Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/LvfE5_kWH0--4dhn6T7LoWT4PG8.roa
File: LvfE5_kWH0--4dhn6T7LoWT4PG8.roa (raw, json)
Hash identifier: S8x2QSFG6JjfvCjUjSzt0Nbna0QNLtomJ+9LAkNbU04=
Subject key identifier: 2E:F7:C4:E7:F9:16:1F:4F:BE:E1:D8:67:E9:3E:CB:A1:64:F8:3C:6F
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018572BA6461B78A9A9045CA4352327B3C2D
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/LvfE5_kWH0--4dhn6T7LoWT4PG8.roa
Signing time: Mon 02 Jan 2023 13:44:55 +0000
ROA not before: Mon 02 Jan 2023 13:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204746
IP address blocks: 89.117.223.0/24 maxlen: 24
89.117.246.0/24 maxlen: 24
89.117.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:64:61:b7:8a:9a:90:45:ca:43:52:32:7b:3c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 13:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ef7c4e7f9161f4fbee1d867e93ecba164f83c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:48:0c:98:91:13:88:31:12:65:78:5f:68:
d3:cc:c8:fc:b7:b6:6c:c4:d4:c3:d4:6b:57:26:be:
c3:0e:69:fd:28:e1:c9:0e:fd:8e:a7:6d:a1:95:38:
61:eb:f8:b1:37:ca:49:80:dd:fa:71:cc:8b:d0:b6:
1f:38:9b:0b:34:ec:e2:10:ed:e0:ce:6c:34:28:67:
f8:42:3c:1d:22:b4:a1:38:d3:16:99:f2:7b:58:b7:
89:83:6c:2c:fe:14:cb:f6:49:b3:cf:1f:13:14:16:
2b:a9:fb:7b:42:40:39:42:ad:88:69:17:d1:56:76:
81:e9:c7:90:6d:8b:ea:da:89:c9:eb:21:ec:85:c9:
1a:95:53:d5:99:55:e3:ef:57:e7:66:5c:02:3d:9f:
9c:ce:e1:1f:6c:79:07:bb:51:35:51:5b:96:74:16:
7d:d6:82:82:42:0d:f9:7f:a6:09:c0:b8:36:99:d3:
a0:ac:b3:ff:1a:09:62:59:a1:1b:ae:74:ed:94:83:
b6:1d:85:01:e5:c4:44:b8:d2:25:2b:2d:3b:0c:99:
5b:63:35:4a:e1:27:df:3f:22:4a:35:1c:69:ac:82:
a6:1a:60:39:7d:78:3e:c6:87:35:ec:92:21:35:d1:
f1:b9:07:5a:c2:fe:18:7f:9a:06:b0:13:ed:e5:84:
6a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F7:C4:E7:F9:16:1F:4F:BE:E1:D8:67:E9:3E:CB:A1:64:F8:3C:6F
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/LvfE5_kWH0--4dhn6T7LoWT4PG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.223.0/24
89.117.243.0/24
89.117.246.0/24
Signature Algorithm: sha256WithRSAEncryption
64:aa:20:b2:97:9b:39:51:42:92:b2:b1:5a:4d:1f:c0:40:da:
cd:2d:c7:1f:ab:14:dd:32:8e:b4:7a:1a:66:12:a7:31:6c:ca:
56:d5:e7:36:cb:f0:97:98:5e:f5:7c:90:08:56:64:e3:b1:d8:
0e:fa:89:ba:e9:dd:d2:fb:7d:e0:78:52:60:cf:16:e6:3e:7c:
09:9a:28:0a:8d:db:0c:43:5e:da:7c:08:e7:6f:56:48:30:9e:
a6:0c:03:c3:fb:c7:e6:39:29:e6:fc:c7:8e:d7:42:8c:8a:f7:
6b:98:bd:ac:5d:e9:8f:16:b2:e0:50:fa:cb:3a:ce:7f:11:44:
95:7f:4a:a1:ae:b1:b2:d4:3e:11:a3:2f:25:18:59:17:0d:9b:
e6:c6:44:79:26:84:72:99:01:47:57:57:ab:62:a0:5b:64:5d:
e6:d7:21:fd:32:02:9b:b1:5e:bf:e3:98:6a:05:86:a6:9d:3a:
94:be:4e:b5:d9:ae:2f:9a:7d:4a:26:b8:1e:b7:28:38:c9:4c:
20:d6:a5:bb:88:50:c1:c3:54:c8:7a:c6:bb:9c:7c:89:a8:cf:
97:e4:84:ce:1b:39:3f:92:e5:a3:9b:3a:43:13:d4:05:61:06:
31:48:09:91:8e:87:d9:32:98:17:f3:b2:df:27:b3:3e:2d:aa:
37:3d:16:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 15:31:36 2023 by rpki-client on console-ams.rpki-client.org