Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LnKgDxCsooXC0Ea5rJmxq-GvBQs.roa
File: LnKgDxCsooXC0Ea5rJmxq-GvBQs.roa (raw, json)
Hash identifier: j7SrvXal/XLN7r9qodrXVeh5Vgo5/eSStHINTqpS8Uo=
Subject key identifier: 2E:72:A0:0F:10:AC:A2:85:C2:D0:46:B9:AC:99:B1:AB:E1:AF:05:0B
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018876C3F320E141E0E75A56C4E76DA6C5AC
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LnKgDxCsooXC0Ea5rJmxq-GvBQs.roa
Signing time: Thu 01 Jun 2023 11:42:13 +0000
ROA not before: Thu 01 Jun 2023 11:42:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 194.71.227.0/24 maxlen: 24
192.71.227.0/24 maxlen: 24
192.121.162.0/24 maxlen: 24
192.71.249.0/24 maxlen: 24
192.36.57.0/24 maxlen: 24
192.121.22.0/24 maxlen: 24
192.121.23.0/24 maxlen: 24
194.68.26.0/24 maxlen: 24
194.68.27.0/24 maxlen: 24
192.121.47.0/24 maxlen: 24
194.71.126.0/24 maxlen: 24
192.121.46.0/23 maxlen: 24
192.121.46.0/24 maxlen: 24
194.68.44.0/24 maxlen: 24
194.14.208.0/24 maxlen: 24
194.14.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:76:c3:f3:20:e1:41:e0:e7:5a:56:c4:e7:6d:a6:c5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 1 11:42:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e72a00f10aca285c2d046b9ac99b1abe1af050b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:18:d5:7a:9a:2c:6c:07:f5:8d:04:db:f1:f0:
8f:e4:4c:ed:6e:e5:4f:fb:b3:4c:f4:86:5b:49:df:
ab:2b:2b:1d:e1:bc:99:03:57:08:f8:e3:53:1c:dd:
34:d7:50:71:94:1e:ab:e5:db:51:b2:34:63:ba:34:
79:3d:86:c8:81:bd:3d:8e:42:2d:66:f0:41:50:a1:
73:2a:da:61:d9:d4:5e:f0:c4:70:b8:42:45:3d:c1:
05:9c:1c:0b:40:a0:35:3d:d5:a3:73:e4:d3:53:5b:
2c:eb:a4:87:4d:ec:50:7d:18:e0:f4:9f:29:b4:09:
9b:ca:b0:53:e1:d4:ea:20:f1:ed:6a:bb:53:19:42:
ca:ad:3d:49:9b:dd:42:b7:1c:97:11:f7:e2:a1:7b:
d8:80:94:6d:09:f4:21:70:ef:d7:40:f5:94:86:7f:
b1:65:c2:01:6c:54:bd:5b:51:96:80:1a:75:87:21:
cf:da:ad:52:ff:14:88:41:f7:25:6d:07:cb:7f:73:
4b:4a:85:1b:63:ab:26:5b:3d:02:ab:db:5a:cb:84:
a8:29:7d:79:85:48:e7:d0:1a:7d:92:0b:d3:56:d5:
e1:e6:83:36:fe:6b:98:cb:4e:2f:9c:e7:22:b9:be:
ec:c9:89:35:79:4a:b8:bd:a0:f9:80:bf:a1:b6:f3:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:72:A0:0F:10:AC:A2:85:C2:D0:46:B9:AC:99:B1:AB:E1:AF:05:0B
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/LnKgDxCsooXC0Ea5rJmxq-GvBQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.57.0/24
192.71.227.0/24
192.71.249.0/24
192.121.22.0/23
192.121.46.0/23
192.121.162.0/24
194.14.208.0/24
194.14.217.0/24
194.68.26.0/23
194.68.44.0/24
194.71.126.0/24
194.71.227.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:ac:60:70:1a:07:ee:5f:8c:7d:5f:81:08:7d:2b:4d:67:3e:
7d:c1:dc:92:c5:da:00:bd:97:b7:f9:98:4e:e9:58:b8:cc:71:
05:ef:68:a4:f1:b4:ef:97:15:b4:6b:80:a1:69:83:eb:f3:78:
3b:e5:0b:cc:3e:5e:72:4c:30:40:fc:9a:e0:81:b9:f4:8d:cb:
8b:91:91:5b:99:ee:af:85:7e:9b:f5:cb:5f:04:19:90:a3:3c:
36:2b:a0:b1:8e:92:b4:d6:34:75:f4:5d:9d:f3:f7:89:a0:bf:
91:49:a0:e6:f0:90:bf:3b:3e:35:04:f7:de:1a:d0:a4:65:69:
0c:7e:bf:3d:84:96:4f:c1:37:f0:e9:f8:51:2c:8b:71:d0:8d:
59:37:41:2c:92:8c:3a:54:97:49:56:d6:29:51:90:2d:37:d8:
55:34:3d:0a:35:b6:79:23:6e:ee:c3:50:e7:50:78:ac:12:92:
5d:5d:41:fb:53:6c:ea:d9:f1:9d:39:df:53:fd:8a:39:8e:5c:
95:88:35:cf:c1:64:68:4a:79:ce:b7:ac:ec:f9:f9:f4:6b:66:
71:4b:2d:9d:71:a6:78:26:ee:fc:3e:a4:3f:dd:81:b4:bc:be:
89:85:db:de:79:ab:2b:d3:20:de:e9:d5:29:2b:f7:3e:b4:87:
d1:f3:a2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org