Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/LedelZzzEFGdSCgUf7S8N1Jj2MQ.roa
File: LedelZzzEFGdSCgUf7S8N1Jj2MQ.roa (raw, json)
Hash identifier: cVb8q6R3dIrwgLFE7w0afxqVo+iqWngXBgG+epRe+io=
Subject key identifier: 2D:E7:5E:95:9C:F3:10:51:9D:48:28:14:7F:B4:BC:37:52:63:D8:C4
Certificate issuer: /CN=997c27d15b46db184bc02b303c86b47c449c1b54
Certificate serial: 01856FC275D216F8A577C6B706B2A7A6F9AA
Authority key identifier: 99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/LedelZzzEFGdSCgUf7S8N1Jj2MQ.roa
Signing time: Sun 01 Jan 2023 23:54:53 +0000
ROA not before: Sun 01 Jan 2023 23:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210693
IP address blocks: 188.93.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:75:d2:16:f8:a5:77:c6:b7:06:b2:a7:a6:f9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c27d15b46db184bc02b303c86b47c449c1b54
Validity
Not Before: Jan 1 23:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2de75e959cf310519d4828147fb4bc375263d8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1f:48:35:97:dc:7f:1f:53:c6:8c:c7:f8:8b:
bb:9b:fb:d3:ec:9a:df:6b:21:eb:3b:79:a0:10:98:
a7:f8:03:4c:3b:ca:bc:cb:f6:a8:d8:c9:e3:5d:71:
1f:6c:62:a6:f9:2b:71:4f:01:74:e9:21:50:9b:60:
fe:0d:5f:25:fe:28:a1:ee:15:d8:11:c3:77:71:8e:
c1:1b:7e:d8:f5:a9:5f:f0:79:34:48:42:a3:45:11:
f4:2d:88:2b:88:03:ed:20:c7:bc:b7:ea:97:1a:46:
66:c5:dd:58:38:40:35:e2:81:7f:f7:4b:7d:2b:1d:
b9:2f:61:f8:d3:fa:69:11:87:a3:ef:97:69:68:8a:
20:c7:48:db:13:c4:db:84:80:67:17:86:bb:9d:d6:
ef:77:df:90:d3:fa:e0:15:96:3a:2a:5e:c8:37:5b:
a2:6d:18:82:60:e4:dd:3d:3d:a6:80:3e:2b:08:0a:
ba:87:3f:59:c1:40:b8:fd:ea:f5:e5:bf:7e:d1:8d:
d5:6d:22:1d:48:43:d6:34:79:40:3d:40:fc:df:b1:
b4:5d:69:27:ce:b2:27:51:dc:bf:15:27:30:e5:71:
3f:7f:11:9e:2a:0f:f2:7a:50:e3:7d:d2:3e:b9:a2:
20:0f:fb:43:c1:2d:14:0e:84:a4:a2:42:38:d0:55:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E7:5E:95:9C:F3:10:51:9D:48:28:14:7F:B4:BC:37:52:63:D8:C4
X509v3 Authority Key Identifier:
keyid:99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/LedelZzzEFGdSCgUf7S8N1Jj2MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.112.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c4:47:46:7d:67:04:ec:8f:e3:98:4e:8b:c9:b6:a9:c2:5a:
20:6b:ad:ac:9e:e8:f5:98:77:ee:3f:4a:2d:93:63:aa:37:10:
59:ec:cf:e1:7d:e8:2a:a1:83:1e:77:be:6b:c9:f9:d1:99:1d:
97:1f:aa:b4:ff:6e:2b:f3:3a:6b:f1:19:98:14:e5:06:39:5f:
1d:78:07:fe:d3:e8:00:f1:ef:16:21:72:68:34:0f:df:be:58:
e5:dc:8a:e6:b6:e4:df:3f:2a:35:2a:7c:f8:3f:d8:2e:09:b2:
7f:60:2c:74:de:28:6a:2d:d4:0b:8b:90:00:25:c8:9a:6e:27:
23:2d:6d:3e:90:9a:34:98:bf:54:4e:b4:9f:d4:d9:34:10:f7:
a8:5f:5d:3e:02:b4:98:83:48:9e:bf:8d:8a:d5:2a:78:0e:9d:
ad:04:18:d1:36:24:ce:82:5f:f2:d3:ba:96:0c:45:12:9c:9f:
3d:65:54:21:67:40:a2:18:53:a9:2a:08:b9:c9:f3:30:db:5f:
e1:29:91:37:27:85:e8:f2:ad:5e:6c:53:40:43:fc:cf:fb:30:
5d:4a:b9:fa:c0:38:5a:5a:03:cb:6b:99:ed:5c:17:ff:c0:ca:
95:de:69:36:76:7b:d8:13:c5:58:db:d9:66:55:25:c3:db:26:
6e:7b:05:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:44 2024 by rpki-client on console-fra.rpki-client.org