Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/LiPQXo1pu38KU1AG9KLxOJZh8iM.roa
File: LiPQXo1pu38KU1AG9KLxOJZh8iM.roa (raw, json)
Hash identifier: hW64aRa4WI/qvo44IG9oVbJoyLC0o7GDYdKHIB/P4/I=
Subject key identifier: 2E:23:D0:5E:8D:69:BB:7F:0A:53:50:06:F4:A2:F1:38:96:61:F2:23
Certificate issuer: /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial: 018570397AF0F3702FF86FDC5B11D5877CB7
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/LiPQXo1pu38KU1AG9KLxOJZh8iM.roa
Signing time: Mon 02 Jan 2023 02:04:53 +0000
ROA not before: Mon 02 Jan 2023 02:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40339
IP address blocks: 81.16.184.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:7a:f0:f3:70:2f:f8:6f:dc:5b:11:d5:87:7c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Validity
Not Before: Jan 2 02:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e23d05e8d69bb7f0a535006f4a2f1389661f223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:d5:32:9e:e5:ee:fb:90:5e:58:51:14:9a:
dd:54:6f:27:b5:1f:ff:44:b2:02:a4:03:27:93:35:
85:99:39:3a:74:81:67:fd:3f:63:89:b6:33:2c:f4:
97:22:45:f8:50:c8:24:32:77:3a:18:19:44:d6:82:
37:71:8d:06:05:53:c5:1f:16:8c:ec:85:d8:47:b4:
5f:45:2a:28:42:20:b2:8d:83:6d:d2:0e:7d:16:72:
3e:a3:aa:8e:8e:a0:f9:4f:2f:ec:c3:38:12:c8:ff:
51:90:ee:1d:a1:2f:6f:39:87:7f:c8:90:cb:95:a6:
24:71:f4:69:63:32:7a:20:93:01:b2:6f:f0:e5:f3:
75:fa:00:4e:53:a6:33:a8:e1:e0:b0:5a:21:33:7b:
1a:7c:17:93:7f:0d:3c:2d:c5:50:77:fd:a3:58:5f:
2f:ec:e0:f9:28:d3:e8:11:e5:56:2d:c9:ce:4a:2d:
7a:4e:14:1e:39:6d:a5:d0:c2:18:9d:e7:18:13:b7:
e3:85:7c:6f:c5:6c:77:f9:d7:5a:70:8f:e5:0d:66:
a2:10:d3:bc:b8:9e:54:92:24:a9:b3:1a:17:ea:1f:
53:0a:b8:84:1c:c6:19:73:c1:49:e5:27:43:e0:29:
51:2b:ce:34:17:04:91:05:ab:2b:75:81:9d:a7:9f:
b8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:23:D0:5E:8D:69:BB:7F:0A:53:50:06:F4:A2:F1:38:96:61:F2:23
X509v3 Authority Key Identifier:
keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/LiPQXo1pu38KU1AG9KLxOJZh8iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.184.0/21
Signature Algorithm: sha256WithRSAEncryption
74:b6:08:19:85:55:08:87:f4:50:92:46:96:57:b8:67:1d:53:
62:05:14:b6:c7:a8:1c:7c:8d:d4:ec:7b:0c:82:89:37:bd:ab:
a0:e6:3e:a0:c9:9e:67:db:a6:ce:7d:61:49:2c:fd:bc:0b:54:
f2:d3:21:69:6e:77:f0:3a:14:45:52:84:44:0e:70:18:cf:e0:
bf:21:3b:b0:7f:68:c9:13:44:8a:ac:9b:c0:79:d8:6e:11:19:
8c:7d:66:f5:7f:c7:9f:20:c1:c8:2e:10:45:cd:00:a6:84:4e:
9f:8c:4f:48:ea:04:72:49:94:7f:6a:73:f7:c5:01:34:be:3e:
51:73:77:d7:79:4c:d4:74:5c:e9:c0:f9:31:90:1f:51:17:6a:
85:04:bc:60:a2:a9:8b:b7:f8:5e:d6:3f:ec:2e:8d:d3:0f:cd:
b6:e0:23:9d:d5:c7:b5:8c:d3:00:54:f8:aa:ec:37:c4:96:23:
98:4a:82:bb:de:df:b0:a9:a3:04:d8:80:f6:2a:5d:f1:a8:8a:
d3:ba:0c:7b:14:fc:33:a0:f8:ae:61:3f:52:88:43:77:cc:56:
80:34:53:4e:a7:17:b6:7b:16:a4:0a:af:1c:da:98:86:1c:21:
68:fa:c4:f2:7e:fa:1f:79:6e:19:59:22:7e:c4:5f:e1:d1:76:
a2:5c:14:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:44 2024 by rpki-client on console-ams.rpki-client.org