Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/Lpstn0sn9S2YX2p3O5MYBrVt4w0.roa
File: Lpstn0sn9S2YX2p3O5MYBrVt4w0.roa (raw, json)
Hash identifier: p06ScGq0laFbg5qhLFEjYv4frWRPyAtbaJY4j20d7tk=
Subject key identifier: 2E:9B:2D:9F:4B:27:F5:2D:98:5F:6A:77:3B:93:18:06:B5:6D:E3:0D
Certificate issuer: /CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Certificate serial: 0188070F64BEDE1E52CAE9CD746163A3B9B6
Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/Lpstn0sn9S2YX2p3O5MYBrVt4w0.roa
Signing time: Wed 10 May 2023 19:07:09 +0000
ROA not before: Wed 10 May 2023 19:07:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 185.230.230.0/24 maxlen: 24
185.204.92.0/24 maxlen: 24
185.230.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:07:0f:64:be:de:1e:52:ca:e9:cd:74:61:63:a3:b9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Validity
Not Before: May 10 19:07:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e9b2d9f4b27f52d985f6a773b931806b56de30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5a:b9:0f:16:5d:20:88:9d:e4:07:d6:51:7e:
75:ab:17:83:79:4a:5d:c9:95:80:32:e6:fc:b0:a4:
c4:1c:c6:64:4a:7f:f3:d9:fa:ac:19:75:91:7f:84:
b8:15:48:01:fb:a8:2e:82:4d:55:c4:f5:b1:9c:b9:
dc:e9:19:a0:98:b2:88:bb:a0:35:80:cf:99:5e:cf:
87:36:b1:19:34:37:22:0e:ed:10:15:68:05:1f:8d:
ec:ec:33:b4:2e:6c:b5:d5:6d:27:72:c1:51:a2:67:
c2:ca:0e:fc:69:1b:63:52:2d:f7:62:95:ef:71:7b:
1c:d0:b8:e8:eb:14:ba:ad:69:3b:4c:c8:a7:54:ac:
7a:fb:da:d9:26:aa:c1:43:96:de:3a:49:d4:ee:40:
73:c9:23:bd:20:31:d1:c9:7c:f3:a2:7b:b3:c6:e5:
d4:04:6d:a3:a9:d7:33:76:57:09:ef:99:37:2a:de:
6c:fc:e9:6f:48:11:ac:e3:9d:cb:85:8d:58:da:a8:
de:4f:9a:ee:5c:ec:12:12:f4:88:25:6a:21:33:48:
64:5f:c4:d7:08:e5:1f:77:2b:d4:73:d9:a2:e7:f3:
54:ca:ea:69:d1:0d:6f:04:2f:61:89:b7:c6:ba:e3:
ef:48:e9:04:ab:74:d5:6f:fd:d0:b2:db:58:c9:07:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9B:2D:9F:4B:27:F5:2D:98:5F:6A:77:3B:93:18:06:B5:6D:E3:0D
X509v3 Authority Key Identifier:
keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/Lpstn0sn9S2YX2p3O5MYBrVt4w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.92.0/24
185.230.230.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:05:d9:86:95:f2:f3:fc:e3:9e:c6:f2:c5:d5:bc:45:ef:72:
ba:b8:e8:92:44:97:80:ec:ff:31:5e:fc:1a:ee:15:53:bd:ef:
9a:1c:86:2f:5a:30:37:54:30:16:94:be:93:94:bb:36:34:c1:
22:ab:7a:97:c9:92:c4:be:5a:38:fb:42:60:b6:a5:cb:a3:03:
5c:67:1e:93:6c:ac:83:a5:fc:58:02:6a:0b:93:b0:2d:02:ad:
e8:5e:f9:5a:89:05:a8:12:3c:9f:db:56:c7:1b:b9:c7:85:f6:
9a:6b:e0:83:c7:70:84:85:b3:bf:12:9f:dc:9b:97:67:68:bf:
69:5e:c7:95:3b:e6:62:36:0c:d4:73:98:93:80:6e:ce:a9:43:
7c:3c:4b:31:81:5e:d4:8b:61:c8:d2:a2:91:e8:ec:3d:fd:e9:
97:48:22:8f:e2:cc:b0:4d:9c:05:ca:15:9a:49:b8:c9:16:c3:
73:12:03:27:99:85:e8:70:bd:8c:43:92:f3:b0:6e:c7:05:63:
99:08:db:a9:5c:bb:c2:ca:00:ca:c8:04:05:21:e6:92:13:cb:
e1:d6:e1:32:04:c5:02:c0:13:14:a5:a1:01:bc:a7:07:4f:43:
f5:6a:ec:eb:bd:c7:29:8d:fd:87:07:8d:83:bc:87:8b:98:31:
9b:dc:ea:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:06 2024 by rpki-client on console-ams.rpki-client.org