:
8c:a8:e1:d4:40:b7:4a:fb:0e:a2:e9:a5:f0:10:22:25:e8:15:
5a:7e:2c:79:94:7a:be:47:0c:32:1f:4f:65:5c:f4:d3:cb:9f:
81:51:07:dd:c5:e5:9f:66:09:d5:da:37:52:68:bb:c6:5b:1f:
1e:6c:d5:44:3a:88:df:cb:56:f1:47:42:2c:2a:b5:6f:33:bf:
60:c8:0d:86:30:d6:71:17:32:63:f6:d8:ed:d5:46:72:d4:bb:
41:b2:95:ff:a0:f4:b5:10:9e:23:f6:57:75:8e:8d:c5:32:0c:
c6:32:a5:80:fb:0f:2f:6e:a4:5b:83:76:61:d5:5f:50:06:8e:
f9:3d:73:da:f6:6e:44:18:39:22:16:6c:63:8f:a1:ca:7f:7b:
96:4e:8f:72:b0:f7:cb:9a:5c:0c:7e:72:4c:1a:3d:4e:b9:f2:
83:b1:28:7e:33:d1:3f:71:df:b9:a7:d0:7a:2d:f6:4a:63:9e:
0d:43:06:f2:58:4d:1d:27:37:c2:ff:eb:c0:5d:75:6a:4b:d3:
52:43:51:2c:78:4c:a5:31:fc:e3:f7:5b:4e:7f:25:11:9b:ce:
0a:ed:8f:e1:0c:ec:6b:e9:0b:66:6a:a1:84:28:95:e2:16:00:
c6:72:bc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org