Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/Lz-e2LZUvbEfxvHrbXTDkQXfoOQ.roa
File: Lz-e2LZUvbEfxvHrbXTDkQXfoOQ.roa (raw, json)
Hash identifier: sfeDdFPCleBg+yyfwmrD29Bm5deYeU4TPx/g7LRQ7kw=
Subject key identifier: 2F:3F:9E:D8:B6:54:BD:B1:1F:C6:F1:EB:6D:74:C3:91:05:DF:A0:E4
Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial: 0185704BDA33306FCC966EA6FF3F0783886E
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/Lz-e2LZUvbEfxvHrbXTDkQXfoOQ.roa
Signing time: Mon 02 Jan 2023 02:24:57 +0000
ROA not before: Mon 02 Jan 2023 02:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50182
IP address blocks: 194.34.98.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:da:33:30:6f:cc:96:6e:a6:ff:3f:07:83:88:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Validity
Not Before: Jan 2 02:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f3f9ed8b654bdb11fc6f1eb6d74c39105dfa0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:61:01:f1:10:b4:0c:86:3b:45:c9:5b:d5:83:
d8:68:9b:b9:e6:72:31:8f:60:05:18:78:bd:42:ef:
5f:1b:b7:d9:bb:b8:5f:e2:ac:e9:34:c9:23:64:b8:
79:ec:ac:30:ca:09:bc:ea:2c:86:fa:33:31:6c:d7:
7b:94:30:03:b4:b7:6c:ca:a3:d6:db:73:b6:5f:ce:
97:69:36:a5:00:11:39:d6:b9:59:27:2c:c7:a4:b0:
b8:bb:c6:ca:d8:c6:bb:b3:4d:0f:d6:8e:91:88:4e:
37:b2:7b:74:3c:06:0b:4f:b3:d7:e3:e7:44:3d:d5:
78:49:cb:7f:1b:05:3a:fa:b3:cf:d7:7e:b0:03:b3:
b3:73:cb:97:45:6b:85:61:64:93:ed:0c:cd:a5:e8:
48:e6:94:88:41:07:89:27:d3:5f:0f:a2:54:36:c9:
76:55:f5:8f:22:9b:12:47:d5:a6:b1:fe:b1:d7:26:
34:11:a8:94:c4:56:42:3f:a6:93:42:ed:42:81:46:
89:24:c6:e6:1c:9a:5f:c2:38:3c:d8:19:5b:05:de:
2c:4d:4b:9a:13:fc:8d:7b:08:5d:37:07:3b:40:b0:
39:2b:9e:79:c2:42:ab:5a:db:3c:18:1b:14:6a:db:
e3:1b:e3:40:24:8f:6a:61:08:60:fb:f2:dc:8e:76:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3F:9E:D8:B6:54:BD:B1:1F:C6:F1:EB:6D:74:C3:91:05:DF:A0:E4
X509v3 Authority Key Identifier:
keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/Lz-e2LZUvbEfxvHrbXTDkQXfoOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.98.0/23
Signature Algorithm: sha256WithRSAEncryption
01:ef:e1:a1:c6:66:ad:5d:1e:40:bb:02:b5:c0:53:c8:5d:39:
41:e7:d6:98:8a:47:81:3a:e2:e6:b4:0f:74:57:e0:5d:d0:29:
66:7b:08:9c:67:99:85:48:33:93:9d:53:1d:38:c4:4b:dc:c1:
9b:a4:49:1e:93:69:03:6a:11:6d:78:f3:24:59:13:98:0c:5f:
e8:8e:ea:7e:2b:4a:1c:33:4a:b8:9d:6f:9a:3b:4d:c1:15:19:
60:e3:85:26:c3:7d:d7:d4:3f:bd:54:27:58:37:33:4d:4a:fc:
0c:1f:cf:88:86:38:02:66:95:3b:c0:26:e0:eb:6f:5f:6f:dc:
e9:f2:be:54:10:df:99:89:30:de:a5:2e:52:27:86:32:f6:70:
e0:e0:a2:c6:a3:85:5c:bc:32:c9:07:dc:63:cb:c1:6b:49:e1:
29:b4:ec:47:63:cc:f4:3e:a9:d4:89:65:24:60:cc:e9:92:42:
02:81:f2:ee:f5:09:ef:8f:83:25:6a:79:db:6d:eb:29:50:61:
a2:db:e7:fb:20:48:8d:82:4f:7c:71:5a:d0:d2:cb:15:71:10:
7e:47:41:67:ce:dc:4e:98:e2:eb:f4:50:b3:4c:8d:5a:55:96:
e4:9b:b1:16:48:f3:93:56:e8:5d:80:44:9e:12:cf:78:3a:c3:
f2:27:eb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:39 2024 by rpki-client on console.sobornost.net