Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/lD4lMeO0-D3GU7ao7JM9qp5diFU.roa
File: lD4lMeO0-D3GU7ao7JM9qp5diFU.roa (raw, json)
Hash identifier: dSmb5j37krxX+EZ+/kJ/fYak+GZn2cRo4xF28RQU1lY=
Subject key identifier: 94:3E:25:31:E3:B4:F8:3D:C6:53:B6:A8:EC:93:3D:AA:9E:5D:88:55
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0189D3699262364888A7695AB8A449E7CCDC
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/lD4lMeO0-D3GU7ao7JM9qp5diFU.roa
Signing time: Tue 08 Aug 2023 04:30:58 +0000
ROA not before: Tue 08 Aug 2023 04:30:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 213.159.10.0/23 maxlen: 24
195.133.202.0/23 maxlen: 24
213.159.12.0/23 maxlen: 24
195.133.208.0/23 maxlen: 24
194.58.64.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:69:92:62:36:48:88:a7:69:5a:b8:a4:49:e7:cc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Aug 8 04:30:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=943e2531e3b4f83dc653b6a8ec933daa9e5d8855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:2f:ab:2a:c9:4e:10:ed:96:a9:12:8b:26:
a6:0a:7a:3d:5e:9a:43:40:e5:c1:8e:46:83:a5:9c:
ce:15:6e:01:da:44:4f:5b:47:24:b3:94:af:c6:e5:
08:a5:a0:90:45:b1:13:59:ee:21:ef:86:25:21:e9:
fe:ff:67:d6:60:0e:5e:35:a5:4f:52:7b:9a:42:29:
5c:c7:e1:74:50:20:14:01:fc:fa:cf:f2:d9:f3:9f:
c2:d5:06:41:6d:00:1e:c9:dc:da:f7:bc:a3:18:58:
81:c3:b6:8f:44:9a:71:7b:c3:62:d5:d5:f2:de:86:
22:8c:f1:11:6d:d4:07:e7:f4:cf:e6:1f:c0:99:bf:
d6:56:a4:61:cb:78:d6:19:96:09:1b:0b:cf:3d:9a:
07:ad:6b:80:cb:6d:33:5d:f0:1a:e1:65:2a:b7:69:
b7:89:e7:35:a9:94:34:a8:72:0e:33:29:f5:c5:4a:
ea:bd:dd:7a:24:92:cc:67:79:72:17:14:1a:e9:7a:
f9:f9:bd:35:33:47:2b:50:66:19:dd:cd:a6:53:7a:
81:d0:a9:74:3a:1b:06:da:b8:98:cc:7e:ad:d4:98:
a0:7b:74:6c:d1:36:5a:97:9b:1b:9a:27:7a:37:85:
0e:c3:f5:1d:c4:75:0e:2d:e4:0a:97:8a:ea:52:95:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3E:25:31:E3:B4:F8:3D:C6:53:B6:A8:EC:93:3D:AA:9E:5D:88:55
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/lD4lMeO0-D3GU7ao7JM9qp5diFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.64.0/23
195.133.202.0/23
195.133.208.0/23
213.159.10.0-213.159.13.255
Signature Algorithm: sha256WithRSAEncryption
4b:7c:6f:4f:70:bf:7d:f0:f2:5c:61:58:8e:5a:57:f3:a0:e7:
6e:5c:58:54:ff:25:14:21:a0:55:df:88:f7:54:f8:6f:f4:70:
2d:2c:e6:b8:20:7a:58:33:1a:c7:ef:b5:bd:17:d9:70:58:35:
0a:4f:02:5d:89:88:46:5d:57:2e:2a:b2:e8:f1:32:3f:00:3c:
16:c5:fb:4b:be:63:88:13:51:e3:8c:f2:af:d1:37:a1:6b:b3:
b1:e9:98:d1:02:ac:73:df:8e:55:13:a6:c3:69:71:53:de:60:
08:e7:3f:37:3f:ba:dd:b5:ff:d5:32:85:51:76:6f:1b:a6:99:
4c:13:60:5b:29:df:99:81:64:0f:2f:7d:f1:61:b1:15:96:d8:
2c:37:33:20:ab:d5:a0:48:28:6f:84:ea:47:bc:59:c5:b4:31:
4f:f4:94:4d:5c:21:40:fa:ae:34:f8:41:bc:ee:b8:14:a3:ba:
d5:80:6b:1a:25:df:d7:b4:6e:f6:fa:f6:e2:ec:32:b7:a8:86:
63:e0:d2:67:bf:33:9b:16:60:da:ae:09:be:2f:7d:70:f6:fb:
45:55:96:56:90:3e:c5:a8:ee:76:a1:96:cb:39:a4:32:ef:14:
be:0b:89:af:ff:72:f2:ff:1d:f8:2e:56:80:ae:62:3b:ca:54:
ce:7c:bd:fa
-----BEGIN CERTIFICATE-----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Generated at Sun Oct 1 09:03:22 2023 by rpki-client on console-ams.rpki-client.org