Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LfCzJYA-IhE_SDNGQXqA6r0CMjA.roa
File: LfCzJYA-IhE_SDNGQXqA6r0CMjA.roa (raw, json)
Hash identifier: 1e+IjiJKpRN7UQZdKzQyEG/crOx6v5ed3AvfezAvdcY=
Subject key identifier: 2D:F0:B3:25:80:3E:22:11:3F:48:33:46:41:7A:80:EA:BD:02:32:30
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01894FEF9D760C9ADCF15425C2BDEDB30AF4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LfCzJYA-IhE_SDNGQXqA6r0CMjA.roa
Signing time: Thu 13 Jul 2023 15:47:30 +0000
ROA not before: Thu 13 Jul 2023 15:47:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208287
IP address blocks: 89.213.178.0/24 maxlen: 24
89.213.43.0/24 maxlen: 24
89.213.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 09:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4f:ef:9d:76:0c:9a:dc:f1:54:25:c2:bd:ed:b3:0a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 13 15:47:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2df0b325803e22113f483346417a80eabd023230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:67:1d:97:7d:52:1c:aa:2f:63:02:fd:98:b6:
fa:20:c5:21:27:74:c3:bd:8b:3a:7e:91:2b:c5:b1:
bf:6b:2a:b5:de:a2:fd:8a:ff:d6:8f:0a:b8:5f:1b:
1b:27:60:08:fd:b0:3d:c7:a2:e6:cd:c6:3e:f8:c7:
93:b4:3f:38:d9:bb:d8:63:6a:fa:b0:78:4f:bc:a3:
70:23:b8:24:a6:22:51:69:d1:0a:d0:f0:f8:6d:cd:
93:61:65:1e:89:ea:89:06:97:99:1f:1c:f1:8f:98:
dc:49:14:09:4a:90:4d:d5:8b:1e:92:49:f3:0d:ae:
18:e7:a9:82:4d:3d:0d:28:a5:84:18:c3:43:03:a3:
8f:56:72:80:95:0f:56:62:ba:d6:c6:d0:3a:c7:d8:
c6:23:53:71:53:6b:54:a2:4f:f0:27:c9:d3:40:0d:
0a:4d:d3:ab:92:e8:81:55:92:39:42:7e:1d:6a:e1:
5f:17:3a:6e:45:ea:8d:85:74:7c:79:bd:87:2b:64:
51:8d:40:82:73:a8:40:34:db:87:0f:72:2c:4d:57:
aa:76:b7:63:ab:2b:04:3a:8d:9d:ca:ed:07:1a:2a:
e2:50:07:ca:bb:a4:50:9c:3b:f1:5b:30:d5:de:f1:
24:6e:c8:74:e4:7b:12:89:b0:50:fa:67:ad:38:ff:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F0:B3:25:80:3E:22:11:3F:48:33:46:41:7A:80:EA:BD:02:32:30
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LfCzJYA-IhE_SDNGQXqA6r0CMjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.40.0/24
89.213.43.0/24
89.213.178.0/24
Signature Algorithm: sha256WithRSAEncryption
51:e2:43:f5:1c:c5:97:e7:c5:5a:41:e6:8b:71:61:e7:6f:1f:
26:c0:77:eb:15:16:38:f8:f7:0e:cf:50:5a:b3:8f:91:26:6a:
20:cc:7d:b1:f9:b9:42:b3:a5:48:82:eb:82:1e:90:09:10:66:
d7:e4:ea:b4:89:40:e4:82:75:0e:7f:33:0a:16:24:7e:01:56:
db:9d:81:e6:e2:77:c7:59:1b:43:cc:26:2c:82:bb:87:88:a3:
e8:d5:b1:9c:91:79:70:82:48:86:c9:2b:11:14:a9:47:5d:c3:
29:40:d2:3b:96:34:05:25:18:0d:1d:98:9f:ff:c5:9a:69:79:
b2:2b:2e:aa:29:e5:f7:1f:a1:e1:a9:3e:20:7e:99:62:2f:fb:
b4:a8:1a:bd:00:9a:e2:c7:e2:d9:64:4c:79:43:23:29:64:89:
31:b7:93:c3:48:c2:90:e2:2b:e5:4d:f1:2f:d1:00:59:6f:cb:
b9:0d:b0:ee:d8:28:74:55:08:5c:a6:36:da:ab:ee:2e:69:7f:
4b:6d:29:cc:71:66:c8:be:07:09:be:0c:f8:9f:ad:ce:47:45:
cd:64:7d:35:93:f5:d0:6e:b5:85:62:92:63:6a:cd:78:07:2d:
4a:e7:11:7c:7e:d3:d6:25:02:00:a8:7f:84:00:35:8c:02:73:
16:21:7e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:22 2024 by rpki-client on console-ams.rpki-client.org