Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/lbceOk74kOaOmRCrLl8_rQYvkEM.roa
File: lbceOk74kOaOmRCrLl8_rQYvkEM.roa (raw, json)
Hash identifier: unK9zAGA1Ju8XQPr2mVYYv3PwyoigDf5f2BpzAXF/bo=
Subject key identifier: 95:B7:1E:3A:4E:F8:90:E6:8E:99:10:AB:2E:5F:3F:AD:06:2F:90:43
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018D135FFCB4081926279EB3F02FE4CE9773
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/lbceOk74kOaOmRCrLl8_rQYvkEM.roa
Signing time: Tue 16 Jan 2024 17:44:34 +0000
ROA not before: Tue 16 Jan 2024 17:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 89.251.22.0/24 maxlen: 24
89.251.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 09:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:5f:fc:b4:08:19:26:27:9e:b3:f0:2f:e4:ce:97:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 16 17:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95b71e3a4ef890e68e9910ab2e5f3fad062f9043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:df:ca:49:0c:9f:40:b4:21:39:22:b7:cd:
04:d1:ff:b2:b7:92:fa:db:55:57:a5:39:0e:19:da:
9e:ad:b8:0a:a0:61:2c:44:1f:a7:08:63:28:c9:bb:
1f:b2:fd:29:63:2a:2e:7b:b1:60:69:a5:06:be:c6:
55:26:e6:85:92:38:03:93:f8:99:48:4e:51:09:80:
e9:32:ce:5e:cb:17:ca:c1:a7:6c:f6:e2:d7:f0:40:
22:b7:41:78:ee:c6:06:cf:0e:f8:6b:bd:97:e5:18:
fa:34:ca:7b:8a:8a:47:4f:df:e9:8c:86:26:9d:ae:
19:0a:fa:c7:74:f0:cc:48:18:16:a2:fe:02:e3:c3:
42:ae:25:7a:40:8d:a1:25:3b:49:3c:1d:3f:81:e8:
df:1e:b3:c6:22:f5:e4:49:6b:18:ff:ff:85:4d:31:
3e:d0:8e:df:b5:c0:1a:38:5d:55:01:61:20:48:4a:
44:fe:2e:cd:03:05:88:17:5a:c4:3c:13:86:88:c9:
1e:18:b8:02:20:81:00:7e:88:81:9f:5b:60:89:5d:
b4:92:69:30:04:04:db:0c:9a:26:88:1d:33:8b:79:
30:c4:73:c4:54:4a:96:57:d1:dd:75:1a:03:4d:50:
01:dd:2d:ea:64:78:a3:1d:fc:39:1a:70:ab:92:8e:
b0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B7:1E:3A:4E:F8:90:E6:8E:99:10:AB:2E:5F:3F:AD:06:2F:90:43
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/lbceOk74kOaOmRCrLl8_rQYvkEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.22.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:04:1b:ac:bb:da:25:37:e7:1f:9a:8f:0e:b6:b9:9b:30:4f:
0a:99:c1:67:f8:e0:3d:45:cb:2d:32:48:f1:94:14:b4:e5:63:
2a:fe:6a:74:c9:11:af:3a:fa:61:5b:63:d8:fe:97:c0:0e:98:
1a:f0:40:2b:96:2e:03:5f:1a:78:36:a0:63:a6:46:59:3a:ca:
f5:fe:1e:c1:93:f4:e8:7e:a2:a6:99:85:99:cb:45:84:d5:13:
3e:a5:27:0e:c9:1f:4b:63:90:80:6c:5d:84:c2:d3:0f:4a:37:
3a:13:05:ab:a8:70:79:96:f0:f9:26:8d:11:a1:31:d1:b2:a2:
27:75:b7:61:93:e4:9f:dc:cf:59:6e:c7:bb:89:a9:d7:e0:53:
f2:a4:f4:b3:60:16:c8:f8:7d:1f:cc:2a:62:2e:71:e7:d3:2a:
89:b9:37:42:7e:9e:cc:da:4a:a8:98:6e:48:a4:15:32:dd:72:
c1:84:1d:44:a1:a1:d9:f8:e6:0f:ab:37:fa:cc:5c:43:4a:68:
5f:57:9d:66:b4:03:1e:74:e7:d3:50:18:05:b9:c0:50:ee:2c:
ad:e1:58:56:80:70:2d:ee:98:2d:bb:a6:45:15:c2:e2:58:0e:
47:1b:c9:6a:d0:b9:05:9d:e1:8f:ae:fb:7e:b0:6f:b5:80:b8:
1b:08:41:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:07 2024 by rpki-client on console-ams.rpki-client.org