Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/13a213-4c98-4d95-8f1d-127d38d08b2b/1/lVP-K_V3pOhHHPGlTTmqYaRzwE4.roa
File: lVP-K_V3pOhHHPGlTTmqYaRzwE4.roa (raw, json)
Hash identifier: jtyJHqQ05l2zL7wPh2qjcHt3ECVgJD37u8a5VLpBDrM=
Subject key identifier: 95:53:FE:2B:F5:77:A4:E8:47:1C:F1:A5:4D:39:AA:61:A4:73:C0:4E
Certificate issuer: /CN=d1b4b5aa09568b6be053650d876b3a949a126452
Certificate serial: 01856D6F83EC47CFED1F30709CA6E46DB0C5
Authority key identifier: D1:B4:B5:AA:09:56:8B:6B:E0:53:65:0D:87:6B:3A:94:9A:12:64:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bS1qglWi2vgU2UNh2s6lJoSZFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/13a213-4c98-4d95-8f1d-127d38d08b2b/1/lVP-K_V3pOhHHPGlTTmqYaRzwE4.roa
Signing time: Sun 01 Jan 2023 13:05:02 +0000
ROA not before: Sun 01 Jan 2023 13:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 212.18.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:83:ec:47:cf:ed:1f:30:70:9c:a6:e4:6d:b0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b4b5aa09568b6be053650d876b3a949a126452
Validity
Not Before: Jan 1 13:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9553fe2bf577a4e8471cf1a54d39aa61a473c04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:12:58:72:cd:a9:88:19:bc:09:51:4e:70:64:
a8:4e:c1:da:0a:65:4b:cc:fa:61:96:db:02:7c:44:
37:b5:00:6a:66:93:ae:ea:8c:75:71:87:a9:a2:4a:
a7:c7:fc:9f:50:57:de:32:55:14:70:35:2a:2c:ed:
a0:24:77:58:45:7e:22:2b:73:ef:43:78:06:6a:5f:
25:3b:51:1b:10:41:04:95:19:a2:cc:a7:00:dd:29:
93:e0:69:2b:2a:46:10:88:7d:29:a6:af:c8:e1:a3:
40:eb:94:a3:12:42:85:82:db:e8:9f:5e:84:c8:c2:
5b:6a:a3:3a:5b:89:57:ff:0f:6c:dc:c1:67:81:8a:
1e:86:00:75:89:bb:c9:5d:dc:48:66:fc:42:74:21:
bf:b5:b2:6e:77:0c:d4:4b:bd:6c:ed:ec:9b:a9:ba:
20:33:b1:eb:0f:78:18:ff:78:5c:b5:c9:e9:49:90:
1f:3e:c0:15:16:c6:5f:f1:58:8a:92:e1:e8:de:ad:
98:aa:84:4a:62:09:54:73:35:b2:92:94:8e:c1:2f:
04:e9:05:b5:d8:a5:24:2f:7f:67:db:f7:3e:1e:e4:
e9:34:72:4a:b9:0f:66:33:b8:3c:40:ee:0e:00:7e:
b4:71:f5:63:08:11:35:2c:b0:40:80:f5:bd:4d:9e:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:53:FE:2B:F5:77:A4:E8:47:1C:F1:A5:4D:39:AA:61:A4:73:C0:4E
X509v3 Authority Key Identifier:
keyid:D1:B4:B5:AA:09:56:8B:6B:E0:53:65:0D:87:6B:3A:94:9A:12:64:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bS1qglWi2vgU2UNh2s6lJoSZFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/13a213-4c98-4d95-8f1d-127d38d08b2b/1/lVP-K_V3pOhHHPGlTTmqYaRzwE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/13a213-4c98-4d95-8f1d-127d38d08b2b/1/0bS1qglWi2vgU2UNh2s6lJoSZFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:3a:e4:10:2f:5d:7a:e4:78:62:00:76:ee:3f:2f:c4:92:68:
98:c7:3d:61:99:39:98:b9:c2:0d:b9:df:a3:d0:d4:bc:52:5f:
a9:27:a4:69:2e:ad:0d:05:aa:c6:d4:66:b9:44:b0:74:75:cb:
17:d4:f6:28:b3:ea:46:d0:94:71:1c:ad:fe:09:4b:a3:83:20:
07:66:31:a0:18:72:d4:51:f0:cc:9e:f0:bd:e4:46:0f:78:97:
d3:31:9a:9d:d9:2f:27:99:21:96:71:f9:5b:f2:a0:b4:ba:3d:
7b:9d:3a:87:ae:7e:ad:9f:b9:cd:2a:60:c4:bd:25:ae:86:62:
88:c1:e1:80:7b:37:28:b8:df:72:06:cb:8f:d9:85:6d:8d:11:
83:46:f5:d5:5b:5e:51:c3:4f:f5:2c:76:51:c8:d5:1a:f8:f7:
60:a5:1d:d2:51:73:d0:97:ba:5a:7a:af:00:64:ce:4c:dc:be:
57:32:fe:71:43:35:fe:32:d2:49:c9:29:b8:1c:34:22:30:5b:
98:ba:71:bc:fd:e9:cb:76:d6:58:91:a9:db:f9:37:18:0f:90:
04:89:8f:d9:bf:30:0b:7c:4c:d3:f9:06:05:56:b9:00:0a:0f:
8b:e9:7a:bd:7e:b1:91:3c:04:56:ac:3c:c7:4d:e5:25:a3:c1:
5a:42:8c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:54 2023 by rpki-client on console-fra.rpki-client.org