Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/LMSCrB8Ai88ChzayOPxr8wtiJso.roa
File: LMSCrB8Ai88ChzayOPxr8wtiJso.roa (raw, json)
Hash identifier: YSt3Nj8MM175149zmTtzdJLXJhgUGbIPIFCMrKYjmfU=
Subject key identifier: 2C:C4:82:AC:1F:00:8B:CF:02:87:36:B2:38:FC:6B:F3:0B:62:26:CA
Certificate issuer: /CN=0dde6317311fe6d538577c17fec982b82eea9abd
Certificate serial: 01856E2F9C91493E31C475C58CE9199FBFF6
Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/LMSCrB8Ai88ChzayOPxr8wtiJso.roa
Signing time: Sun 01 Jan 2023 16:34:52 +0000
ROA not before: Sun 01 Jan 2023 16:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9144
IP address blocks: 79.99.92.0/24 maxlen: 24
79.99.93.0/24 maxlen: 24
79.99.95.0/24 maxlen: 24
79.99.94.0/24 maxlen: 24
195.5.179.0/24 maxlen: 24
2a0b:c4c6::/32 maxlen: 32
2a0b:c4c3::/32 maxlen: 32
2a0b:c4c0::/30 maxlen: 30
2a0b:c4c4::/30 maxlen: 30
2a0b:c4c7::/32 maxlen: 32
2a0b:c4c1::/32 maxlen: 32
2a0b:c4c4::/32 maxlen: 32
2a0b:c4c0::/32 maxlen: 32
2a0b:c4c2::/32 maxlen: 32
2a0b:c4c5::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:9c:91:49:3e:31:c4:75:c5:8c:e9:19:9f:bf:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd
Validity
Not Before: Jan 1 16:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cc482ac1f008bcf028736b238fc6bf30b6226ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:c6:6e:c5:82:6a:0f:0d:cc:74:84:96:a9:
3d:8c:29:48:3e:f8:3d:9f:c1:06:8d:bb:f0:4e:3b:
26:6a:2f:f2:a4:e5:19:d0:22:6d:d8:c3:f4:0e:c3:
96:72:9a:95:12:96:91:c6:9c:05:13:1b:1c:a8:13:
35:36:e4:2a:41:63:ec:e3:e8:34:78:7c:fb:59:24:
5e:9e:56:ea:24:c3:e2:39:17:b6:b7:a8:dd:0f:d2:
7b:29:61:5a:f8:ba:43:37:1d:e5:1b:32:97:33:7e:
8c:f4:9b:f3:09:bd:f3:d1:a6:2c:6a:e6:d4:c1:ab:
a6:0b:fe:ab:7c:be:35:5d:49:99:a9:a0:04:ca:3d:
43:b8:bd:f6:75:42:9b:b0:3b:cc:dc:e6:87:7e:de:
74:c3:c4:c2:c4:f1:52:f6:24:7d:e4:56:80:05:bd:
b3:0b:f5:0c:1e:d3:03:2f:db:65:0d:05:2d:af:3f:
05:5f:89:87:9e:3c:5b:f1:91:0e:c9:6b:9a:ed:ef:
b0:82:2b:c9:ba:bc:0f:3b:36:5d:53:36:68:7f:db:
de:55:00:1f:f1:77:8d:bb:c7:3a:97:3e:1e:96:13:
6e:98:5b:42:17:57:59:05:8c:d4:b0:01:6f:a6:13:
c0:d9:b1:e1:02:8b:89:43:35:cd:37:a5:44:2b:82:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C4:82:AC:1F:00:8B:CF:02:87:36:B2:38:FC:6B:F3:0B:62:26:CA
X509v3 Authority Key Identifier:
keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/LMSCrB8Ai88ChzayOPxr8wtiJso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.92.0/22
195.5.179.0/24
IPv6:
2a0b:c4c0::/29
Signature Algorithm: sha256WithRSAEncryption
44:ca:cf:e3:9b:f8:bf:5d:8b:88:a3:2f:2f:f9:5c:56:f9:e1:
64:7b:1f:97:90:8f:e6:13:ec:83:c4:6b:31:62:47:c9:b1:5a:
37:7e:11:c2:79:8c:eb:e5:c4:ca:ed:14:a2:62:41:8a:e5:a3:
4b:3f:52:94:2b:bc:63:08:95:54:3d:5a:4a:24:8b:72:bf:f4:
d8:c7:05:94:d4:1e:13:62:b8:50:d9:3e:cc:cf:63:91:13:8a:
ad:4d:34:69:20:d8:fe:41:5d:2c:8e:1d:7d:9d:29:7f:c8:30:
ed:1b:46:93:08:81:59:b5:6d:3b:3e:c9:f3:1f:77:51:80:57:
7d:a1:f1:3b:7d:f9:5e:58:56:87:81:03:34:4c:81:2c:49:02:
5c:d4:5f:e6:23:1e:d5:c2:5f:4d:ee:cc:0e:47:88:94:f1:83:
08:38:1e:e3:b6:2e:24:36:ff:33:22:7f:fd:ba:ee:1c:e4:a5:
8a:6e:e8:8b:96:88:df:0b:50:93:2a:fa:f5:6d:0d:fb:3f:bd:
17:0d:f2:8a:5e:1f:cc:4c:35:3d:98:5e:b5:e4:c7:1a:4e:81:
c2:df:3b:e4:80:dc:f9:c6:b4:d9:1c:85:a8:57:f0:a2:17:99:
9c:a3:67:18:54:aa:25:b0:2b:5e:73:72:f4:ce:d8:ae:d1:26:
6b:ea:ad:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:07 2024 by rpki-client on console-ams.rpki-client.org