Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/81ac49-7ca4-40ac-8895-5a3fa92fec1c/1/lFRq4Ed5gObmgIg6AtnBzwP6sig.roa
File: lFRq4Ed5gObmgIg6AtnBzwP6sig.roa (raw, json)
Hash identifier: gdopYJEqH3wO2mevBW3vDz0ENEUQw7kJTD8ek2SeHqo=
Subject key identifier: 94:54:6A:E0:47:79:80:E6:E6:80:88:3A:02:D9:C1:CF:03:FA:B2:28
Certificate issuer: /CN=7aeb210c4fd74db944e7dc79e3457f45b9a055f0
Certificate serial: 01856D41A617E7BA12B916636A3165823878
Authority key identifier: 7A:EB:21:0C:4F:D7:4D:B9:44:E7:DC:79:E3:45:7F:45:B9:A0:55:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eushDE_XTblE59x540V_RbmgVfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/81ac49-7ca4-40ac-8895-5a3fa92fec1c/1/lFRq4Ed5gObmgIg6AtnBzwP6sig.roa
Signing time: Sun 01 Jan 2023 12:14:56 +0000
ROA not before: Sun 01 Jan 2023 12:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51960
IP address blocks: 193.104.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:a6:17:e7:ba:12:b9:16:63:6a:31:65:82:38:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aeb210c4fd74db944e7dc79e3457f45b9a055f0
Validity
Not Before: Jan 1 12:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94546ae0477980e6e680883a02d9c1cf03fab228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:7e:b3:b2:b2:a3:f4:28:dd:0d:7e:a4:ef:
90:b2:de:84:f4:71:64:cb:34:9c:7b:79:50:11:1d:
68:1f:e5:dd:2c:96:48:52:72:a4:bb:71:ca:a2:46:
63:be:b8:9d:e4:6a:bc:9a:a2:68:8c:a2:10:0a:9b:
43:a5:a3:ba:1c:cd:15:43:a1:0c:30:e9:f2:77:4c:
13:d2:95:e7:4d:4b:75:ea:83:d9:67:73:46:59:79:
90:b6:3d:bf:38:07:6a:2b:59:c2:fe:78:f5:12:8b:
97:f4:10:9b:ce:22:87:f6:14:bf:66:7a:5b:4f:6a:
bb:3c:68:6c:ea:5d:d2:e5:14:6b:da:e0:39:88:e6:
10:79:c8:46:bb:f9:19:8f:82:ff:17:20:5b:3a:af:
54:fd:3e:14:9a:4b:c0:ed:4f:f0:dd:cb:d8:22:6a:
a2:2e:1a:fc:fa:35:30:9a:87:57:13:2a:af:71:74:
2a:19:11:01:38:44:b7:ea:c5:97:60:56:5b:45:a4:
be:88:a5:d9:f9:18:a6:13:6e:a0:c5:f5:a7:32:c0:
9f:0d:06:16:aa:ea:21:ac:b6:93:f4:38:af:09:fc:
bb:91:d4:6e:22:1c:5e:d0:b9:64:d5:24:91:7a:7d:
e3:90:43:ec:9f:d3:97:9b:ae:f3:0f:a5:12:17:02:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:54:6A:E0:47:79:80:E6:E6:80:88:3A:02:D9:C1:CF:03:FA:B2:28
X509v3 Authority Key Identifier:
keyid:7A:EB:21:0C:4F:D7:4D:B9:44:E7:DC:79:E3:45:7F:45:B9:A0:55:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eushDE_XTblE59x540V_RbmgVfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/81ac49-7ca4-40ac-8895-5a3fa92fec1c/1/lFRq4Ed5gObmgIg6AtnBzwP6sig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/81ac49-7ca4-40ac-8895-5a3fa92fec1c/1/eushDE_XTblE59x540V_RbmgVfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.5.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3d:4d:85:36:8e:42:d6:6f:c6:ef:72:a1:47:cc:40:35:6b:
a4:19:df:c4:8b:6e:b2:da:c8:0c:74:cc:0f:19:21:a7:aa:3a:
ca:2e:2f:03:41:20:a0:0e:54:27:36:81:b8:f8:77:4d:31:63:
3e:eb:43:fe:d5:f3:3d:ef:9f:66:7e:62:67:27:f0:a7:15:29:
4a:84:42:2f:f0:47:07:84:af:3a:f5:fd:9f:40:0c:a4:c4:b0:
85:f4:2e:2e:f4:1e:2b:f3:1e:b1:6d:56:6b:54:83:b7:40:4e:
26:21:15:90:26:89:02:69:60:27:a9:5b:a9:70:be:7e:a3:7c:
d0:ba:75:55:4a:0c:00:40:ca:3d:26:f6:fb:df:f5:66:ac:e5:
db:e2:a4:3f:1c:b2:76:16:9a:60:eb:2b:0b:30:f7:d8:01:df:
0e:1e:9b:20:83:e8:d0:14:5c:1f:d5:bb:9a:4f:83:69:6a:92:
90:1a:2b:5d:4f:00:3f:ba:80:39:d9:cd:7c:f1:ea:20:d0:7f:
54:95:66:58:ac:ba:3d:c2:6d:1a:91:0e:8f:e3:bf:0a:09:a2:
59:8a:c0:a4:97:c2:50:03:26:09:67:c9:f8:cf:1b:6c:64:fd:
fb:21:06:76:1b:62:d1:7d:f7:48:de:8a:ce:31:1c:7a:9c:62:
f8:ef:34:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:47 2024 by rpki-client on console-fra.rpki-client.org