Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/LkmmbbHSB0mPXb-oMD9J8eekFTk.roa
File: LkmmbbHSB0mPXb-oMD9J8eekFTk.roa (raw, json)
Hash identifier: YQP95gVwnyc+vOCkYM+DkjStNmDC+J5E3v4rlEBhkf0=
Subject key identifier: 2E:49:A6:6D:B1:D2:07:49:8F:5D:BF:A8:30:3F:49:F1:E7:A4:15:39
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 01856E6FD911444B0CA2A83030E9B1A3B162
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/LkmmbbHSB0mPXb-oMD9J8eekFTk.roa
Signing time: Sun 01 Jan 2023 17:45:01 +0000
ROA not before: Sun 01 Jan 2023 17:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39810
IP address blocks: 89.187.0.0/23 maxlen: 24
89.187.0.0/19 maxlen: 24
89.187.2.0/24 maxlen: 24
89.187.3.0/24 maxlen: 24
2a10:e400::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:d9:11:44:4b:0c:a2:a8:30:30:e9:b1:a3:b1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jan 1 17:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e49a66db1d207498f5dbfa8303f49f1e7a41539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:c0:aa:30:a0:3e:37:cb:d0:01:cd:26:69:
c5:2d:a2:52:d5:5d:16:d2:ec:ec:74:88:53:e4:35:
cc:ce:a3:90:4f:1e:4e:76:79:f0:c9:fc:74:33:97:
2c:33:9e:9a:e2:b8:2a:ad:09:2e:14:c7:f5:bc:2f:
ef:77:f9:2b:88:c5:2c:d0:cb:59:03:81:f1:5b:e5:
da:16:49:f8:ae:b4:26:f4:c2:9f:98:2c:f6:db:a0:
2b:4c:33:c4:ad:de:7f:77:a0:ba:fb:e6:e5:cd:d9:
9b:21:86:6b:38:62:02:c9:f5:52:8e:d6:a7:4e:3e:
38:30:de:b3:c2:25:c4:35:a0:0b:21:11:45:02:2b:
6b:d1:cc:23:5e:0f:2e:f8:a6:8b:c2:a8:6c:5f:1d:
f3:61:c6:9e:bc:04:17:2d:2c:c0:44:10:7c:72:a6:
c3:fd:3b:3c:ba:80:ac:ef:25:8e:20:fc:72:5f:c8:
15:61:f5:d4:c3:9b:af:b7:59:b4:b2:c1:9d:3b:6c:
a1:41:52:c8:a0:7a:c7:25:2b:81:4a:d3:5b:ef:c5:
c0:8a:92:87:81:02:c9:0a:30:a7:a1:67:9d:da:89:
8e:fb:f6:84:5f:7d:40:44:c8:1c:23:67:91:a5:a7:
5c:a3:e8:26:5a:03:e1:76:7d:6e:74:06:00:f8:9f:
24:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:49:A6:6D:B1:D2:07:49:8F:5D:BF:A8:30:3F:49:F1:E7:A4:15:39
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/LkmmbbHSB0mPXb-oMD9J8eekFTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.0.0/19
IPv6:
2a10:e400::/29
Signature Algorithm: sha256WithRSAEncryption
be:4a:6e:2b:60:d9:c3:28:2a:fd:89:45:29:49:cf:9f:c5:22:
1c:18:6c:26:18:b4:75:5c:0d:37:51:68:f4:0a:2b:d2:3f:86:
20:27:e6:8b:91:e9:85:8b:86:80:e5:2a:10:fa:d5:9e:90:0b:
0d:a5:bc:2c:15:84:87:7c:0d:73:ba:55:a3:5c:c3:40:e2:6a:
e2:67:c8:75:a4:fc:75:39:cc:01:43:3e:77:78:5d:fa:94:d5:
3d:42:c1:75:8e:b2:4e:df:c2:01:82:45:e0:c9:97:4f:47:3e:
b7:5a:99:c7:8a:09:f7:bc:82:61:7c:e3:96:54:32:d2:03:77:
10:a0:d7:01:3c:7b:6f:c8:74:57:31:4d:d9:79:e1:65:d9:3a:
78:ff:c7:21:4b:51:a3:74:80:ef:c2:f5:4f:ff:90:41:c5:0f:
16:f5:33:b9:68:2c:9f:72:97:2a:db:0c:b4:1c:f1:75:7c:ac:
f8:81:4b:1c:e4:12:08:9a:23:59:d1:52:a8:fa:70:a7:14:95:
e9:77:9b:14:1a:2d:1f:ac:ba:45:ed:e5:f8:52:20:85:5c:8a:
97:6f:c0:df:bb:d4:25:40:7b:93:45:1a:6a:50:00:9c:a5:3f:
b4:46:11:54:b3:37:73:f1:8d:26:9a:e9:54:5e:d0:9f:26:59:
df:8b:d4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org