Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/Lis-LkiEVILzFK5J12PhSHWwNzc.roa
File: Lis-LkiEVILzFK5J12PhSHWwNzc.roa (raw, json)
Hash identifier: kN+4cQH6KDOsZwaLHX67unIBozFWIEW2IqkdApYDiVM=
Subject key identifier: 2E:2B:3E:2E:48:84:54:82:F3:14:AE:49:D7:63:E1:48:75:B0:37:37
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018B09776B984CA550CA972769854C4369FC
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/Lis-LkiEVILzFK5J12PhSHWwNzc.roa
Signing time: Sat 07 Oct 2023 09:28:23 +0000
ROA not before: Sat 07 Oct 2023 09:28:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212027
IP address blocks: 88.218.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:09:77:6b:98:4c:a5:50:ca:97:27:69:85:4c:43:69:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Oct 7 09:28:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e2b3e2e48845482f314ae49d763e14875b03737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:ac:49:4e:46:fe:d0:f7:17:7e:89:8a:22:
5d:e6:60:23:ce:f5:f1:9f:5e:95:f4:59:45:7e:aa:
dd:b6:75:02:03:7a:89:97:75:78:76:d9:65:20:08:
36:8f:4a:49:67:da:2b:e0:a6:fc:27:41:d0:7d:93:
5e:57:e5:5f:68:67:ff:db:9f:b3:e5:0e:01:02:c7:
57:0b:d6:a9:d8:d4:2c:ba:95:3e:94:a0:c1:d1:f1:
5d:fd:e3:74:ac:57:e9:58:c7:5c:ea:2d:2e:bd:34:
36:40:fc:7a:40:c9:8b:dc:6d:e0:47:6e:7a:7d:cd:
49:b7:b6:93:23:ba:4b:54:99:3d:c0:89:72:ac:91:
51:68:e1:f0:b9:1f:73:ff:df:2b:5a:16:c2:88:5d:
d3:2c:64:40:43:d6:cb:6e:8f:f9:94:5d:d2:b8:2b:
6b:e9:fd:1d:fa:e6:20:cf:0b:6a:ba:3e:9d:33:dc:
b8:43:12:ac:38:e0:b5:83:33:ca:5a:a5:3a:31:15:
a0:49:15:be:15:db:ab:92:25:f4:3c:da:2e:96:b5:
46:bd:f7:34:c0:30:ac:70:85:fa:f6:1d:c5:03:6e:
a9:52:0a:59:f3:21:08:ec:5a:09:28:a1:f5:d8:07:
a8:0a:ea:82:77:86:7a:f6:02:9a:59:7e:29:04:e8:
8d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2B:3E:2E:48:84:54:82:F3:14:AE:49:D7:63:E1:48:75:B0:37:37
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/Lis-LkiEVILzFK5J12PhSHWwNzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.40.0/24
Signature Algorithm: sha256WithRSAEncryption
58:36:43:51:56:95:dd:03:f5:b6:86:59:17:df:77:8d:26:a4:
f4:fb:47:c0:6b:7a:0d:f1:7e:3a:ad:3e:87:9e:67:4b:a9:f6:
87:d9:ef:80:1b:4b:6f:7f:77:a3:af:43:db:0f:5b:b4:97:83:
f2:5b:56:82:08:8a:82:9e:6b:fb:91:66:8f:0e:04:cf:5f:66:
57:f9:c4:a6:7a:bc:4b:47:88:91:84:75:e9:14:be:07:20:ce:
e5:ef:d9:0d:07:ef:e4:d4:61:fa:38:df:60:4d:f4:4a:60:7b:
22:45:af:b0:61:2f:3e:51:7c:07:65:37:b4:83:ca:42:5b:4c:
93:78:e5:dd:7f:ac:56:f8:39:9a:5b:f5:8c:26:48:2f:66:71:
7e:b8:83:aa:5c:21:59:c5:2a:d3:07:85:1c:75:43:77:a0:24:
ab:74:62:a3:a0:2e:7d:42:f0:bc:5c:8f:db:cc:e6:15:7e:cf:
0f:63:38:da:47:c9:3a:51:ea:e3:b9:05:42:03:71:9e:19:4c:
86:77:d6:7c:dd:f5:f1:07:5a:cf:e2:d7:e6:f5:64:39:8b:f7:
c2:ac:ad:af:3d:5f:7f:4f:f7:24:ce:95:e5:a9:3b:84:46:d9:
38:45:67:4f:73:f4:30:c0:91:e1:a3:ea:c7:e1:57:4a:e0:be:
f2:ad:9d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:24 2024 by rpki-client on console-ams.rpki-client.org