Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/lQGJJR73EOq5akF5oDmZ-8qOJX8.roa
File: lQGJJR73EOq5akF5oDmZ-8qOJX8.roa (raw, json)
Hash identifier: KnIz17GRy5YSbb+ZVm/5u7XAZ8hr53+UKDiT93lrc/I=
Subject key identifier: 95:01:89:25:1E:F7:10:EA:B9:6A:41:79:A0:39:99:FB:CA:8E:25:7F
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0188D296E3E99FD487672C06BDBC4482B682
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/lQGJJR73EOq5akF5oDmZ-8qOJX8.roa
Signing time: Mon 19 Jun 2023 07:38:04 +0000
ROA not before: Mon 19 Jun 2023 07:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 93.152.208.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:96:e3:e9:9f:d4:87:67:2c:06:bd:bc:44:82:b6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 19 07:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=950189251ef710eab96a4179a03999fbca8e257f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:9a:20:33:dd:9a:70:53:35:87:fe:bd:c8:
42:a5:c4:79:96:9a:bb:3a:54:f0:2a:b3:18:43:69:
60:37:17:e0:ed:e0:b3:fb:7f:bb:9c:8d:1a:5b:01:
5a:cb:e7:0e:6e:f2:1e:fe:43:89:cf:e2:e2:91:a5:
0b:73:5b:b3:aa:10:36:88:c3:d8:38:76:76:ca:ef:
78:26:28:a6:3f:be:4a:13:b7:2e:14:8b:93:b6:93:
bf:fe:03:fe:bb:ee:32:aa:03:05:96:e6:a6:46:1f:
1d:d2:6f:42:94:ef:09:05:a7:ed:7b:3a:a1:d8:4b:
1a:fb:83:82:4e:36:38:06:02:53:c2:49:0e:ee:f6:
37:b4:c6:f8:f5:61:d6:e7:ba:96:35:1f:f5:5c:10:
93:97:e5:e0:d2:53:81:68:d5:80:86:24:22:6b:a9:
e0:3a:9c:46:e9:b5:e4:0a:bb:dc:03:f3:4f:1c:6b:
b3:a5:f3:45:43:d2:1d:57:93:27:8e:ff:70:4b:f8:
ea:64:34:19:0f:9a:6c:9b:4b:72:b4:29:66:b8:f4:
8a:0b:39:c7:97:13:05:ec:5f:c1:b8:f2:61:b9:d8:
e0:70:e8:34:37:20:e0:0e:56:5e:49:ec:a2:b3:59:
f9:cb:ff:b8:7d:e4:3a:c1:12:5a:32:7b:58:ee:25:
3b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:01:89:25:1E:F7:10:EA:B9:6A:41:79:A0:39:99:FB:CA:8E:25:7F
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/lQGJJR73EOq5akF5oDmZ-8qOJX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.235.0/24
93.152.208.0/24
93.152.211.0/24
93.152.214.0/24
93.152.216.0/24
93.152.230.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a9:be:a2:03:db:c3:0e:fd:7f:05:21:3b:87:ef:03:8b:a1:
38:50:78:2b:e1:75:a3:c9:58:ae:2e:8b:80:24:2c:cf:12:03:
64:54:c8:03:65:51:21:63:92:fb:05:86:64:81:63:5f:16:0a:
5c:2b:93:0d:21:27:51:c9:9a:7c:46:30:26:cb:e6:d3:34:d8:
a7:f6:ab:c0:2b:1f:17:3c:bd:52:ec:17:bd:41:7c:9b:cb:58:
c0:9b:71:fd:2d:cb:d8:94:79:9b:0a:18:4a:f6:83:61:e4:4d:
ce:1c:63:e2:2c:80:96:1b:01:be:3c:9c:9d:a7:ee:a7:0f:ff:
d9:f5:1f:39:9b:5e:27:90:2b:aa:2c:62:22:db:58:1a:89:72:
ea:da:4c:78:89:53:47:1f:8c:46:f8:58:61:84:56:05:90:89:
f0:46:16:88:c4:71:49:b2:c4:c3:84:7c:a0:fa:f3:3b:09:4d:
91:f1:38:ed:e2:85:3a:1c:a8:ad:87:b7:07:60:35:3f:3f:2d:
04:f4:60:b6:7a:17:87:7a:da:15:52:bf:54:66:ca:d5:5c:5d:
cb:15:32:aa:3d:e8:21:52:c8:3f:a5:ea:f5:cc:fa:a5:ff:3f:
35:e0:9f:58:70:06:f2:9f:07:7f:af:4a:2a:75:d2:45:8f:34:
a8:b3:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org