Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/LFvEj0ZpSMAagvu3wm-MsP7nNOQ.roa
File: LFvEj0ZpSMAagvu3wm-MsP7nNOQ.roa (raw, json)
Hash identifier: n6nIG/MyFJh+UFMKI7S/HUWION6eYwMc0mvgl49u6I4=
Subject key identifier: 2C:5B:C4:8F:46:69:48:C0:1A:82:FB:B7:C2:6F:8C:B0:FE:E7:34:E4
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01877EBB128EADBCB06961395F8CC2D92945
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/LFvEj0ZpSMAagvu3wm-MsP7nNOQ.roa
Signing time: Fri 14 Apr 2023 07:46:41 +0000
ROA not before: Fri 14 Apr 2023 07:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 195.242.240.0/24 maxlen: 24
195.242.241.0/24 maxlen: 24
89.46.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7e:bb:12:8e:ad:bc:b0:69:61:39:5f:8c:c2:d9:29:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Apr 14 07:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c5bc48f466948c01a82fbb7c26f8cb0fee734e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6a:c4:7b:c9:0b:4b:af:44:77:ec:93:8e:64:
7d:a4:63:82:7d:07:90:30:52:1a:d3:90:e7:51:ac:
97:9b:b6:b1:f0:a3:a6:5c:6f:a5:3f:69:3c:e6:c5:
46:ab:fc:7a:1f:e5:9f:85:bd:bc:7f:aa:94:11:a8:
65:6d:59:82:19:11:bb:80:cc:42:98:ef:62:f9:4b:
f5:ea:77:25:7f:52:5a:d2:c6:37:04:30:0f:fc:d9:
3d:14:a4:c6:c3:6d:ff:15:59:ba:71:7e:6e:76:85:
99:92:50:c9:8c:33:7a:5b:2a:98:44:db:19:75:a7:
97:09:1d:c4:17:6a:8d:db:1a:52:ff:ac:70:a2:7d:
e1:be:b3:09:de:c7:f2:59:74:bf:4a:7f:7b:b7:84:
79:7a:65:1e:85:e7:8c:76:53:7c:20:b0:d3:df:ad:
51:90:79:6c:0d:b8:7b:15:98:84:10:6b:a9:ea:42:
19:18:f6:7c:d1:ad:38:f6:c5:14:98:35:ec:33:0a:
03:62:01:dc:85:d8:b8:eb:d8:f4:d6:37:8a:af:d8:
91:bb:32:67:e1:d0:97:03:19:6b:99:00:40:1b:ee:
69:42:1b:00:3c:27:bc:00:6a:ab:63:ab:09:47:0b:
bb:bf:52:e5:ec:aa:d3:e1:fe:81:44:c3:a8:dd:d5:
0a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5B:C4:8F:46:69:48:C0:1A:82:FB:B7:C2:6F:8C:B0:FE:E7:34:E4
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/LFvEj0ZpSMAagvu3wm-MsP7nNOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.8.0/24
195.242.240.0/23
Signature Algorithm: sha256WithRSAEncryption
75:d5:42:24:f7:d1:db:bb:9f:aa:0d:1f:44:aa:45:e6:ad:d9:
0e:f3:65:80:88:24:0e:5c:b0:ee:e4:bc:7d:e6:2b:3c:81:cd:
c4:9a:d5:41:87:bb:cf:5c:c5:31:1c:1d:3c:ce:82:a0:d0:25:
42:a2:b6:dd:72:c7:9f:d4:aa:4f:31:59:bb:f2:97:56:7f:9c:
4a:3d:3b:58:a2:c7:f0:70:a0:9c:b6:80:e4:30:10:8b:65:a2:
10:51:b2:00:5c:03:ac:9e:2d:39:6c:f3:8b:1c:ba:45:a3:80:
77:e7:28:82:c2:b6:13:0e:00:b2:4d:cb:17:bc:41:f0:d5:c1:
63:83:b7:ad:3e:42:3f:af:44:f4:70:26:05:86:bc:58:ce:87:
c5:66:e8:f2:5c:8e:52:f4:82:95:df:95:99:8a:0c:57:1f:d1:
62:be:cf:33:b4:ee:80:4c:55:cc:5f:8b:b2:2f:37:ca:75:b3:
b4:b5:f5:cc:5d:e8:f8:64:6a:13:77:9b:85:8d:7d:2f:a3:4b:
db:21:ca:09:e6:75:63:4f:32:57:e6:9e:fd:e2:f9:46:3b:ad:
59:c2:2a:19:3b:b8:ad:55:d2:34:83:97:aa:a5:fc:dc:ac:9e:
14:bf:cd:5e:b8:c0:dd:36:49:9a:4f:4d:22:55:9e:46:dd:7d:
74:07:7a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 11:53:42 2023 by rpki-client on console-fra.rpki-client.org