Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/lVe49ELlO63rg-9MzuYRYCK3v4g.roa
File: lVe49ELlO63rg-9MzuYRYCK3v4g.roa (raw, json)
Hash identifier: KOKESml2ZSinZ5cL6nxpX5ug2q1hHz0xuTLzf+5xqk8=
Subject key identifier: 95:57:B8:F4:42:E5:3B:AD:EB:83:EF:4C:CE:E6:11:60:22:B7:BF:88
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 0185712790CFE45033FCD6D3A267AD7012EC
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/lVe49ELlO63rg-9MzuYRYCK3v4g.roa
Signing time: Mon 02 Jan 2023 06:24:56 +0000
ROA not before: Mon 02 Jan 2023 06:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208511
IP address blocks: 213.108.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:90:cf:e4:50:33:fc:d6:d3:a2:67:ad:70:12:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 06:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9557b8f442e53badeb83ef4ccee6116022b7bf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:00:5c:2c:fb:4c:f8:b1:0d:76:d8:fe:20:
02:21:94:7f:c5:c1:29:43:e7:53:12:df:87:9e:ab:
01:c0:58:12:3e:b6:70:7c:c3:a0:82:31:29:3c:f7:
8a:ee:69:e0:7f:e8:10:84:d9:e1:8a:25:7f:ea:a9:
de:52:11:21:67:03:c1:a4:ee:7b:c0:4b:a1:e1:2a:
e9:94:e7:44:88:e4:4b:80:f9:8f:d6:2c:2d:c4:a2:
e8:cf:9f:bb:1b:08:0b:f5:9a:c1:3f:73:65:32:c5:
b7:a6:a5:73:41:6c:e6:f1:e2:5a:64:ea:03:03:e1:
18:60:8b:67:1e:17:52:d2:4b:9f:96:4b:a2:ab:ff:
5b:d0:45:70:6e:45:4c:9b:d3:e0:98:56:a6:e1:e1:
d3:bf:66:65:83:54:2d:f7:a8:d9:73:89:e9:10:84:
42:6a:85:9c:e8:c7:ca:73:75:00:8e:f1:a1:a8:c1:
00:8b:67:3b:71:b6:72:54:b1:81:8e:f7:79:dd:60:
46:c0:dc:eb:c5:dc:8f:bd:21:12:fc:8a:8e:97:4c:
67:79:3d:61:49:4b:04:7d:d0:1f:02:f5:86:94:02:
ee:97:4b:58:bb:bf:d1:84:02:1b:7c:7b:13:84:d9:
52:4f:de:b5:a7:1b:e4:d1:d4:73:b1:aa:db:5c:d0:
49:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:57:B8:F4:42:E5:3B:AD:EB:83:EF:4C:CE:E6:11:60:22:B7:BF:88
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/lVe49ELlO63rg-9MzuYRYCK3v4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.32.0/24
Signature Algorithm: sha256WithRSAEncryption
37:36:50:24:56:c0:c7:49:c7:3c:77:a4:02:65:4c:70:71:f0:
cf:26:4e:ae:25:8a:50:f8:7e:24:3b:b6:8f:27:5d:1c:7f:d1:
b9:88:6f:9a:03:f4:fd:a5:35:1b:a6:0a:76:64:dd:13:5e:c7:
6f:33:6a:29:66:cd:a7:39:d0:bd:e6:a3:0b:c7:1f:29:97:42:
10:70:da:2f:80:83:d3:cf:d7:1a:d9:3b:b4:41:88:1b:71:ac:
70:c9:7d:bf:e9:73:ad:d6:f4:d6:4b:69:02:04:6a:36:38:34:
df:5d:b6:09:e7:38:b2:09:21:b1:e8:81:e0:b7:8e:d4:f3:f9:
82:71:00:cd:10:78:fc:ef:5b:78:b7:82:3e:d3:1c:b7:1d:c2:
d8:af:19:c5:b8:a0:a0:af:4b:5d:ea:aa:4f:fd:ee:ee:61:35:
a1:57:15:c9:33:f3:b6:f1:8c:d4:2e:e3:1b:ee:78:ef:69:79:
b6:eb:dd:17:4e:5d:ae:5c:a9:f2:2d:f0:3e:02:58:50:98:f0:
7b:28:d5:b9:a7:1f:8e:cd:26:bf:df:3e:f5:28:38:fd:8f:d9:
df:7e:ec:b5:22:46:de:f8:39:d7:e4:39:48:7b:63:c8:05:40:
73:47:7a:85:60:95:b3:fc:a6:2f:b3:82:18:4e:56:48:15:41:
fe:1f:f5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:04 2024 by rpki-client on console.sobornost.net