Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/LMvNi0_xs8p5poIlth632ve3P8I.roa
File: LMvNi0_xs8p5poIlth632ve3P8I.roa (raw, json)
Hash identifier: /8sLOlP2d2FCSeFA5V/jbKBvuMlWFrOoFOOnU3CVm1U=
Subject key identifier: 2C:CB:CD:8B:4F:F1:B3:CA:79:A6:82:25:B6:1E:B7:DA:F7:B7:3F:C2
Certificate issuer: /CN=166fed8bb6449b1cec6b665e930718b858a2b694
Certificate serial: 01856D6F87483332CC5CE74F68C9EBE7EE54
Authority key identifier: 16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/LMvNi0_xs8p5poIlth632ve3P8I.roa
Signing time: Sun 01 Jan 2023 13:05:03 +0000
ROA not before: Sun 01 Jan 2023 13:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198915
IP address blocks: 91.240.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:87:48:33:32:cc:5c:e7:4f:68:c9:eb:e7:ee:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166fed8bb6449b1cec6b665e930718b858a2b694
Validity
Not Before: Jan 1 13:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ccbcd8b4ff1b3ca79a68225b61eb7daf7b73fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:37:0b:21:4e:4a:4d:c3:48:2e:f6:2b:c7:93:
2d:05:86:9a:92:e0:1b:f3:7d:9a:4e:c5:96:7e:c9:
f6:5b:d0:86:f7:47:1e:50:b9:7e:12:72:ae:9e:14:
3a:18:5a:75:58:d2:72:57:1f:c7:bf:e0:07:2a:40:
c1:8f:ab:29:dc:87:c6:87:ca:b9:2c:95:63:a1:cc:
6b:cb:2a:d1:bb:3a:9f:39:d9:85:b4:91:12:a8:67:
45:81:9c:7b:aa:15:bf:ca:92:ab:62:e3:cb:c7:25:
bc:20:7e:7e:19:41:17:ab:2a:2c:71:05:fc:5f:4d:
f3:44:e0:ea:c0:37:ec:40:06:34:92:ec:9b:a7:9f:
64:21:f5:cb:20:5f:cd:89:b9:7a:de:5f:23:76:cc:
a4:cf:be:b1:d8:ec:52:0c:79:b3:8c:0f:7d:74:8f:
36:dc:d4:ef:d0:dd:2b:9b:9b:c7:2d:c5:51:f3:55:
8b:17:a6:71:36:10:10:e4:0d:1b:0f:da:bd:6f:30:
08:58:ee:be:1f:18:8b:8f:b7:d6:22:60:3c:e4:2b:
2d:20:44:f0:0d:9f:5f:21:12:99:e5:52:ae:07:08:
b1:15:a2:b2:f8:20:cd:fd:3f:ab:b2:62:69:73:8f:
0f:33:5e:0e:6b:e3:31:f8:7c:49:4d:c2:d9:b1:4a:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CB:CD:8B:4F:F1:B3:CA:79:A6:82:25:B6:1E:B7:DA:F7:B7:3F:C2
X509v3 Authority Key Identifier:
keyid:16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/LMvNi0_xs8p5poIlth632ve3P8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.70.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:66:8e:e3:da:4b:fa:7b:11:a0:3b:32:6e:69:97:b2:6a:0e:
4f:46:ae:b2:5e:62:88:aa:96:00:d0:00:90:e8:b8:a1:b2:4f:
a8:ef:e1:7f:f1:31:5a:2b:39:96:6c:0b:7e:01:0a:f2:53:dd:
e7:8b:dc:f7:c8:a6:76:60:99:f6:9a:91:3a:72:88:dc:c3:07:
c3:42:87:4d:90:f9:10:79:01:97:73:5e:07:ad:3e:48:48:02:
3d:29:06:51:b8:d9:dc:a1:de:9b:38:ac:61:5d:16:e5:c2:d8:
a6:45:13:77:2e:96:1a:85:5a:d4:66:9c:b4:56:87:ce:a2:ba:
93:cb:79:f6:c2:4f:77:f1:79:b4:29:44:57:c3:b8:d9:ca:40:
ed:4e:d4:04:fa:59:15:e1:13:31:5c:ef:d6:d2:db:a8:a8:df:
c0:e3:94:df:3b:90:4d:e6:e1:f4:2e:63:fe:86:a7:36:70:58:
b5:d2:ee:a6:e7:f0:57:10:31:00:11:79:09:a5:09:8a:95:85:
7a:df:b6:04:5a:66:d0:24:ce:46:3d:3c:7a:67:f1:93:78:a9:
7e:e9:63:43:bc:2d:ee:74:81:a6:91:a6:42:00:f1:2d:69:f5:
6a:28:20:08:64:e4:18:17:16:38:a2:4f:36:33:cd:43:36:d6:
bd:12:8b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:24 2024 by rpki-client on console-fra.rpki-client.org