Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LByDAm2aipb7DvNEVxb4oTxMHEU.roa
File: LByDAm2aipb7DvNEVxb4oTxMHEU.roa (raw, json)
Hash identifier: 0TbibtPHhBxJ+wpJlZqEN4ko1tIZapOue4AR+nacXKM=
Subject key identifier: 2C:1C:83:02:6D:9A:8A:96:FB:0E:F3:44:57:16:F8:A1:3C:4C:1C:45
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAE7F41D79EF2769FCD1E9F2407B0D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LByDAm2aipb7DvNEVxb4oTxMHEU.roa
Signing time: Sun 01 Jan 2023 10:05:15 +0000
ROA not before: Sun 01 Jan 2023 10:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42201
IP address blocks: 192.121.245.0/24 maxlen: 24
194.132.123.0/24 maxlen: 24
192.121.246.0/24 maxlen: 24
193.181.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:e7:f4:1d:79:ef:27:69:fc:d1:e9:f2:40:7b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c1c83026d9a8a96fb0ef3445716f8a13c4c1c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f5:94:ea:55:56:96:d1:1b:bf:94:6b:0e:1a:
f1:a2:b5:26:38:a6:00:f0:9a:68:48:93:fe:34:70:
f7:30:8c:eb:70:28:0d:ef:2a:dc:f0:d5:55:40:67:
c3:54:1e:95:ed:17:03:6a:6a:17:6a:14:07:70:fa:
39:f1:15:30:d6:c2:c8:65:6f:65:a2:9c:08:b7:0a:
f6:d4:1f:70:4e:b5:36:00:ff:45:d3:d8:64:26:f6:
b1:3c:75:10:83:32:b6:bd:79:71:43:d3:20:64:9c:
ce:0a:38:d7:42:15:1d:a8:4e:4c:d8:6a:1b:f8:e7:
79:39:92:3a:86:e1:4b:d6:4e:69:33:01:6d:a3:32:
23:21:fc:f5:27:32:ea:b2:f0:0f:35:8d:57:b4:e3:
2d:80:15:c7:64:34:00:63:46:c8:5e:7a:d1:2d:87:
f7:ba:72:41:01:22:aa:8c:51:af:d9:62:4e:d0:38:
ae:f1:a2:f2:49:be:10:c0:84:e9:ee:dd:e8:41:2c:
b9:07:b8:9b:25:8f:4f:fd:04:d6:5d:b1:54:1f:a9:
a5:c1:dd:b3:d0:e7:2d:e9:19:93:36:b5:1c:09:55:
2d:eb:59:fa:fc:74:f9:4b:48:3d:43:6a:ef:2b:0e:
39:7c:64:16:e5:06:f7:d8:ae:6a:22:ef:0a:cf:a1:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1C:83:02:6D:9A:8A:96:FB:0E:F3:44:57:16:F8:A1:3C:4C:1C:45
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LByDAm2aipb7DvNEVxb4oTxMHEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.245.0-192.121.246.255
193.181.35.0/24
194.132.123.0/24
Signature Algorithm: sha256WithRSAEncryption
55:3f:5a:0c:81:3c:f1:01:e6:39:f2:f2:8b:74:bc:41:ce:7b:
75:46:b8:6d:17:81:9d:ae:a2:c0:5b:6b:22:d4:c3:cc:68:c7:
fc:ae:01:9b:a2:fc:7b:2e:5e:2c:9f:5c:d0:ba:99:1a:eb:f8:
3b:d1:c4:9a:f9:fa:51:58:cf:cd:a8:03:2a:d3:5a:28:82:68:
6c:8f:42:03:a0:19:d1:91:db:6a:aa:84:58:dc:9f:a4:25:01:
66:46:e5:22:33:e2:c6:96:79:81:1d:d6:94:fb:76:97:66:18:
6a:cd:ae:29:a5:79:41:e6:88:d6:d1:e6:ee:23:10:fb:4e:c4:
82:ea:24:7b:e6:8d:82:3a:e4:e9:57:10:25:1e:31:80:c4:27:
5c:a5:fe:60:5c:a7:40:be:c6:67:92:96:ea:a8:04:53:45:bd:
10:38:8a:70:31:36:24:55:93:cb:54:73:e5:91:a1:aa:a5:09:
e4:c3:ba:41:42:e3:35:93:21:78:9d:b4:41:84:46:40:cd:5f:
5d:5d:fe:81:d2:ae:ae:09:d1:45:42:0d:f4:ad:96:d5:5e:ad:
38:2d:e8:e7:6c:09:db:b6:18:36:3c:d3:a6:d6:3a:37:ce:4b:
9e:03:30:b1:44:be:88:9a:76:87:3b:21:c8:ec:e4:6e:2d:0b:
32:b4:99:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org