Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LNbzLFzZjtiIAMoVJtV2DHGKFdY.roa
File: LNbzLFzZjtiIAMoVJtV2DHGKFdY.roa (raw, json)
Hash identifier: Xlg/fhCtqF6GETRCWy/WWSrexSkTb8mT9TkzK5k32AE=
Subject key identifier: 2C:D6:F3:2C:5C:D9:8E:D8:88:00:CA:15:26:D5:76:0C:71:8A:15:D6
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CB19F54DCA7604A1D0DAEE4031481C49D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LNbzLFzZjtiIAMoVJtV2DHGKFdY.roa
Signing time: Thu 28 Dec 2023 18:10:58 +0000
ROA not before: Thu 28 Dec 2023 18:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
89.33.195.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b1:9f:54:dc:a7:60:4a:1d:0d:ae:e4:03:14:81:c4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Dec 28 18:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cd6f32c5cd98ed88800ca1526d5760c718a15d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:5d:c8:40:9e:5d:e7:61:ef:8f:6d:66:d5:
f7:f6:e0:a5:41:20:a0:83:0a:da:32:f7:06:d3:7f:
fc:1b:a2:8b:0b:a6:e7:12:57:ac:18:f7:a7:9f:5e:
43:97:0e:1c:08:a7:8a:28:32:a8:d2:58:5c:06:8a:
49:5e:62:14:c9:0d:e9:91:92:69:33:c6:6c:f0:d8:
62:74:ad:cd:1c:43:76:dd:ef:d6:96:dc:71:d3:53:
41:db:b0:1e:0e:b7:c3:17:fb:53:c4:a2:f2:d5:67:
88:7e:8c:6a:51:7c:b7:81:99:29:63:b0:e7:58:5f:
12:90:ed:87:45:6d:ee:66:1f:3e:c3:ac:5a:b1:c4:
99:4a:e1:18:25:b1:bc:b0:4c:2c:86:a0:b9:42:51:
fa:3d:f3:f9:a7:15:5c:1f:21:85:63:af:b8:a5:e8:
e0:82:57:b3:86:71:f4:2c:21:ac:58:1a:db:4c:85:
fe:58:f3:b4:d3:63:dd:28:b0:f2:17:ab:60:8b:30:
f4:56:af:76:9e:a4:3c:b1:7f:cf:6b:e9:cc:60:c9:
29:f0:35:77:16:bd:46:84:8a:f4:af:79:4d:32:7d:
5a:e8:ec:51:2d:f9:9a:e4:7a:5b:c9:fc:a9:a5:70:
c1:f7:ce:a2:ae:a6:0a:78:87:d1:df:a7:13:50:ff:
d9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D6:F3:2C:5C:D9:8E:D8:88:00:CA:15:26:D5:76:0C:71:8A:15:D6
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LNbzLFzZjtiIAMoVJtV2DHGKFdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.195.0/24
89.42.81.0-89.42.83.255
89.46.3.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c3:e0:2e:fc:2d:4c:b9:6e:28:66:83:42:24:4b:5b:d5:50:
61:de:e1:0a:c7:78:37:73:8c:63:90:79:77:81:05:09:e9:41:
5c:51:15:b7:4d:24:bd:0f:ac:80:cb:01:9a:e4:47:6a:d7:58:
73:6b:46:eb:0e:56:e1:12:8c:80:2e:32:9a:21:0c:b2:79:f1:
b1:e2:23:29:3c:81:e3:9f:f4:4e:9c:3a:2a:0b:e2:c0:ac:04:
0f:88:73:bb:87:34:94:19:45:54:f2:e8:73:73:0c:a8:dc:15:
9f:59:29:d8:c4:32:50:46:4d:96:e0:bb:97:1b:c8:c6:77:e8:
41:8c:27:34:bd:7c:6a:f6:a4:b1:7f:85:37:17:26:f7:18:02:
c2:4d:6a:c6:27:f5:38:8d:53:71:fa:a0:dd:26:a6:8a:87:51:
e2:64:57:f5:91:ce:91:fb:79:fa:3a:ba:b3:d7:a4:b7:d9:ae:
02:4f:47:79:9e:db:86:e7:bb:71:a1:02:3e:db:4a:7d:51:4a:
4b:33:2b:1e:49:4f:0b:e1:c1:de:c9:43:c6:35:6a:ea:a7:8c:
a9:94:06:f5:d5:f3:41:a7:8d:cc:60:8d:ad:49:aa:ca:ea:17:
69:bf:f1:09:a4:bc:cd:ac:f6:44:c0:2a:d5:34:d5:24:d2:d9:
73:c5:a4:1b
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYyxn1Tcp2BKHQ2u5AMUgcSdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMxMjI4MTgxMDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2Q2ZjMyYzVjZDk4ZWQ4ODgwMGNhMTUyNmQ1NzYwYzcxOGExNWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMRdyECeXedh749tZtX39uClQSCg
gwraMvcG03/8G6KLC6bnElesGPenn15Dlw4cCKeKKDKo0lhcBopJXmIUyQ3pkZJp
M8Zs8NhidK3NHEN23e/Wltxx01NB27AeDrfDF/tTxKLy1WeIfoxqUXy3gZkpY7Dn
WF8SkO2HRW3uZh8+w6xascSZSuEYJbG8sEwshqC5QlH6PfP5pxVcHyGFY6+4pejg
glezhnH0LCGsWBrbTIX+WPO002PdKLDyF6tgizD0Vq92nqQ8sX/Pa+nMYMkp8DV3
Fr1GhIr0r3lNMn1a6OxRLfma5HpbyfyppXDB986irqYKeIfR36cTUP/ZDwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFCzW8yxc2Y7YiADKFSbVdgxxihXWMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvTE5iekxGelpqdGlJQU1vVkp0VjJESEdLRmRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAWSHDMAwD
BABZKlEDBAJZKlADBABZLgMwDQYJKoZIhvcNAQELBQADggEBAFbD4C78LUy5bihm
g0IkS1vVUGHe4QrHeDdzjGOQeXeBBQnpQVxRFbdNJL0PrIDLAZrkR2rXWHNrRusO
VuESjIAuMpohDLJ58bHiIyk8geOf9E6cOioL4sCsBA+Ic7uHNJQZRVTy6HNzDKjc
FZ9ZKdjEMlBGTZbgu5cbyMZ36EGMJzS9fGr2pLF/hTcXJvcYAsJNasYn9TiNU3H6
oN0mpoqHUeJkV/WRzpH7efo6urPXpLfZrgJPR3me24bnu3GhAj7bSn1RSkszKx5J
Twvhwd7JQ8Y1auqnjKmUBvXV80Gnjcxgja1JqsrqF2m/8QmkvM2s9kTAKtU01STS
2XPFpBs=
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:12 2024 by rpki-client on console-ams.rpki-client.org