Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/Ljh82uXSongLYlJdQ_YkFwt_-aU.roa
File: Ljh82uXSongLYlJdQ_YkFwt_-aU.roa (raw, json)
Hash identifier: Dl9Ltv5HZOHNpPcSSkY057Dszu61ffUoUAYYWfQDLmQ=
Subject key identifier: 2E:38:7C:DA:E5:D2:A2:78:0B:62:52:5D:43:F6:24:17:0B:7F:F9:A5
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018934DD61D5C09A79960BF3B37BD537732B
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/Ljh82uXSongLYlJdQ_YkFwt_-aU.roa
Signing time: Sat 08 Jul 2023 09:37:51 +0000
ROA not before: Sat 08 Jul 2023 09:37:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 123.253.212.0/24 maxlen: 24
46.175.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:34:dd:61:d5:c0:9a:79:96:0b:f3:b3:7b:d5:37:73:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jul 8 09:37:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e387cdae5d2a2780b62525d43f624170b7ff9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:0a:fc:6c:ff:27:fe:4b:47:b9:4d:f2:0d:
da:ab:38:d4:c0:e2:51:e8:39:f4:47:b8:cd:85:bb:
94:30:56:ca:ba:01:9b:32:7b:7b:c5:34:ed:1b:26:
ed:ed:8e:b3:ce:2d:77:8f:c9:fc:a7:67:5b:d7:66:
44:5f:87:51:51:3b:49:27:b5:ca:e6:27:7d:8a:07:
6e:f5:b2:67:1c:c9:93:f9:d2:1c:57:da:e8:fa:b2:
84:77:6d:e8:12:6a:3b:f8:37:23:92:18:4a:85:4a:
80:f0:6e:ba:1f:82:4c:7c:51:c2:f4:52:46:85:ea:
9b:57:8e:90:47:87:a5:78:b3:c2:cd:fb:b9:3d:c1:
1f:05:71:c2:fe:15:16:dd:21:3e:d2:c7:30:8a:5d:
88:f3:3f:c1:dd:75:90:37:d7:a8:78:17:04:9d:47:
c4:0a:89:b3:20:a9:00:b1:e4:bc:75:8b:f7:51:51:
1a:12:ea:35:6d:36:22:62:94:b6:fa:cf:ed:41:0b:
f5:74:27:05:c4:3a:eb:5b:7a:88:f3:52:2d:d7:ab:
f3:14:61:5f:5b:5e:43:10:cf:08:35:f3:31:89:f4:
22:07:ed:f9:bd:80:0e:0d:9e:08:85:d9:91:84:52:
88:73:01:92:01:3c:20:39:6b:cc:4a:7f:e5:a9:d5:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:38:7C:DA:E5:D2:A2:78:0B:62:52:5D:43:F6:24:17:0B:7F:F9:A5
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/Ljh82uXSongLYlJdQ_YkFwt_-aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.130.0/24
123.253.212.0/24
Signature Algorithm: sha256WithRSAEncryption
50:17:31:20:59:15:af:79:e3:2f:78:3c:bc:92:cd:fd:ae:3e:
8c:aa:55:fd:d1:7f:e3:9c:98:b9:b6:72:53:25:dc:4a:93:de:
fd:9e:d6:46:63:9c:f8:1d:f2:56:4d:8a:73:df:d4:d2:16:b7:
d3:bf:6a:ff:0a:df:ae:de:58:d1:94:2d:3b:55:56:fe:5f:23:
51:7a:2c:79:b1:b2:8e:90:62:3e:0c:24:2e:cd:dd:1a:a6:36:
d2:b4:fe:64:87:1b:bd:1b:b6:2b:be:6f:b4:8e:55:43:3e:22:
42:d5:d9:6f:63:70:10:da:1e:da:50:43:cc:7b:f3:d2:6c:5c:
f3:2d:78:75:20:63:3e:08:6a:13:61:03:ef:07:52:40:23:49:
8e:33:3b:f4:a0:a8:62:25:82:d8:23:0c:15:18:e0:43:19:dc:
d1:f1:d8:46:e2:38:52:41:0d:9f:03:37:bf:e6:b4:13:da:7c:
e9:ec:56:3e:13:58:fd:ee:ce:b0:ab:3a:61:c9:93:d2:ed:c2:
11:75:26:51:a1:0e:0b:e4:d6:ba:40:2f:b7:8d:46:24:ad:2d:
ab:7b:76:19:9e:54:67:6a:8a:66:ab:0a:b9:1a:df:aa:16:13:
88:ff:71:4e:62:b6:3e:7e:7b:67:0d:ea:7f:bb:10:81:ed:07:
bf:28:f9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 06:40:48 2023 by rpki-client on console-fra.rpki-client.org