Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LMKvn9dkIvHlGVDlDjg8a2Fn7Cc.roa
File: LMKvn9dkIvHlGVDlDjg8a2Fn7Cc.roa (raw, json)
Hash identifier: raIjiOxDUQr8PNXOR9wVIzibDiQhzIPlgg8Llip7VNU=
Subject key identifier: 2C:C2:AF:9F:D7:64:22:F1:E5:19:50:E5:0E:38:3C:6B:61:67:EC:27
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0187FF6BD473F3B5DD3C81F0CA22D9ECF055
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LMKvn9dkIvHlGVDlDjg8a2Fn7Cc.roa
Signing time: Tue 09 May 2023 07:31:09 +0000
ROA not before: Tue 09 May 2023 07:31:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 88.151.56.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:6b:d4:73:f3:b5:dd:3c:81:f0:ca:22:d9:ec:f0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 9 07:31:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cc2af9fd76422f1e51950e50e383c6b6167ec27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:16:97:5c:7e:49:0a:36:5a:98:a9:0e:f2:
8c:83:66:94:ca:0e:91:2e:2a:e4:5f:09:af:9d:20:
c8:fa:81:64:2b:74:2d:97:50:79:00:aa:af:4a:de:
84:1e:19:88:0c:2e:94:25:af:ee:24:48:b9:55:14:
da:e1:0a:1a:cb:88:f3:c6:c5:b4:eb:95:38:d5:f3:
af:19:65:53:0d:31:06:52:0c:09:c1:30:84:cc:96:
26:5d:8f:70:ac:0b:b3:f2:8c:ea:8f:69:6e:6a:7e:
80:ef:a1:c5:2d:dd:e3:a1:c8:df:f1:b1:84:d9:a9:
c3:fc:84:58:6a:cb:7e:4f:80:ca:24:c9:6c:f1:cc:
0d:c3:39:82:b5:36:bf:8f:3d:e4:71:64:43:19:15:
60:12:39:97:32:2d:be:7d:9c:d1:2f:36:f1:93:92:
62:d9:81:c9:d0:55:de:80:0f:9b:e4:b3:59:3b:8a:
d9:5a:3d:fa:65:2b:ce:08:a8:2e:a3:66:1c:c9:8a:
3a:b4:cf:d6:7c:c9:72:b9:b9:c6:a5:72:20:a9:f0:
2b:17:e2:04:b8:60:2b:60:9f:6c:cc:63:84:ff:62:
35:7f:9a:6e:be:43:19:f5:49:08:ef:59:7a:e2:83:
35:ec:ee:ab:61:19:47:1e:c7:88:14:e3:43:0b:11:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C2:AF:9F:D7:64:22:F1:E5:19:50:E5:0E:38:3C:6B:61:67:EC:27
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LMKvn9dkIvHlGVDlDjg8a2Fn7Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:32:75:4d:46:d8:1b:10:d1:6b:51:0d:10:e2:1a:0f:26:a2:
92:9e:72:61:8a:11:b3:8b:81:86:06:fe:92:fa:07:fc:ee:c7:
96:93:cc:4f:cd:d0:b5:f8:f8:4f:d2:f1:94:d3:5c:f6:75:94:
4e:ee:cb:9a:a9:26:cf:20:f6:0d:5d:eb:1d:c3:2c:85:0f:1b:
37:6b:df:37:3e:12:b8:23:e2:05:5b:32:38:5d:2d:83:30:d7:
20:d2:22:c8:3a:28:dd:89:ec:8b:a9:1e:d3:89:9f:b2:83:ca:
5d:85:ff:94:fc:e3:24:bd:d8:ae:75:5f:0e:c1:cd:84:7c:3b:
bd:b9:d5:b7:63:c2:85:17:ec:6c:a0:d1:bd:61:bf:53:72:25:
55:3c:3d:44:e2:e9:60:2d:0f:9e:54:95:80:a6:6f:17:91:bd:
4a:3f:dc:04:0f:86:81:ed:01:91:2b:8b:2d:11:bf:f4:fa:0f:
3b:83:0a:9c:35:be:3f:d1:45:e9:62:8e:c1:90:fc:f1:7d:47:
32:87:b1:22:59:a6:42:e6:ae:87:17:1e:b2:36:c5:5e:77:5c:
83:72:2c:72:37:4d:2b:2f:64:b7:da:db:36:c5:ef:0d:70:ae:
5d:fb:ca:38:18:4c:68:ce:af:af:d9:38:c6:84:c7:b5:82:a9:
f3:15:3c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org