Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/LVZbSQQlhb2TmcV5w3HWYacvbbc.roa
File: LVZbSQQlhb2TmcV5w3HWYacvbbc.roa (raw, json)
Hash identifier: wSvKAzTLs7jfBmAWzv1rJnRj7riu9DWiEEZIcxtkaAc=
Subject key identifier: 2D:56:5B:49:04:25:85:BD:93:99:C5:79:C3:71:D6:61:A7:2F:6D:B7
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018C3EB1E595F6690A1A88DB32C2C5D8E6D3
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/LVZbSQQlhb2TmcV5w3HWYacvbbc.roa
Signing time: Wed 06 Dec 2023 10:34:55 +0000
ROA not before: Wed 06 Dec 2023 10:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 5.144.178.0/24 maxlen: 24
5.144.177.0/24 maxlen: 24
5.144.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Dec 2023 09:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:b1:e5:95:f6:69:0a:1a:88:db:32:c2:c5:d8:e6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Dec 6 10:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d565b49042585bd9399c579c371d661a72f6db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ba:ce:ea:a1:3a:11:e8:dc:6f:9c:4b:46:53:
f0:a1:64:7f:41:43:78:c7:a6:62:9d:ce:8a:7c:5b:
2b:2e:9b:b0:f9:5d:aa:d5:6e:32:6c:64:32:45:bc:
9e:e3:1c:57:7f:5b:3e:f1:2f:f5:33:64:34:82:f9:
77:a0:db:6c:27:e7:d6:a5:e9:21:83:b4:d3:00:85:
c9:86:23:14:0b:19:f4:15:e6:d2:0c:c4:0e:ec:40:
75:3c:9d:83:a8:ca:1b:5f:7d:0e:3a:e5:ea:d5:5e:
ee:94:a8:0e:86:b7:85:ba:fc:ee:41:96:3e:52:fe:
1e:8c:7b:b1:2e:25:4e:5d:4d:0d:a2:e5:7f:05:79:
c9:74:93:7b:b1:a8:ae:fc:da:4a:76:a1:66:e4:2e:
03:33:10:e5:ea:46:b1:46:90:25:02:c7:1d:a9:a1:
ba:b7:28:44:b1:d1:35:5a:e0:2c:d7:d6:d3:4b:ab:
08:e8:c3:52:41:5c:d0:98:59:1c:92:66:96:45:e1:
cd:c3:be:53:98:48:be:de:25:67:55:57:24:ef:90:
7a:88:7b:03:92:63:90:d0:d8:8e:d2:0a:47:e9:4a:
ef:ae:c6:f6:c4:b8:6d:e7:95:03:1e:c4:8c:9d:f7:
1d:ec:61:a4:48:3a:a8:ef:90:a7:77:5f:be:aa:fb:
ba:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:56:5B:49:04:25:85:BD:93:99:C5:79:C3:71:D6:61:A7:2F:6D:B7
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/LVZbSQQlhb2TmcV5w3HWYacvbbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.177.0-5.144.178.255
5.144.182.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b7:00:eb:b8:a8:76:4b:e6:96:db:2a:a4:93:f0:c0:50:98:
b5:24:22:c5:8b:87:b4:ed:b5:db:09:98:94:14:bb:48:09:a8:
95:53:33:72:a2:56:8c:f8:f4:68:11:38:42:dc:20:16:e6:85:
5b:78:53:62:88:ed:be:37:a9:33:46:f3:08:b1:f0:f8:37:dd:
90:3a:3a:70:35:bd:d7:d8:a3:61:14:3f:5d:c3:42:14:fa:72:
6b:cc:32:cd:8e:c6:81:8f:f5:b9:0d:0e:82:c2:d1:99:5f:80:
ab:6e:67:09:bf:c9:14:33:85:b0:b2:fe:a2:21:1c:66:76:d0:
24:c6:eb:fc:89:e6:be:ab:15:b5:d3:cf:51:a6:f0:8a:f9:e4:
e3:5f:0b:0f:0e:c8:93:db:ed:c1:6e:01:56:10:4c:27:1f:f9:
0e:d9:06:ee:2c:0f:33:50:fd:39:6d:6f:94:a3:b0:a6:08:e4:
c8:7a:77:48:6b:d2:5c:9d:4f:4f:1f:70:be:72:64:dc:a7:9c:
94:94:f2:2c:d8:65:5e:5e:84:67:9d:00:bd:6f:3a:b4:03:5c:
c7:55:c3:42:5a:29:5f:fa:f6:95:7d:ce:d4:29:96:e0:47:05:
4d:be:93:45:55:ea:dd:c6:09:71:81:b6:dc:1b:c2:ed:99:fc:
47:4c:d7:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:15 2024 by rpki-client on console-ams.rpki-client.org