Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/lxGxKoNYx6LVerPeWY7TMe6hh6k.roa
File: lxGxKoNYx6LVerPeWY7TMe6hh6k.roa (raw, json)
Hash identifier: 3juX4i7rOU4G826NK5viLO0qouMhJAJJe37mbsFgf8Q=
Subject key identifier: 97:11:B1:2A:83:58:C7:A2:D5:7A:B3:DE:59:8E:D3:31:EE:A1:87:A9
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 01856C413EAD74776886F72134DF68BD8EA5
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/lxGxKoNYx6LVerPeWY7TMe6hh6k.roa
Signing time: Sun 01 Jan 2023 07:34:53 +0000
ROA not before: Sun 01 Jan 2023 07:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 193.222.192.0/19 maxlen: 19
193.222.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:3e:ad:74:77:68:86:f7:21:34:df:68:bd:8e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Jan 1 07:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9711b12a8358c7a2d57ab3de598ed331eea187a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:48:f6:c4:75:92:b0:21:e6:ea:f8:b5:29:
bc:4e:4b:95:fa:0b:72:b4:7b:b8:05:24:dd:68:00:
e7:80:a3:54:8b:2a:a4:4d:be:7b:fd:2d:88:93:53:
3a:49:87:d6:ac:8e:4f:5e:99:11:df:21:a7:ee:55:
94:f1:f7:ea:26:77:89:ca:5b:87:03:90:bb:a6:52:
da:ef:ef:64:bc:0e:b4:8d:92:b3:e9:de:ce:a5:13:
76:0b:b2:49:b7:8c:24:7f:ed:ae:de:da:e5:53:0a:
57:c9:a7:ee:49:f7:94:74:cf:06:0e:00:c0:55:50:
ba:43:63:82:16:0c:5f:ec:ef:c1:58:50:fb:b4:a7:
1f:4c:56:48:7e:2b:6a:d6:03:f8:ba:10:4f:a2:88:
23:a6:b2:eb:6c:08:19:58:43:6b:d9:63:f0:06:83:
4a:e2:92:bb:71:84:74:a3:d7:ea:5e:6f:b2:53:3f:
29:97:bb:fa:15:8e:38:cc:59:6b:8a:b9:bb:d9:e4:
3e:e6:44:38:63:96:b1:3f:49:e8:1a:a6:78:9d:d4:
59:70:7e:c9:36:65:32:11:14:4f:d7:89:8b:87:97:
0c:28:b9:27:5c:f7:fd:be:81:7e:46:31:f4:99:14:
f7:ae:bf:16:5e:b7:30:ef:03:a6:a2:df:f1:6d:e4:
1f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:11:B1:2A:83:58:C7:A2:D5:7A:B3:DE:59:8E:D3:31:EE:A1:87:A9
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/lxGxKoNYx6LVerPeWY7TMe6hh6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.192.0/19
Signature Algorithm: sha256WithRSAEncryption
05:a4:7c:57:21:71:29:7d:c8:b4:f9:72:d2:68:48:da:ee:35:
b2:dd:3d:13:a0:e8:dc:9c:76:91:4f:b3:18:b8:bc:79:cd:46:
1a:32:24:ac:35:a0:a8:ea:22:a7:30:e0:dd:87:d0:4e:dd:72:
11:c4:fb:f7:33:13:ff:4e:1d:de:d5:2d:45:cd:dc:c9:20:e7:
06:fd:62:44:f1:8b:75:f6:c2:46:e9:a3:75:5a:41:e3:91:7a:
98:a0:a2:06:c9:c2:c3:e5:19:1b:76:96:ef:e1:d2:51:ca:73:
7a:5a:b6:fa:d1:c1:89:82:e3:99:a4:a9:73:7d:1a:5d:b8:cb:
34:04:5e:30:e7:51:34:49:4c:9e:d3:4b:69:6b:ae:f4:28:d4:
9d:8c:27:de:87:36:b5:73:ea:7f:95:83:90:28:db:89:7a:99:
08:c7:d7:e1:e7:51:da:48:0f:48:31:a6:83:91:6e:63:de:16:
f5:c7:f5:94:6d:79:05:0e:27:a8:23:d0:a4:0a:1a:84:97:37:
b7:da:f6:ea:2f:1e:b0:54:6e:c4:38:d3:1e:fe:52:68:a3:46:
cc:48:9c:f3:b5:b4:53:40:ac:75:8e:c4:74:91:4b:5b:90:78:
d9:dc:25:73:fa:f3:3e:e4:0d:f9:43:0b:d2:fe:d5:8e:d9:ee:
92:91:49:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:30:58 2024 by rpki-client on console.sobornost.net