Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lQneYgceHhAEttdBLzgDzsPmvxQ.roa
File: lQneYgceHhAEttdBLzgDzsPmvxQ.roa (raw, json)
Hash identifier: 2XR/ApIt/ZF8oE8sBWTLIVi6WgxAuZJK4pZeBxiA5c0=
Subject key identifier: 95:09:DE:62:07:1E:1E:10:04:B6:D7:41:2F:38:03:CE:C3:E6:BF:14
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FDE2DFF24BE0F654F4F8EB859090C
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lQneYgceHhAEttdBLzgDzsPmvxQ.roa
Signing time: Mon 02 Jan 2023 17:38:06 +0000
ROA not before: Mon 02 Jan 2023 17:38:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22439
IP address blocks: 89.190.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:de:2d:ff:24:be:0f:65:4f:4f:8e:b8:59:09:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9509de62071e1e1004b6d7412f3803cec3e6bf14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:b1:76:ea:9c:36:22:b2:d0:1f:22:0f:cf:
ad:15:ec:c7:03:6c:ec:2f:7f:69:97:bd:e0:30:22:
85:02:17:98:97:1e:95:dd:7a:82:1d:dc:9d:e1:17:
67:36:f6:13:7c:e4:4c:1c:e2:ec:ed:8f:91:09:e6:
4d:ba:ad:a2:88:f5:5c:0f:1b:9c:66:72:cd:e1:c9:
cf:a3:b7:e8:e8:f4:bd:15:ac:7e:5f:02:33:92:c8:
ea:14:18:2d:6a:e8:fb:28:20:d4:77:cc:95:ff:f1:
98:b4:99:90:3f:2e:df:b3:dc:f7:86:40:01:b2:a3:
01:5b:ac:ce:61:79:3d:1c:6b:3b:93:06:80:02:be:
37:0a:9b:d7:04:7a:18:10:a3:0d:0e:2f:37:c1:b4:
b3:97:3a:17:55:a8:be:6f:b1:d3:06:0d:3c:49:72:
1d:5b:41:dd:e9:78:e0:43:03:65:af:e4:5e:be:e1:
bf:74:54:69:63:ff:20:14:6e:d8:0e:0f:b2:19:96:
b8:71:dc:0f:17:59:10:67:e5:21:b6:f8:8d:3f:cd:
7f:ac:27:cf:9f:54:4d:a7:f1:ef:7b:ed:05:51:b8:
3d:2c:5e:cf:fe:7d:bf:72:74:bd:74:46:e3:cb:ae:
51:bd:d3:17:e1:e0:bb:cc:10:8f:2e:22:04:1c:c6:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:09:DE:62:07:1E:1E:10:04:B6:D7:41:2F:38:03:CE:C3:E6:BF:14
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lQneYgceHhAEttdBLzgDzsPmvxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.158.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:24:88:eb:0b:36:1f:b1:44:f3:a6:33:9b:48:b0:aa:7a:a5:
a2:46:21:da:58:49:f3:82:c3:36:6c:4f:e8:f1:63:4c:2f:04:
95:71:1c:92:7a:97:bf:76:13:72:d5:17:65:05:fa:39:59:c7:
4e:58:05:b7:9a:1a:35:52:33:7a:1a:21:d7:fe:1b:7f:65:c0:
98:92:b9:d1:16:29:53:c6:0d:11:5c:d3:30:28:85:75:aa:85:
fe:c7:98:4d:33:98:8f:5d:9e:79:4c:f3:6d:c4:08:fc:ca:9d:
f2:64:09:32:a2:4f:f4:e0:a2:08:8f:6d:cf:00:a0:16:7f:2d:
d3:bb:e7:23:b9:05:aa:2b:a8:dd:46:f1:9a:40:d0:d5:97:78:
8e:19:1b:25:36:31:9c:dc:33:0c:6a:70:74:ab:d6:4c:c1:71:
bf:f3:39:51:6f:be:9e:bf:cd:85:9a:94:c3:fc:c6:0c:de:0a:
13:cd:c7:c4:b5:af:9f:a1:09:20:28:c7:26:13:29:d5:17:38:
26:08:da:5d:a7:30:74:ef:ea:c6:13:56:34:ce:89:9c:e5:81:
be:80:a4:31:25:49:e0:a9:0e:a7:a4:23:87:cd:1c:89:aa:92:
9d:f5:36:1c:70:1f:8a:0c:b5:00:06:4a:ed:22:24:f2:87:19:
c4:b0:f4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:34 2024 by rpki-client on console-ams.rpki-client.org