Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LMUxU7Fq5FGnl7QSyqvSlGcewV4.roa
File: LMUxU7Fq5FGnl7QSyqvSlGcewV4.roa (raw, json)
Hash identifier: X17i6tadUA2OjreQRNuyAJ0mKGob0lhajlzzJl3g/Sw=
Subject key identifier: 2C:C5:31:53:B1:6A:E4:51:A7:97:B4:12:CA:AB:D2:94:67:1E:C1:5E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189D91FABE131850A4995CD786E78F996D3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LMUxU7Fq5FGnl7QSyqvSlGcewV4.roa
Signing time: Wed 09 Aug 2023 07:07:58 +0000
ROA not before: Wed 09 Aug 2023 07:07:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 89.47.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Aug 2023 13:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:1f:ab:e1:31:85:0a:49:95:cd:78:6e:78:f9:96:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 9 07:07:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cc53153b16ae451a797b412caabd294671ec15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:47:2d:de:26:14:db:cf:51:1d:25:7c:78:
c2:c7:c7:d5:57:11:81:c6:07:8f:17:53:8f:aa:7d:
b5:32:fc:8d:a2:73:d3:c6:ee:c4:f1:2f:b7:03:32:
f3:24:56:ca:df:f0:2b:ef:8d:3f:2d:f6:bf:4b:e1:
4f:1d:6a:72:1b:9f:ac:a6:53:d2:7e:5d:ec:a5:5e:
63:37:90:a1:39:0a:c4:48:9e:eb:07:c7:ba:49:00:
66:7e:70:52:8d:5b:62:fe:fc:73:6c:f8:f1:d7:19:
13:f4:fe:92:aa:ed:9c:73:f0:6d:5c:ec:1a:1e:0d:
6c:a1:14:05:f7:74:e6:3f:bb:db:6f:19:fd:bf:1e:
02:ea:5f:a4:e3:f8:d2:d3:cf:df:73:d7:91:74:46:
d4:17:b3:91:cc:e9:fa:05:e7:05:32:9e:6d:fb:6b:
62:80:94:90:b5:0a:d1:ca:09:2e:83:e6:c2:70:df:
fc:92:ae:47:76:25:81:a3:f6:ef:c4:94:f9:b5:fc:
d7:e4:c9:f0:b1:da:9e:22:93:17:9c:2c:00:f4:c8:
d8:3a:7d:20:15:0a:ec:b1:ca:1f:3d:90:7a:07:0a:
90:61:3a:8b:99:ff:33:5a:59:8d:b2:36:41:8b:5b:
50:d8:ff:05:68:96:6b:a8:d0:b6:31:ed:16:71:2a:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C5:31:53:B1:6A:E4:51:A7:97:B4:12:CA:AB:D2:94:67:1E:C1:5E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LMUxU7Fq5FGnl7QSyqvSlGcewV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:0c:48:35:32:b1:e5:88:e4:c3:8e:2e:c9:ca:5f:5e:3f:8e:
ff:c5:91:c9:7b:f0:74:a1:ec:09:4a:cd:a3:a0:5d:50:bc:85:
19:d9:54:1e:4a:aa:ab:2c:28:81:86:4e:d1:01:c6:16:15:ca:
1c:40:65:bb:66:a1:45:50:1d:e4:7f:ec:2f:76:44:ce:b4:33:
c2:69:86:aa:54:77:a7:63:f9:aa:d7:27:7b:2e:12:cd:79:37:
bd:b3:f1:b1:89:8f:67:d9:5b:57:ca:53:0d:65:40:a1:a9:5f:
ea:48:bf:86:33:ce:50:49:c0:c6:d0:e6:28:7f:50:3e:fe:7f:
23:87:87:be:7f:6e:4a:ee:34:75:e9:da:16:5e:3b:5f:e4:24:
d6:b1:2a:76:5a:d5:19:e7:e4:c5:fb:83:01:16:59:70:d6:06:
9b:90:38:9d:24:4d:b5:a5:82:1b:b0:66:5a:0d:b2:71:de:98:
1c:f5:ee:90:df:53:16:63:cd:47:32:20:ea:8d:77:70:c5:f2:
77:d5:92:95:20:40:68:a1:5e:6a:f6:4c:35:2a:1b:12:aa:46:
48:f2:4e:1e:3e:db:62:f6:d0:0c:0f:d3:14:f3:45:60:d2:de:
52:c1:7e:78:32:13:42:f2:3e:ef:b2:26:a1:e2:cf:97:82:b9:
f5:e2:30:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org