Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211237.roa
File: AS211237.roa (raw, json)
Hash identifier: 4B6FQmLcrkER5pARI5wdZJsQl38pgcYvSlH6X4oO4/M=
Subject key identifier: FC:3A:D0:77:91:B8:F7:AC:D0:44:E4:AE:7F:A4:B2:79:6B:7A:AA:BB
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 7E2C0929026E29BDB56D6BA46DEF0BE2522C022E
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211237.roa
Signing time: Thu 23 Mar 2023 16:00:19 +0000
ROA not before: Thu 23 Mar 2023 15:55:19 +0000
ROA not after: Thu 21 Mar 2024 16:00:19 +0000
asID: 211237
IP address blocks: 89.116.153.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.117.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:2c:09:29:02:6e:29:bd:b5:6d:6b:a4:6d:ef:0b:e2:52:2c:02:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Mar 23 15:55:19 2023 GMT
Not After : Mar 21 16:00:19 2024 GMT
Subject: CN=FC3AD07791B8F7ACD044E4AE7FA4B2796B7AAABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:cb:86:79:5e:66:ab:aa:05:b9:56:24:dc:
c6:7a:32:32:16:af:3c:4c:d5:69:39:76:39:e4:a4:
b1:f1:fe:ba:3a:29:38:56:54:7d:ad:0d:82:ce:b4:
7a:ea:31:6d:e8:f3:b0:a0:82:fc:43:74:3c:a2:fa:
f5:90:9a:22:61:30:55:4e:01:10:c4:c8:36:9b:b7:
5c:66:63:3a:38:32:40:10:08:82:ca:b9:f3:77:f4:
fe:b4:ed:b1:25:64:82:4e:4e:e4:4b:de:64:ed:b4:
91:f6:f8:44:ba:29:ff:45:76:52:58:32:57:09:c2:
b8:0c:1e:24:fe:d4:f5:21:5e:7f:d9:06:3c:92:3c:
8e:e3:88:59:23:b7:d6:cd:19:06:7d:9f:b1:a3:aa:
d4:35:de:ce:b1:eb:c9:f1:b7:1c:17:46:a6:21:ce:
47:76:56:89:bb:2c:3f:6b:ea:63:34:af:6c:d2:a6:
e2:29:1f:97:b3:05:de:d8:49:f3:03:db:ef:fb:16:
40:b7:e0:5c:0d:f6:9f:90:28:c2:2b:9d:48:13:4e:
38:86:60:d4:d9:bc:dd:e7:83:00:f7:6d:98:bb:15:
30:7f:5c:df:da:4f:9c:ed:c3:c3:9b:1a:7c:90:fe:
f7:0b:8d:15:7f:b8:36:80:7d:df:be:52:50:6a:5d:
90:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3A:D0:77:91:B8:F7:AC:D0:44:E4:AE:7F:A4:B2:79:6B:7A:AA:BB
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.153.0/24
89.116.190.0/24
89.117.139.0/24
89.117.188.0/24
Signature Algorithm: sha256WithRSAEncryption
97:61:b7:ec:2f:4c:9f:bc:5a:71:ff:a7:9c:2a:4a:d0:2b:72:
7b:84:78:5a:8e:8c:47:9b:40:56:c2:85:72:b0:d9:5c:eb:a8:
5d:63:be:9e:51:57:dd:9f:00:47:25:18:f7:dc:f1:eb:81:10:
2c:23:e0:55:8e:ce:5a:22:48:d9:0e:f0:67:e2:1a:8c:a5:81:
f9:aa:65:24:17:97:55:fa:8b:68:14:1e:c3:bf:35:25:7c:c4:
a6:11:bd:cf:23:70:79:cf:9c:28:01:2d:e9:07:d0:cd:66:17:
bf:29:46:44:70:2b:f9:41:2a:2a:63:45:2e:6d:48:01:d9:19:
86:86:83:b1:61:4d:27:08:df:1b:14:4e:c5:fa:e4:9d:08:0a:
b1:20:20:a0:47:b6:65:63:9d:7b:c1:dd:52:2e:82:fb:be:c7:
d9:79:85:36:5d:b0:a9:b4:a5:75:77:dd:de:f3:c3:b8:8e:14:
06:48:c1:1f:ee:38:36:60:a5:d3:12:91:90:55:10:d5:3e:49:
d0:ef:01:00:34:6f:61:2c:40:50:6c:c7:8b:c0:06:4d:2b:97:
22:0b:4c:7f:96:45:31:16:0f:2e:11:c7:6e:c7:57:76:b5:62:
a5:88:dc:fa:5d:82:ff:94:a7:9f:71:64:d0:e8:de:1a:83:89:
90:a1:21:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 18:10:36 2023 by rpki-client on console-ams.rpki-client.org