Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/lSuvrYExLyBWaLSk4EOFrpdpL2U.roa
File: lSuvrYExLyBWaLSk4EOFrpdpL2U.roa (raw, json)
Hash identifier: u1+7OmXNw3FlZq70qkZKKl0Q+RewsW9qkpN0MzKTwfo=
Subject key identifier: 95:2B:AF:AD:81:31:2F:20:56:68:B4:A4:E0:43:85:AE:97:69:2F:65
Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial: 01856FD4F27AB1FED7F67540C1CE1A691A6E
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/lSuvrYExLyBWaLSk4EOFrpdpL2U.roa
Signing time: Mon 02 Jan 2023 00:15:04 +0000
ROA not before: Mon 02 Jan 2023 00:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12732
IP address blocks: 193.34.122.0/24 maxlen: 24
193.34.120.0/22 maxlen: 24
193.34.120.0/24 maxlen: 24
193.34.123.0/24 maxlen: 24
193.34.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:f2:7a:b1:fe:d7:f6:75:40:c1:ce:1a:69:1a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Validity
Not Before: Jan 2 00:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=952bafad81312f205668b4a4e04385ae97692f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a6:87:bc:1c:f6:0e:1f:48:df:75:f4:a3:ea:
f2:30:e3:8e:65:61:52:5f:f1:a0:64:57:31:e5:a2:
14:d5:a6:b8:48:a0:57:58:85:95:19:ff:63:ce:53:
1a:a9:66:0e:19:d5:06:bb:f5:64:7d:61:d9:47:bd:
01:1a:d7:b7:89:0a:bc:fc:c6:63:d6:61:14:08:ad:
04:16:60:da:71:ce:70:98:30:8e:88:b4:88:38:40:
7b:1b:a1:1a:96:c3:35:43:cf:fe:ac:80:62:67:c2:
e5:95:9f:84:70:1e:3a:3b:e7:6b:08:6e:b9:f7:bf:
00:a4:29:78:c4:a9:60:d5:86:ff:f2:d9:8d:4b:fb:
60:31:48:0e:67:9c:26:0a:59:16:f3:f2:21:42:96:
18:9b:0a:8c:80:67:3d:08:a2:36:14:58:ed:f9:18:
7a:9d:d2:95:c6:5c:b5:1c:88:a6:29:46:e8:9e:30:
5e:32:dc:f0:15:97:66:51:ab:48:83:64:d0:d1:ca:
ff:1d:3a:be:f5:cd:0d:34:a2:fd:37:b4:c7:08:a1:
79:ed:e7:70:e1:07:f5:5a:c8:4e:be:d0:0d:bf:d2:
51:b0:be:16:c0:57:c8:ac:ff:93:54:11:c2:dd:7f:
cb:a2:b3:ad:5b:91:4c:18:f6:67:34:da:0d:b2:7e:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2B:AF:AD:81:31:2F:20:56:68:B4:A4:E0:43:85:AE:97:69:2F:65
X509v3 Authority Key Identifier:
keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/lSuvrYExLyBWaLSk4EOFrpdpL2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.120.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:d4:76:82:73:ba:50:62:06:02:a9:34:37:9e:23:86:b7:5d:
af:d4:84:6a:3a:af:84:e5:8c:cc:8c:dd:35:13:d9:f4:63:3f:
2b:ff:8e:13:e1:a3:5c:16:b5:a5:6f:a3:7e:8b:e6:20:2c:6e:
71:1e:60:ed:93:0d:82:87:9d:9a:2a:85:c8:b9:1e:31:41:ac:
b1:8b:39:de:8f:54:f3:0d:be:6c:e4:5e:49:2a:26:37:02:43:
52:7f:72:31:e0:a5:b6:0b:e7:6f:e3:8e:14:d9:52:39:3c:37:
1b:5d:02:cc:5b:74:96:6f:dd:b6:99:2b:9f:e3:d6:6d:76:89:
c0:b6:7d:27:d7:62:72:c1:02:0c:bd:d8:bb:a0:dd:11:10:a1:
f4:81:ad:fe:ad:20:e9:bf:a5:8b:97:43:33:c9:55:a8:63:ed:
8d:e9:e2:dd:82:dc:72:bb:2b:fe:c6:05:d6:c0:d7:85:4d:ea:
b3:8b:ca:c0:5f:55:a4:de:bf:04:b7:66:d4:3d:65:66:01:45:
57:6b:df:da:a2:33:ee:18:4e:d5:94:ba:28:65:d9:e6:bb:ae:
db:50:5c:4e:f4:c2:cb:17:f2:70:22:54:01:83:02:25:db:8b:
e9:b6:78:d6:9b:c2:03:7e:f7:1f:70:87:f5:c6:5c:2f:3c:a1:
ec:28:98:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:44 2024 by rpki-client on console-ams.rpki-client.org