Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/LC4lZ2S61aR1-wivv9AAnctBtZs.roa
File: LC4lZ2S61aR1-wivv9AAnctBtZs.roa (raw, json)
Hash identifier: /1pL5qY+4z1iMszrMOdXR1AG1WUMxpI6IotD8iVnlhU=
Subject key identifier: 2C:2E:25:67:64:BA:D5:A4:75:FB:08:AF:BF:D0:00:9D:CB:41:B5:9B
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 0185A50E6D2E04264BB3E9537E37C6E2150D
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/LC4lZ2S61aR1-wivv9AAnctBtZs.roa
Signing time: Thu 12 Jan 2023 08:17:44 +0000
ROA not before: Thu 12 Jan 2023 08:17:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58291
IP address blocks: 194.76.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:0e:6d:2e:04:26:4b:b3:e9:53:7e:37:c6:e2:15:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: Jan 12 08:17:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c2e256764bad5a475fb08afbfd0009dcb41b59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b1:3f:31:e7:07:40:20:36:7f:59:67:cc:d9:
e1:46:8b:35:42:e3:1a:38:f0:62:41:2e:64:9f:8d:
ec:38:87:80:51:61:7f:aa:2c:d6:f2:ff:5b:3b:f8:
67:8c:32:73:d4:70:a8:2b:a9:6d:d0:9d:b7:30:26:
e9:19:eb:f8:b2:36:9a:11:a2:10:09:dd:2f:57:f1:
f0:05:89:81:77:7c:9e:f4:d1:27:3f:e1:af:f7:49:
8b:07:0a:60:2b:e4:62:39:22:2d:0d:9b:dc:e5:9f:
68:05:94:d9:a9:2a:f5:74:a6:33:51:a9:0d:d8:b1:
01:a6:cb:87:bc:d5:d1:c3:1f:f0:9b:df:de:90:f4:
89:28:c8:3c:44:b3:b3:1b:aa:8e:da:29:09:71:ab:
3d:66:10:ac:c5:00:54:65:74:5d:a6:40:c2:50:11:
b7:63:14:0c:ae:b2:9c:cc:bd:3b:73:b0:29:c0:e6:
a5:12:a6:41:5a:61:d7:12:9d:a6:2a:a5:f2:eb:9f:
51:7f:9c:28:57:a0:f3:6a:ec:2f:2c:3d:51:73:81:
ef:d6:7d:a3:5b:fa:15:9c:9a:76:10:a5:1e:45:38:
56:05:02:50:91:34:68:e7:c1:2a:96:99:d1:a0:8e:
19:8f:ce:9f:6e:59:53:5b:d8:f4:4e:d2:78:69:ce:
c2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2E:25:67:64:BA:D5:A4:75:FB:08:AF:BF:D0:00:9D:CB:41:B5:9B
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/LC4lZ2S61aR1-wivv9AAnctBtZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.186.0/24
Signature Algorithm: sha256WithRSAEncryption
30:d6:75:a3:48:b5:a7:98:6e:34:3b:8d:a9:2b:32:e6:4f:14:
cc:73:76:75:74:f5:c0:0e:e6:5c:29:2e:3a:b0:ff:9b:08:f9:
2a:64:23:c4:2a:3d:06:e4:72:53:26:b8:86:82:30:cd:bc:43:
1b:e2:e8:59:17:c2:7f:10:54:72:8d:64:53:2f:72:3d:c6:8d:
f4:ad:da:cb:02:cc:c2:f6:13:26:8a:42:ba:69:76:4d:f6:29:
68:0e:b6:b5:3f:5e:02:d5:9e:1e:36:8b:fe:0f:16:69:be:65:
fb:0c:28:6b:19:08:22:b1:38:9b:66:f6:38:44:62:c7:4b:06:
4b:cd:36:d0:dd:de:f0:c7:01:26:7d:0b:9a:8b:4d:37:5a:88:
4d:33:7d:a4:b4:a7:6c:6b:21:97:3f:b5:15:a2:ef:83:82:b0:
85:0b:ee:7d:da:55:47:2c:41:38:20:79:7a:23:1d:7b:23:32:
05:c9:1a:0b:19:2b:f6:57:17:6b:0d:c2:e0:bf:35:2e:10:f5:
cd:bd:2e:45:69:44:a8:dd:38:cd:1b:8c:85:a6:e7:5f:d2:b9:
7c:ae:aa:d0:7c:ae:6a:6d:b6:5a:a9:fb:13:63:b2:8d:a7:fe:
25:9c:1b:99:4c:16:57:b5:df:57:4a:f9:1e:68:0a:c9:d4:68:
1a:33:76:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 14:27:19 2023 by rpki-client on console-ams.rpki-client.org