Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/LQdRP0BF_rMsCsOYunmuZbw2BNI.roa
File: LQdRP0BF_rMsCsOYunmuZbw2BNI.roa (raw, json)
Hash identifier: rPyJhZfX93C4QanX51i0RZMNWNhK/1rP5f5WAS1C3eM=
Subject key identifier: 2D:07:51:3F:40:45:FE:B3:2C:0A:C3:98:BA:79:AE:65:BC:36:04:D2
Certificate issuer: /CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Certificate serial: 01856D2F3FC2C9CFC44DD71C34B53F0E67B0
Authority key identifier: FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/LQdRP0BF_rMsCsOYunmuZbw2BNI.roa
Signing time: Sun 01 Jan 2023 11:54:51 +0000
ROA not before: Sun 01 Jan 2023 11:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26125
IP address blocks: 193.27.47.0/24 maxlen: 25
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:3f:c2:c9:cf:c4:4d:d7:1c:34:b5:3f:0e:67:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Validity
Not Before: Jan 1 11:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d07513f4045feb32c0ac398ba79ae65bc3604d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:19:71:24:1d:20:3a:1e:06:2c:39:37:ed:47:
73:5f:6c:40:2c:f4:c9:f4:b3:3b:24:de:cf:bd:92:
85:00:dd:5f:1e:00:28:7b:b1:27:54:df:e0:d9:04:
1b:df:82:66:d8:2b:a8:19:5c:8b:bf:d8:5b:a8:66:
69:95:65:3b:8c:a9:31:8c:41:45:cf:f9:99:c9:da:
05:a1:88:54:c1:e2:ca:71:a5:e3:dc:48:a0:06:56:
aa:b7:7f:13:80:66:35:ca:62:57:85:1f:29:a8:47:
75:d7:b2:a5:b4:06:28:d3:fe:69:d2:4f:40:e5:a6:
13:5e:80:ab:62:e0:4a:1e:2f:7d:43:4d:07:72:9e:
8e:0a:2e:73:26:dd:d0:41:ee:99:c3:ce:41:d2:02:
7e:79:98:e8:52:8c:0f:48:88:73:f2:07:38:67:de:
db:ca:49:93:ed:67:4c:7e:c1:76:e8:42:b4:7e:63:
50:ee:2e:f8:7d:31:ef:53:3a:b4:fc:83:c7:2d:65:
91:ae:c8:6c:0f:a5:9d:30:36:86:96:4d:dd:b3:fe:
5b:14:c1:9b:d3:6c:ff:97:ee:8a:6b:4a:b0:4a:7a:
da:46:1d:fa:7e:ed:47:81:a2:c7:b6:7a:e5:eb:33:
72:1b:4d:e4:a5:9f:e5:4c:2b:39:48:a9:48:b8:58:
9f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:07:51:3F:40:45:FE:B3:2C:0A:C3:98:BA:79:AE:65:BC:36:04:D2
X509v3 Authority Key Identifier:
keyid:FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/LQdRP0BF_rMsCsOYunmuZbw2BNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.47.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:48:df:cd:07:59:9a:16:d4:a1:e0:9c:e6:53:dc:b1:3d:d6:
fc:ba:04:dc:35:e5:c5:66:a5:a3:76:fe:de:7b:de:96:eb:6e:
e7:34:9b:bd:40:34:d8:df:60:59:62:11:4a:41:07:4b:56:59:
34:97:ce:bc:8e:38:d4:0a:bb:a5:34:d6:9c:e5:23:f7:b4:15:
5f:0d:9d:d1:28:d8:8d:4e:5d:65:61:e9:f6:6b:bf:8b:3c:ce:
89:12:8e:c5:6d:73:de:9e:29:5a:e9:dd:3c:05:81:b8:1a:ed:
fe:51:8b:6a:4e:59:33:d7:2e:58:e2:d5:c3:9c:7b:5e:92:44:
f2:16:b3:1c:d5:64:22:8b:50:0e:35:5d:68:10:a3:e1:9d:63:
87:91:e8:92:35:24:ce:8f:78:67:12:38:83:36:9d:90:3c:fd:
59:88:61:fc:43:bd:40:dc:22:2e:53:45:e2:d6:a4:4e:03:55:
eb:0c:b6:64:9f:96:d4:23:88:e2:c6:02:db:94:a8:d0:4e:51:
56:de:f6:7b:95:94:06:f0:f0:bc:7b:a7:35:40:5e:f9:0c:22:
c1:94:e2:8f:8d:ac:f4:52:90:52:0d:62:c2:04:35:e5:9a:bb:
2b:8c:df:1c:3f:54:36:59:d9:4f:47:b8:ff:a7:fa:6d:d9:ea:
f5:64:29:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:06 2024 by rpki-client on console-ams.rpki-client.org