Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/LjeqA_kilZKdHz47p5Qb1JtU78U.roa
File: LjeqA_kilZKdHz47p5Qb1JtU78U.roa (raw, json)
Hash identifier: 2XIpE2Vzf7mXVQUW39jN3AwdEMHfUqrZDSPQJ0Ie12c=
Subject key identifier: 2E:37:AA:03:F9:22:95:92:9D:1F:3E:3B:A7:94:1B:D4:9B:54:EF:C5
Certificate issuer: /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Certificate serial: 01856FCB8B6876364F6F8E9D375B0325F785
Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/LjeqA_kilZKdHz47p5Qb1JtU78U.roa
Signing time: Mon 02 Jan 2023 00:04:48 +0000
ROA not before: Mon 02 Jan 2023 00:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399587
IP address blocks: 193.3.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:8b:68:76:36:4f:6f:8e:9d:37:5b:03:25:f7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Validity
Not Before: Jan 2 00:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e37aa03f92295929d1f3e3ba7941bd49b54efc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b2:ce:3d:0d:d5:07:02:2f:3e:e8:00:ae:e2:
5a:c8:f4:f6:f7:91:33:25:f2:ba:e7:d7:7a:54:ea:
b5:6c:c4:ad:0c:67:e8:03:e0:11:71:c6:7a:87:60:
69:a1:00:62:20:c4:26:5b:00:af:76:ec:01:45:2a:
03:bc:8f:87:b4:e6:ca:13:d3:04:a3:fc:e3:d0:79:
61:d3:4f:74:32:b7:4d:32:8b:09:a8:82:91:20:65:
5a:a9:bb:ac:6f:f6:58:ea:78:72:f1:27:bb:04:34:
ca:12:11:4e:24:b1:dc:88:a6:9e:f1:a5:62:41:13:
a8:1e:0a:7f:f8:d7:4e:e0:14:ee:12:f8:fa:12:b8:
28:df:dc:8b:46:f0:17:b2:3a:21:51:c7:d6:9f:8b:
a7:a7:c7:fb:da:6e:a9:94:ae:49:f8:a1:d7:9b:7d:
a2:42:46:d2:f7:88:f7:f0:91:80:43:7e:de:8a:94:
e2:00:ec:1f:00:8b:af:48:8c:a6:d9:e0:81:e1:bf:
dd:0c:68:f7:6e:52:ac:46:33:0e:7a:53:dd:ff:77:
34:74:6d:5c:f8:e3:47:86:5b:e3:43:02:43:bb:36:
9f:33:86:4c:f5:8d:25:b3:46:f4:b4:8f:ba:d7:a3:
2c:04:c7:e9:d6:1f:0c:7f:04:d8:19:5e:5c:49:5c:
ce:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:37:AA:03:F9:22:95:92:9D:1F:3E:3B:A7:94:1B:D4:9B:54:EF:C5
X509v3 Authority Key Identifier:
keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/LjeqA_kilZKdHz47p5Qb1JtU78U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.54.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:8b:44:7d:e2:11:45:e3:6a:1c:bc:57:13:ff:88:c3:69:b3:
f2:ae:64:75:5f:be:e8:ce:3e:77:5d:cd:31:fd:1f:e2:b5:1e:
92:be:59:89:43:66:d3:c5:20:97:91:47:d7:a8:46:ec:5d:14:
3b:b2:73:9e:5f:42:0a:c5:dc:bb:7f:38:f2:9e:c6:ee:5f:4b:
1e:8d:46:aa:e3:0e:b6:1d:82:02:c2:62:1b:1e:2a:59:f9:39:
50:3f:66:43:de:69:49:23:b4:eb:36:10:3b:e4:75:ee:04:c7:
aa:ca:8f:11:c4:80:9f:ca:fb:19:8e:6e:dc:61:c2:a2:5b:b8:
89:ca:5b:85:31:a6:e7:75:81:4c:7f:d0:0d:21:df:51:cb:2e:
7d:6b:b1:90:74:a7:7b:d8:82:60:b8:32:0d:38:ac:13:e6:97:
a8:05:de:36:45:55:26:f2:bb:4f:87:54:a1:4b:8a:09:39:73:
f9:c0:81:2a:20:8d:f9:6b:73:19:88:81:cf:c2:23:f9:63:d3:
ac:67:18:bb:02:96:91:56:74:4f:0a:38:72:b5:db:a5:eb:59:
cf:6a:4b:de:5a:8f:9a:b0:15:92:09:5b:c4:be:80:95:c3:cc:
fa:f6:1c:16:26:bb:25:7f:77:9d:4c:3e:89:25:b9:84:4a:55:
f3:be:1b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:59 2024 by rpki-client on console-ams.rpki-client.org