Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/LFIc_E0XjPUweqmR44czPCkA3IM.roa
File: LFIc_E0XjPUweqmR44czPCkA3IM.roa (raw, json)
Hash identifier: M7VKoQeUvD+Lcof9LrDANpJiVH12+rEmm4PCBalWNfA=
Subject key identifier: 2C:52:1C:FC:4D:17:8C:F5:30:7A:A9:91:E3:87:33:3C:29:00:DC:83
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0189C6E7FBD36CF92C9F4C86CEA2E130A3CA
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/LFIc_E0XjPUweqmR44czPCkA3IM.roa
Signing time: Sat 05 Aug 2023 18:13:59 +0000
ROA not before: Sat 05 Aug 2023 18:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 188.241.243.0/24 maxlen: 24
185.255.39.0/24 maxlen: 24
188.214.209.0/24 maxlen: 24
185.241.210.0/23 maxlen: 24
188.241.214.0/24 maxlen: 24
93.115.255.0/24 maxlen: 24
93.115.254.0/23 maxlen: 24
188.213.203.0/24 maxlen: 24
188.213.202.0/24 maxlen: 24
193.23.129.0/24 maxlen: 24
193.23.128.0/24 maxlen: 24
213.232.93.0/24 maxlen: 24
213.232.92.0/24 maxlen: 24
213.232.94.0/23 maxlen: 24
45.156.157.0/24 maxlen: 24
89.33.85.0/24 maxlen: 24
89.33.84.0/24 maxlen: 24
185.255.169.0/24 maxlen: 24
185.255.170.0/23 maxlen: 24
185.255.170.0/24 maxlen: 24
89.35.154.0/24 maxlen: 24
89.35.155.0/24 maxlen: 24
188.212.132.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
188.212.155.0/24 maxlen: 24
188.212.158.0/24 maxlen: 24
87.247.148.0/24 maxlen: 24
87.247.150.0/24 maxlen: 24
87.247.149.0/24 maxlen: 24
87.247.151.0/24 maxlen: 24
188.240.224.0/24 maxlen: 24
188.240.225.0/24 maxlen: 24
188.240.230.0/24 maxlen: 24
188.240.227.0/24 maxlen: 24
188.240.233.0/24 maxlen: 24
91.188.205.0/24 maxlen: 24
91.188.204.0/24 maxlen: 24
91.188.206.0/24 maxlen: 24
91.188.207.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
185.135.140.0/24 maxlen: 24
185.135.141.0/24 maxlen: 24
185.135.143.0/24 maxlen: 24
185.238.10.0/24 maxlen: 24
188.241.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c6:e7:fb:d3:6c:f9:2c:9f:4c:86:ce:a2:e1:30:a3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 5 18:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c521cfc4d178cf5307aa991e387333c2900dc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:48:28:3b:44:1c:e9:60:d9:c0:25:c6:20:
24:61:8a:f3:75:85:75:3d:c1:36:55:f5:49:a2:b3:
8b:57:61:04:21:dc:0c:7b:76:98:28:db:06:2c:f6:
46:32:23:fb:c4:46:28:da:4c:04:7c:f5:4b:06:0b:
70:2c:69:21:3f:ef:5a:1a:09:91:71:28:8d:bc:10:
d2:2d:5a:03:88:bf:35:a9:0e:7f:7b:90:fb:98:43:
d9:d2:6a:53:dd:44:88:8b:1a:92:b1:ba:13:ff:11:
10:c5:fe:da:11:f6:84:02:9d:cc:f2:ef:9f:fe:3c:
f5:31:af:fc:34:36:be:23:4f:42:a4:8e:7f:b4:da:
63:c2:ae:2b:16:d0:87:70:06:e0:12:e1:ef:53:fd:
8e:2a:3b:59:45:0e:a8:46:55:bc:82:8e:43:52:28:
61:14:e8:02:09:b7:c1:9d:1e:c4:63:af:fe:e6:07:
f0:57:c4:bf:4e:9d:9b:26:1a:fe:96:b3:fc:74:20:
ac:f2:0e:f9:cb:f0:de:95:8e:5c:fc:99:46:90:f4:
6f:77:50:0b:dc:19:f1:9c:a8:9a:4f:50:29:ba:bc:
31:2b:af:35:5d:38:16:07:b8:8e:28:a0:fe:97:5f:
66:6f:f7:a5:53:b7:15:60:74:e4:bc:c5:ea:6a:b0:
d5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:52:1C:FC:4D:17:8C:F5:30:7A:A9:91:E3:87:33:3C:29:00:DC:83
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/LFIc_E0XjPUweqmR44czPCkA3IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.157.0/24
87.247.148.0/22
89.33.84.0/23
89.35.154.0/23
89.37.63.0/24
91.188.204.0/22
93.115.254.0/23
185.135.140.0/23
185.135.143.0/24
185.238.10.0/24
185.241.210.0/23
185.255.39.0/24
185.255.169.0-185.255.171.255
188.212.132.0/23
188.212.155.0/24
188.212.158.0/24
188.213.202.0/23
188.214.209.0/24
188.240.224.0/23
188.240.227.0/24
188.240.230.0/24
188.240.233.0/24
188.241.110.0/24
188.241.214.0/24
188.241.243.0/24
193.23.128.0/23
213.232.92.0/22
Signature Algorithm: sha256WithRSAEncryption
53:6c:05:2f:fa:91:a0:ba:13:74:21:a2:5b:9a:cf:9f:b4:9c:
fa:61:84:84:0c:b6:e5:b2:d0:db:46:65:69:50:1a:b8:18:a6:
70:3d:91:bc:4e:70:12:36:63:b3:0f:07:41:ad:2c:18:34:d0:
3f:2b:eb:01:89:6f:69:08:50:ce:7d:64:d9:c9:8e:68:5a:f1:
44:fe:d6:b1:ba:7b:57:89:f2:4d:06:ad:2f:3b:85:9a:51:7d:
61:ea:fa:3b:c5:7c:6c:2b:6e:b8:69:0f:49:3b:fb:32:96:6e:
7e:ea:73:65:94:46:23:c0:c6:10:34:42:ee:66:75:6c:ad:0b:
99:ad:22:62:b3:74:30:ed:53:f6:b8:17:bb:95:be:08:29:28:
3a:1f:c8:d9:50:11:40:ae:6d:71:6c:a1:fc:7b:c7:98:4c:ce:
a9:22:9c:73:c0:d7:4c:b9:65:6e:64:b9:e6:c0:aa:6b:f2:85:
e6:db:40:ca:8b:48:0b:44:5e:45:75:1d:6a:f8:32:cc:2e:cd:
41:f4:7e:d9:20:da:9e:f3:c4:2c:5b:31:84:96:29:13:ca:82:
94:06:51:fd:64:d3:4c:76:1f:d4:47:5b:be:4a:15:90:3b:1a:
bd:07:35:3e:fc:15:74:f6:95:4f:ea:a7:4d:76:eb:79:42:1f:
4f:4a:4a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 10:37:43 2023 by rpki-client on console-fra.rpki-client.org