Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LvQWn7lA_mwB47tE4zofN2IO200.roa
File: LvQWn7lA_mwB47tE4zofN2IO200.roa (raw, json)
Hash identifier: k8fc9+ixMUCfmaP7JSfZgh3wEAKRlwxwcIM+gi9muLI=
Subject key identifier: 2E:F4:16:9F:B9:40:FE:6C:01:E3:BB:44:E3:3A:1F:37:62:0E:DB:4D
Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial: 0188BF0D5BC448F07508F3015CA3A9A2673E
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LvQWn7lA_mwB47tE4zofN2IO200.roa
Signing time: Thu 15 Jun 2023 12:35:03 +0000
ROA not before: Thu 15 Jun 2023 12:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208728
IP address blocks: 89.255.207.0/24 maxlen: 24
185.223.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:0d:5b:c4:48:f0:75:08:f3:01:5c:a3:a9:a2:67:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
Validity
Not Before: Jun 15 12:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ef4169fb940fe6c01e3bb44e33a1f37620edb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:80:25:46:8f:a2:67:cd:12:f1:2f:bd:0f:
ab:ee:63:2c:a4:57:43:a4:99:08:0c:3f:35:6a:c5:
e3:2d:58:f3:92:d1:e5:55:4a:04:8b:66:e2:89:21:
1d:f5:8b:54:16:a8:6e:ae:19:ce:78:e4:67:21:02:
2e:5e:89:d0:f2:fc:9b:d3:36:89:4b:da:4e:0c:c8:
7b:22:47:43:d2:79:08:c8:4f:e5:90:56:73:25:66:
a7:c0:68:02:c8:0a:c7:38:1d:f0:ab:02:70:f4:2e:
ca:6c:8d:a8:41:be:d2:c3:6d:54:30:5b:51:78:2c:
f5:5a:83:7d:ca:b3:91:27:69:9f:f5:d0:14:c2:1b:
53:11:85:25:c1:95:3b:ef:16:53:0a:ac:28:ba:03:
a5:d9:14:d8:41:ff:3c:d3:af:2e:20:a8:5a:08:73:
10:a8:19:f9:54:54:ed:e7:2c:3c:2f:41:a5:9c:bd:
c1:26:b4:7d:90:07:ec:d0:43:8a:41:83:af:e9:93:
f1:c1:25:fb:31:47:f6:4e:2c:f1:67:43:60:70:31:
0c:71:f5:55:ad:31:c0:ef:2b:51:fe:95:41:af:e6:
9d:d1:80:eb:5a:2b:b1:c3:fc:2f:0a:87:41:78:a8:
3d:3d:a1:e4:d9:bf:e1:6a:03:19:25:bb:d9:a3:a3:
2e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F4:16:9F:B9:40:FE:6C:01:E3:BB:44:E3:3A:1F:37:62:0E:DB:4D
X509v3 Authority Key Identifier:
keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LvQWn7lA_mwB47tE4zofN2IO200.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.255.207.0/24
185.223.85.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:cb:27:80:b7:e9:ee:ea:c8:5a:02:74:18:bd:c0:1d:2b:9b:
65:b8:ab:09:4a:79:10:1e:1c:ad:cc:9b:6a:c1:d6:06:86:ef:
16:2f:3b:a7:09:9d:7b:12:02:83:f5:5d:ab:2a:c8:00:49:87:
d6:38:52:fb:88:15:d3:68:28:b9:b6:f4:9e:23:ee:a5:dc:9e:
4a:d6:e7:bc:9c:f7:a8:d0:4d:6d:ce:2a:7a:4a:07:40:b5:c5:
96:2b:8b:07:d3:a1:2e:56:88:a7:14:7d:f5:da:1f:66:4d:c7:
96:7f:5b:54:c1:92:ed:e4:b6:ff:66:c0:1a:3f:8f:d6:1e:7b:
4d:3a:be:7b:2f:4a:1a:ae:d1:c5:cc:39:23:15:05:cc:aa:be:
9a:82:52:d8:f5:84:b7:29:7b:9a:2b:77:c2:61:98:92:f9:0e:
b6:26:64:fa:53:8b:d6:7a:29:0a:73:ff:08:d2:b5:93:ac:cc:
01:c7:60:91:c5:ad:e7:b8:1b:0d:52:99:2c:24:4a:5c:de:d9:
8d:cd:20:c7:1f:75:91:24:a8:29:2c:a0:8a:7b:b2:0e:1e:0a:
c9:f6:65:7c:58:91:03:2f:38:14:05:af:d6:8d:31:1c:49:ae:
a2:46:c1:16:91:e8:49:b5:41:bc:78:e8:ed:2a:63:ac:33:79:
3b:6d:bc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:03 2024 by rpki-client on console-ams.rpki-client.org