Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/ln5SLMdwCbci7r4-_eE1_IbCT5o.roa
File: ln5SLMdwCbci7r4-_eE1_IbCT5o.roa (raw, json)
Hash identifier: PTJ4jO/yRI6PEOJOa9rdvTJUYrEF1hGatAqsqf9yR10=
Subject key identifier: 96:7E:52:2C:C7:70:09:B7:22:EE:BE:3E:FD:E1:35:FC:86:C2:4F:9A
Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial: 018A704488B99ED6D99AE14214ED020C931B
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/ln5SLMdwCbci7r4-_eE1_IbCT5o.roa
Signing time: Thu 07 Sep 2023 15:30:54 +0000
ROA not before: Thu 07 Sep 2023 15:30:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 193.36.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:70:44:88:b9:9e:d6:d9:9a:e1:42:14:ed:02:0c:93:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Validity
Not Before: Sep 7 15:30:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=967e522cc77009b722eebe3efde135fc86c24f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:a4:78:6c:9e:2b:05:04:8e:57:30:a2:17:
bf:f2:da:bc:58:44:b6:f5:42:49:0e:a6:8f:35:9e:
68:7b:ad:db:55:c3:64:9b:ae:c7:d6:67:6e:dc:c9:
44:d3:6e:4d:7d:ae:94:5f:5d:ff:3b:a1:08:9b:cb:
79:af:8e:5b:25:cb:7e:e6:01:5c:52:c1:44:61:48:
e9:87:27:66:b0:b5:95:27:5a:56:db:3b:5a:1f:62:
2d:78:3a:3e:75:8a:ed:7e:76:15:d3:d9:05:8e:b7:
9e:91:99:8a:74:03:d6:30:ee:e1:ec:c8:c2:e7:d9:
fc:86:06:3c:96:d0:c6:98:d9:89:7f:35:32:b2:3f:
4a:de:57:6f:0e:f1:7c:96:67:91:d5:10:aa:85:af:
99:d6:37:35:1e:07:44:12:47:90:1b:d5:be:0f:c3:
d6:95:40:70:eb:4b:20:17:5d:70:24:eb:cb:f8:48:
79:11:6f:ba:0b:35:ba:c7:e2:97:a6:e6:4d:54:bd:
7b:cd:7f:a1:b9:6c:09:30:cc:25:e9:ab:a0:32:c7:
0f:d2:1a:cf:cd:5a:e8:a5:4f:18:ca:52:b0:04:12:
b2:be:85:35:94:45:03:6f:1b:09:b4:d8:ca:86:bc:
7f:0f:25:43:90:79:7e:9b:19:de:9f:bc:e3:95:d9:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7E:52:2C:C7:70:09:B7:22:EE:BE:3E:FD:E1:35:FC:86:C2:4F:9A
X509v3 Authority Key Identifier:
keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/ln5SLMdwCbci7r4-_eE1_IbCT5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.227.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9b:00:85:ab:6e:9d:91:18:8d:9d:b2:6b:88:86:c7:ec:e1:
9a:54:d3:29:0e:09:5f:69:54:ce:c5:a0:b2:f7:5e:c2:15:1c:
98:fd:1d:39:8b:4e:26:f9:ca:02:af:92:34:e5:56:67:8b:f3:
d2:77:04:60:64:98:2b:36:04:47:f2:37:d0:40:95:be:d1:14:
e2:b4:fa:21:b8:c2:0b:8e:6e:de:04:91:96:a4:f4:83:20:91:
36:59:bf:f4:43:0e:f2:4e:a4:07:61:81:15:fc:35:97:17:21:
ea:15:a2:e7:e7:3c:ba:65:57:dd:24:dd:8d:aa:62:e8:99:44:
9c:02:c4:fb:ad:c1:35:15:08:81:9c:e6:6d:cc:03:66:69:76:
f1:a3:3e:94:20:aa:63:d4:99:ce:4d:3f:6b:c7:61:f0:ea:07:
73:bb:aa:d9:53:ac:b7:87:03:08:cb:22:73:43:24:be:08:dd:
c6:ae:e4:57:09:5d:9d:2e:ee:32:9b:00:3e:0d:86:78:7f:b7:
d4:81:9b:64:ee:3f:6c:f4:20:df:02:75:75:f4:bf:0f:d7:16:
60:c3:d5:54:60:06:7a:aa:94:3e:72:30:0e:41:bb:e7:d2:71:
15:0e:b9:89:c1:8a:7b:a0:79:9b:37:06:88:25:87:05:7d:bf:
61:e9:48:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:59 2024 by rpki-client on console-ams.rpki-client.org