Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/LbGqGyQ5lDwzAThCnXvXA8Kabxs.roa
File: LbGqGyQ5lDwzAThCnXvXA8Kabxs.roa (raw, json)
Hash identifier: LjvRRvf7tCk0KUI7snOmLNIWELQ6Vy5YQp4Ozk2J3V0=
Subject key identifier: 2D:B1:AA:1B:24:39:94:3C:33:01:38:42:9D:7B:D7:03:C2:9A:6F:1B
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0B28D15B151AC56339964BE40A246
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/LbGqGyQ5lDwzAThCnXvXA8Kabxs.roa
Signing time: Mon 02 Jan 2023 05:25:00 +0000
ROA not before: Mon 02 Jan 2023 05:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197136
IP address blocks: 88.220.77.0/24 maxlen: 24
88.220.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:b2:8d:15:b1:51:ac:56:33:99:64:be:40:a2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2db1aa1b2439943c330138429d7bd703c29a6f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:1c:57:f9:75:f4:9e:82:bc:f4:df:f0:0f:
e5:9f:ab:65:19:b8:68:b3:e8:e5:43:bf:26:1d:49:
76:81:e9:18:68:c6:5c:db:1f:32:5f:e1:a4:ec:f3:
87:af:c2:f5:53:e3:6a:cb:07:88:c1:2c:e1:46:77:
79:be:75:9d:d7:09:6d:81:41:f5:4d:64:01:be:20:
55:3a:cb:77:44:36:9c:32:1c:60:02:12:a4:b1:16:
d5:62:43:26:d5:9a:69:2d:f1:f2:ee:80:a2:94:b4:
d9:10:e9:33:0f:fe:c1:64:13:91:ef:1b:5c:66:2a:
09:02:a9:ce:77:e1:13:83:66:72:92:ca:46:15:de:
6c:03:ae:85:59:c1:bc:b5:33:99:e8:01:3d:d0:ff:
52:48:c7:89:28:b4:03:2d:ed:2f:7a:35:ea:fa:82:
d7:78:21:c9:3c:5f:18:ba:f6:2a:82:ae:9c:80:e4:
84:ad:fc:56:90:7c:9f:23:cf:9c:d3:31:17:84:4b:
f2:a1:ee:4e:80:39:e1:0c:b2:1c:04:20:42:22:e0:
de:1e:9d:74:e6:e7:2d:2f:d8:8d:9f:ab:dc:6a:ae:
1c:be:1b:09:e6:22:5a:46:cc:85:40:e8:22:e1:6e:
39:fd:85:56:ee:44:6f:0c:a2:0a:5e:a1:b9:96:4b:
74:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B1:AA:1B:24:39:94:3C:33:01:38:42:9D:7B:D7:03:C2:9A:6F:1B
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/LbGqGyQ5lDwzAThCnXvXA8Kabxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.77.0/24
88.220.85.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:11:dc:ac:ac:55:4f:2d:e0:d1:e9:46:f8:10:4c:41:8e:70:
9c:cc:8e:d1:7a:27:4e:5e:cc:98:85:b7:13:fa:9e:a8:62:b2:
71:4b:33:bb:a0:df:8e:c5:12:c0:cb:03:6f:e5:6d:0a:ab:42:
8e:b5:b0:12:6e:a3:06:ac:a0:ad:fe:c7:0e:72:52:ea:c3:72:
bc:08:df:21:21:61:23:a3:d3:88:0e:0c:9e:6a:77:2b:78:16:
23:96:d3:3c:10:70:17:65:1a:29:a7:f4:ec:52:d1:4c:6c:dc:
9a:e6:fa:47:88:4d:99:10:97:25:00:91:82:88:a1:70:30:6b:
f9:33:91:d7:a4:a2:b1:b1:6a:19:cb:58:e9:18:ca:df:99:5f:
6d:9c:58:25:1e:f6:26:28:46:0e:b8:7d:15:df:f6:2b:de:29:
d2:85:17:85:c7:3e:4e:2d:86:ff:6d:fa:5e:18:d4:e3:26:e9:
51:10:84:e0:22:55:e7:75:91:e2:6f:0c:92:09:c3:3e:2b:c6:
1e:b1:0e:09:09:ee:5d:0a:7a:e8:2a:e6:40:66:23:96:03:89:
93:63:be:1f:02:c6:e2:a0:e2:05:32:23:f9:ee:41:54:9c:a6:
d1:1c:bf:c5:60:f7:36:60:4c:45:b0:8e:ad:2c:42:c5:35:21:
d0:85:1a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:20 2024 by rpki-client on console-ams.rpki-client.org