Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/LylPrPWf15dY4gAXC3KQYCoPkjM.roa
File: LylPrPWf15dY4gAXC3KQYCoPkjM.roa (raw, json)
Hash identifier: HZinOfUBn2ymdy9L1okywQJYBXmCDQL6mDiPLKewIC8=
Subject key identifier: 2F:29:4F:AC:F5:9F:D7:97:58:E2:00:17:0B:72:90:60:2A:0F:92:33
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 01896E5CDEB2901573FBD1377092A0765B58
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/LylPrPWf15dY4gAXC3KQYCoPkjM.roa
Signing time: Wed 19 Jul 2023 13:35:27 +0000
ROA not before: Wed 19 Jul 2023 13:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29063
IP address blocks: 212.159.224.0/19 maxlen: 19
83.138.0.0/21 maxlen: 21
212.159.192.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:5c:de:b2:90:15:73:fb:d1:37:70:92:a0:76:5b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: Jul 19 13:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f294facf59fd79758e200170b7290602a0f9233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:44:12:97:e5:11:8b:0d:d9:89:41:61:5d:bb:
16:da:b7:f6:cb:b6:62:fb:1a:55:8d:20:60:c3:5f:
8f:6c:b0:1a:2f:f5:08:c9:f0:7f:ad:da:84:1a:99:
7a:02:09:3c:36:6f:40:fd:5e:08:0e:be:bd:da:4a:
9c:fa:10:f3:4f:89:b5:dd:4b:4a:ca:44:95:fc:9d:
a0:b6:96:ec:7a:41:4e:fd:22:c7:f4:80:d4:6e:c2:
7a:9b:9c:a6:cf:56:bc:da:88:5a:90:63:be:f0:b9:
37:8a:64:64:ac:f7:68:96:9d:d4:3c:d5:77:21:50:
5e:ce:0f:ac:40:27:18:59:db:4e:9c:9b:b6:4d:da:
af:0b:b7:02:6b:4d:97:2f:e3:6e:29:8b:ba:42:fc:
06:67:a3:8a:3e:25:72:dc:70:4c:c1:8b:3c:fb:74:
db:8e:d0:35:e2:24:8f:6c:3e:ba:88:ca:4e:25:82:
1e:56:1d:a6:ea:c2:8a:7f:be:87:3c:47:8a:75:20:
5a:7d:1f:5d:c3:b1:83:17:c3:8e:a9:a6:74:cd:2a:
2d:fd:df:91:0b:ec:42:97:a1:50:46:a2:8a:42:19:
42:0b:d9:83:c8:bf:5a:d3:a0:95:0f:ab:12:9d:f2:
66:26:ee:ea:d7:1f:f7:4b:91:0d:37:e3:bb:38:c2:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:29:4F:AC:F5:9F:D7:97:58:E2:00:17:0B:72:90:60:2A:0F:92:33
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/LylPrPWf15dY4gAXC3KQYCoPkjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.0.0/21
212.159.192.0/18
Signature Algorithm: sha256WithRSAEncryption
3b:c2:d6:6a:8d:3a:7e:7a:9c:95:a1:e2:f1:a5:30:f2:22:7c:
da:30:d4:4c:dc:ad:e1:50:aa:55:a5:7a:44:ab:2b:b9:ab:40:
4b:53:8a:93:ee:d9:54:1a:59:dd:73:29:65:76:b1:0a:ee:cd:
ac:58:25:08:da:47:1d:54:71:40:a2:20:d1:32:6a:76:62:26:
f1:66:a7:34:36:c7:88:5b:c9:c2:43:23:06:72:18:1d:b9:25:
be:d5:82:1c:4b:af:46:6b:4d:e7:3c:e4:cc:8e:53:81:84:23:
59:aa:bb:ba:eb:2c:5a:80:44:23:fc:05:44:fe:40:4b:be:f8:
c9:3d:af:05:44:fc:25:73:69:fd:28:69:5c:29:95:34:14:51:
fb:56:97:cd:c1:be:6e:61:39:19:6e:ed:be:48:c0:44:0c:bc:
99:34:f6:2d:20:bd:ed:9f:72:06:4b:7b:23:47:3f:5e:c6:d7:
c5:82:c3:78:13:9d:7b:af:04:cc:60:53:ef:2e:5e:b1:e5:0d:
6d:28:90:13:64:8a:8b:e8:7b:01:eb:ed:44:f7:7e:28:32:cb:
c3:36:f8:54:00:fd:b8:ea:56:c8:20:a7:dd:1b:af:68:57:ff:
3a:7a:b4:87:08:ea:e3:15:10:15:65:dd:ec:8c:26:e5:e5:9e:
cb:64:6e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 12:32:34 2023 by rpki-client on console-ams.rpki-client.org