Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/lkLoPc7kLpxRz5OP5Dz_AuaaZBo.roa
File: lkLoPc7kLpxRz5OP5Dz_AuaaZBo.roa (raw, json)
Hash identifier: xMKkbafJYtQur/s5FLqrEBb3+gownKPa/Wbjz6/A6t0=
Subject key identifier: 96:42:E8:3D:CE:E4:2E:9C:51:CF:93:8F:E4:3C:FF:02:E6:9A:64:1A
Certificate issuer: /CN=efd250f341ffcc3613b599ea96e0d19c2e6fe350
Certificate serial: 01887658D0CAF1D907D42F09991E6964697E
Authority key identifier: EF:D2:50:F3:41:FF:CC:36:13:B5:99:EA:96:E0:D1:9C:2E:6F:E3:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79JQ80H_zDYTtZnqluDRnC5v41A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/lkLoPc7kLpxRz5OP5Dz_AuaaZBo.roa
Signing time: Thu 01 Jun 2023 09:45:12 +0000
ROA not before: Thu 01 Jun 2023 09:45:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 213.164.64.0/24 maxlen: 24
213.164.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:76:58:d0:ca:f1:d9:07:d4:2f:09:99:1e:69:64:69:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efd250f341ffcc3613b599ea96e0d19c2e6fe350
Validity
Not Before: Jun 1 09:45:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9642e83dcee42e9c51cf938fe43cff02e69a641a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3c:ac:6d:59:c9:0e:c7:f4:af:37:b3:8c:8c:
fe:f8:c3:76:7f:13:1e:b6:33:7b:8b:c7:14:51:db:
23:21:ae:9f:46:80:7c:02:0d:61:4a:b6:c1:4c:3a:
77:14:02:7b:bc:6a:cb:bb:08:7b:c2:9d:44:94:cb:
03:72:b9:38:bb:59:31:f0:be:84:3c:85:4c:e1:e4:
02:b6:31:5c:18:81:0d:3c:de:f2:ce:30:2e:dd:53:
bb:cb:ad:d4:02:ca:f2:63:7e:1d:06:e3:7f:7d:73:
d9:23:da:b0:aa:12:1e:9c:26:67:1e:b4:de:8b:ca:
e0:bc:5b:b6:f7:f1:60:6d:27:f7:0e:fc:1a:56:0c:
6c:11:d8:58:b8:fc:bf:0b:0c:a5:2b:b3:20:6e:41:
d9:aa:13:0d:6e:d0:fc:e9:68:99:14:ec:37:75:d6:
35:69:7a:5f:fc:2d:e0:e9:fd:c6:85:d1:7c:5f:f7:
46:19:d0:2a:77:19:a3:28:41:6a:98:4b:f9:9b:aa:
8a:0f:a3:74:a5:57:09:84:e1:4b:a2:fc:bf:ff:0b:
ea:8e:31:62:10:3a:47:e2:7b:52:91:64:da:15:13:
53:a1:86:a1:bc:3c:8d:89:7b:5a:22:8d:ae:36:71:
6c:b1:e0:f8:71:80:4a:1c:ff:cb:ab:ad:49:68:e6:
19:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:42:E8:3D:CE:E4:2E:9C:51:CF:93:8F:E4:3C:FF:02:E6:9A:64:1A
X509v3 Authority Key Identifier:
keyid:EF:D2:50:F3:41:FF:CC:36:13:B5:99:EA:96:E0:D1:9C:2E:6F:E3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79JQ80H_zDYTtZnqluDRnC5v41A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/lkLoPc7kLpxRz5OP5Dz_AuaaZBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/79JQ80H_zDYTtZnqluDRnC5v41A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.164.64.0/24
213.164.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:7f:d8:94:95:1d:80:e4:e1:63:04:1b:6b:fa:e0:5a:05:63:
03:58:1a:7f:15:36:fc:78:0b:de:82:f6:53:4d:02:1e:63:8b:
14:f4:0b:27:32:22:9c:1f:b2:80:21:8c:e3:53:f2:7e:38:56:
d4:eb:b0:0d:34:df:42:d4:48:ff:b9:30:22:dd:94:77:ec:87:
d4:94:d3:4c:62:6b:c0:96:a8:02:82:cb:e3:48:a2:2e:46:47:
50:42:6e:a5:b0:85:03:dd:0f:61:bb:c1:87:b8:b3:23:27:c5:
83:0e:a1:1e:12:49:aa:bc:a6:e0:4b:e0:42:8c:63:32:ef:7e:
1b:ff:86:54:bf:fc:98:fe:96:cb:4d:d2:72:ca:3a:3f:b1:85:
15:88:e7:41:16:99:f5:9a:64:b8:a6:ba:86:26:6e:9f:aa:44:
85:4b:75:74:bc:ce:9a:c2:b2:99:29:17:fc:ec:d0:e7:a6:66:
55:a5:1f:61:90:91:c2:8a:63:79:37:1f:d1:d0:7f:77:e7:d5:
6b:58:a8:fc:fe:98:9a:48:1d:a6:20:c4:18:1e:d6:02:ad:f8:
3d:f0:bd:a3:e6:40:e8:60:e7:54:15:f8:44:8f:56:87:6c:1c:
92:e6:7e:cf:11:61:db:d4:8b:aa:04:d2:62:74:0c:80:8d:52:
80:4b:97:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 11:46:38 2023 by rpki-client on console-fra.rpki-client.org