Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/LwTGPP6qMFfs5f5FceKw1YWluYk.roa
File: LwTGPP6qMFfs5f5FceKw1YWluYk.roa (raw, json)
Hash identifier: H/m2iRx9HU9F6OJXZAaqpyKjYg6jxrKq5wPfjLn2NeU=
Subject key identifier: 2F:04:C6:3C:FE:AA:30:57:EC:E5:FE:45:71:E2:B0:D5:85:A5:B9:89
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0187BE4711A7A5CDB0F41F9937827C0B4BCF
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/LwTGPP6qMFfs5f5FceKw1YWluYk.roa
Signing time: Wed 26 Apr 2023 15:55:41 +0000
ROA not before: Wed 26 Apr 2023 15:55:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 89.187.13.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:be:47:11:a7:a5:cd:b0:f4:1f:99:37:82:7c:0b:4b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Apr 26 15:55:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f04c63cfeaa3057ece5fe4571e2b0d585a5b989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:aa:6c:9b:74:db:fa:b2:25:fc:29:41:be:b0:
7e:8b:b3:36:a7:7c:9a:13:3c:98:d4:24:be:7f:c9:
9e:d2:53:da:6b:48:9e:57:65:42:fb:59:f9:6e:28:
a4:8e:36:97:46:03:ea:cc:51:e1:b3:4e:58:04:aa:
32:70:38:1b:44:28:e5:c1:dc:a7:54:4b:74:15:e4:
11:ce:77:6e:12:77:f0:e9:03:a4:74:a5:77:66:c8:
a5:4e:7f:e2:b3:da:27:82:39:27:57:36:06:6a:b9:
a5:11:fd:2f:9f:db:12:f2:fd:b5:ec:67:bd:4f:b0:
a1:91:a1:9d:42:ff:e2:ff:21:a2:46:a6:82:4d:ea:
f8:86:c1:cf:09:d1:87:fd:2b:7b:4e:8b:9c:0c:4a:
e1:35:ed:70:e6:01:db:a0:7f:92:99:49:77:fd:73:
3b:4c:34:9b:9d:b5:84:db:1c:1b:e2:d9:ac:1f:f2:
89:d7:a4:2c:56:88:b3:bb:80:0a:07:6f:c1:a1:8e:
d3:5d:92:7a:de:e1:7a:3d:11:45:53:0f:a5:c1:45:
dc:b5:9d:90:cf:9c:41:65:e0:57:46:f7:6c:98:01:
f2:ef:63:fa:c0:bd:d5:00:5a:d4:51:39:d5:85:05:
56:34:c8:98:bf:55:68:a4:64:0c:19:28:de:6d:b4:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:04:C6:3C:FE:AA:30:57:EC:E5:FE:45:71:E2:B0:D5:85:A5:B9:89
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/LwTGPP6qMFfs5f5FceKw1YWluYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.13.0-89.187.14.255
89.187.31.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:e3:48:92:b5:2c:bc:f9:de:95:14:78:cd:2e:70:b7:c7:f9:
2b:73:0e:12:5e:8b:a3:1d:91:d0:2c:e1:f3:e1:58:5b:76:82:
bc:8a:6b:99:b4:39:cb:86:c4:3b:f2:39:66:ac:ad:75:fb:c8:
5c:a3:50:67:6d:81:f1:36:a9:8a:42:20:ee:39:dd:53:22:94:
68:76:23:0b:4a:ff:f7:78:4d:9c:3e:d4:68:c6:a9:56:75:7f:
5e:45:f2:17:fd:f9:ae:ad:e6:2d:84:71:a5:e2:3c:29:80:4a:
e5:55:ec:d3:09:9f:53:18:01:34:7d:ba:22:7e:a9:e5:d1:93:
8a:d9:88:89:29:33:5b:55:1a:31:1a:51:ba:c3:7c:34:1c:d9:
91:44:98:96:41:01:02:73:c1:93:bf:11:00:33:8b:d5:b3:80:
9f:02:11:04:4c:ed:52:c1:92:83:f6:ac:64:00:06:93:cb:2d:
ad:74:5d:33:e8:e5:cc:9a:85:c4:15:4a:46:a3:5e:52:ab:f0:
41:1e:33:1e:dc:db:d0:76:72:02:25:a5:d6:6b:9d:f8:e8:b6:
b2:6e:29:58:14:43:02:2b:54:15:0f:63:e3:f1:d5:79:25:25:
bb:2f:6b:14:35:17:35:39:65:0d:a8:94:48:ee:0c:a5:42:d3:
2a:ff:89:e5
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYe+RxGnpc2w9B+ZN4J8C0vPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjMwNDI2MTU1NTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjA0YzYzY2ZlYWEzMDU3ZWNlNWZlNDU3MWUyYjBkNTg1YTViOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqpsm3Tb+rIl/ClBvrB+i7M2p3ya
EzyY1CS+f8me0lPaa0ieV2VC+1n5biikjjaXRgPqzFHhs05YBKoycDgbRCjlwdyn
VEt0FeQRznduEnfw6QOkdKV3ZsilTn/is9ongjknVzYGarmlEf0vn9sS8v217Ge9
T7ChkaGdQv/i/yGiRqaCTer4hsHPCdGH/St7ToucDErhNe1w5gHboH+SmUl3/XM7
TDSbnbWE2xwb4tmsH/KJ16QsVoizu4AKB2/BoY7TXZJ63uF6PRFFUw+lwUXctZ2Q
z5xBZeBXRvdsmAHy72P6wL3VAFrUUTnVhQVWNMiYv1VopGQMGSjebbRnWQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFC8Exjz+qjBX7OX+RXHisNWFpbmJMB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvTHdUR1BQNnFNRmZzNWY1RmNlS3cxWVdsdVlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABZuw0D
BABZuw4DBABZux8wDQYJKoZIhvcNAQELBQADggEBAM3jSJK1LLz53pUUeM0ucLfH
+StzDhJei6MdkdAs4fPhWFt2gryKa5m0OcuGxDvyOWasrXX7yFyjUGdtgfE2qYpC
IO453VMilGh2IwtK//d4TZw+1GjGqVZ1f15F8hf9+a6t5i2EcaXiPCmASuVV7NMJ
n1MYATR9uiJ+qeXRk4rZiIkpM1tVGjEaUbrDfDQc2ZFEmJZBAQJzwZO/EQAzi9Wz
gJ8CEQRM7VLBkoP2rGQABpPLLa10XTPo5cyahcQVSkajXlKr8EEeMx7c29B2cgIl
pdZrnfjotrJuKVgUQwIrVBUPY+Px1XklJbsvaxQ1FzU5ZQ2olEjuDKVC0yr/ieU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:15 2023 by rpki-client on console-fra.rpki-client.org