Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/lqi_WLk9Un26O6hINRgHV_eHFZk.roa
File: lqi_WLk9Un26O6hINRgHV_eHFZk.roa (raw, json)
Hash identifier: HB4x450Iuk3FZTXsMVEbTamFrfvxPPvTf2PuKPSnFIc=
Subject key identifier: 96:A8:BF:58:B9:3D:52:7D:BA:3B:A8:48:35:18:07:57:F7:87:15:99
Certificate issuer: /CN=535a0905ad5684f414182c99e1ed998163093001
Certificate serial: 01856BB7F43A0EBCA0C1677C768C2D16CEB2
Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/lqi_WLk9Un26O6hINRgHV_eHFZk.roa
Signing time: Sun 01 Jan 2023 05:04:55 +0000
ROA not before: Sun 01 Jan 2023 05:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206976
IP address blocks: 185.222.16.0/22 maxlen: 24
2a0c:f000:1000::/48 maxlen: 48
2a0c:f000::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b7:f4:3a:0e:bc:a0:c1:67:7c:76:8c:2d:16:ce:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535a0905ad5684f414182c99e1ed998163093001
Validity
Not Before: Jan 1 05:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96a8bf58b93d527dba3ba84835180757f7871599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:78:9f:43:c1:43:45:6d:f9:59:b0:9f:db:
9a:a3:9b:24:f0:08:5d:13:2a:fa:00:46:ed:60:12:
df:ec:9f:41:0a:73:0a:c1:76:a0:a7:93:9c:32:36:
d1:79:d0:5e:fb:35:1c:74:5c:d7:90:fd:26:41:8a:
f0:ab:db:30:de:b7:85:72:40:21:10:b7:10:18:40:
54:19:db:3c:60:3b:b6:3e:86:1a:f5:9f:53:e1:7b:
54:72:e2:94:1e:cb:dd:f9:26:b6:96:8b:ef:5f:81:
87:95:5e:08:27:e2:f7:ba:c5:84:46:4f:eb:6f:4a:
e3:e8:47:38:67:7e:d2:f8:ea:16:1f:71:99:5d:15:
73:e2:0d:05:44:d1:12:12:79:4f:47:ef:46:95:94:
22:83:f2:21:88:47:3d:f2:74:61:5b:c1:2b:eb:6a:
32:86:08:74:2b:15:f7:4e:93:b0:4e:63:52:11:b5:
e2:ba:bc:df:5f:f6:de:bf:c0:60:d3:e8:1f:68:c6:
b2:1b:4a:8f:2e:56:9d:7f:e5:d0:f6:93:c9:33:b4:
e4:19:0d:87:a4:a4:e1:0a:74:d0:b3:a8:a5:bd:88:
99:4b:27:b2:cf:d7:33:11:8f:ed:04:5d:7b:a0:7d:
5c:f1:7a:8d:c3:cc:04:81:91:1a:5a:ce:79:1b:a8:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A8:BF:58:B9:3D:52:7D:BA:3B:A8:48:35:18:07:57:F7:87:15:99
X509v3 Authority Key Identifier:
keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/lqi_WLk9Un26O6hINRgHV_eHFZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.16.0/22
IPv6:
2a0c:f000::/48
2a0c:f000:1000::/48
Signature Algorithm: sha256WithRSAEncryption
65:b1:ef:70:38:5a:b0:c0:94:7f:10:41:a6:88:93:74:ac:f7:
a1:01:66:d1:93:83:94:b4:39:b9:79:46:ee:21:c4:4f:28:66:
03:28:50:76:6f:d9:92:d1:67:ea:76:1d:32:64:69:ba:ab:cc:
0c:23:9e:8d:d5:dd:2f:a6:14:e0:3f:60:60:d3:51:88:74:78:
9e:cd:86:0a:13:f3:40:28:e1:e5:e9:33:0a:a1:6f:e6:f5:61:
01:e4:a4:f0:8f:b5:b2:3f:bb:84:8f:82:53:39:d4:c8:00:cc:
87:8b:2b:d5:4b:f8:08:21:00:40:20:c2:e6:25:96:77:4e:82:
6e:dd:35:65:37:36:c1:0d:0c:8e:55:83:4a:3a:5a:7d:79:92:
9d:2e:04:15:36:60:03:7c:48:ae:4e:21:27:16:a6:0e:05:23:
6f:60:36:46:b9:1d:78:e0:b7:0d:c1:d6:aa:0d:a9:38:b2:0e:
2f:b3:a3:06:2f:1b:fa:b4:19:b6:28:19:fd:6d:a5:a0:65:f1:
e2:08:13:df:dd:f4:7f:6b:43:54:5f:6f:89:c9:df:de:7d:a7:
6a:5d:0b:80:25:08:89:e3:08:91:d8:c7:6b:1c:65:2f:1f:a9:
84:45:91:1b:a7:39:4a:6b:6b:cb:b5:14:0e:3e:a5:d5:44:0f:
c4:96:86:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:14:59 2024 by rpki-client on console.sobornost.net