Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/LE-hEdkSTaNdyR9SJ8pnfNt_yz0.roa
File: LE-hEdkSTaNdyR9SJ8pnfNt_yz0.roa (raw, json)
Hash identifier: s9yN/ZKlwEUc+mC4ngyP0xYK3y0QQnu7V7i37y/Ocl8=
Subject key identifier: 2C:4F:A1:11:D9:12:4D:A3:5D:C9:1F:52:27:CA:67:7C:DB:7F:CB:3D
Certificate issuer: /CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Certificate serial: 018571FA01C749DDBC7908AA84ABEB5573F9
Authority key identifier: C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/LE-hEdkSTaNdyR9SJ8pnfNt_yz0.roa
Signing time: Mon 02 Jan 2023 10:14:47 +0000
ROA not before: Mon 02 Jan 2023 10:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208569
IP address blocks: 45.128.10.0/24 maxlen: 24
45.128.8.0/22 maxlen: 22
45.128.11.0/24 maxlen: 24
45.128.8.0/24 maxlen: 24
45.128.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Aug 2023 06:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:01:c7:49:dd:bc:79:08:aa:84:ab:eb:55:73:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Validity
Not Before: Jan 2 10:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c4fa111d9124da35dc91f5227ca677cdb7fcb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:9a:16:50:06:33:05:cb:8d:85:20:da:91:
c9:cd:39:06:d8:61:fd:ec:dc:12:86:d5:2e:e3:dc:
16:7c:51:d1:8e:43:5e:5c:b1:ff:c9:29:96:dc:fa:
1c:cd:75:0b:9e:93:5f:38:28:2b:65:9c:57:15:28:
25:cc:b3:c1:a1:e4:43:04:85:48:65:9a:59:6b:80:
2e:f8:f7:79:60:4d:03:fd:30:a6:83:34:3e:3c:38:
52:a4:da:ad:5d:a1:77:58:67:38:35:84:a4:81:ae:
03:da:a0:e4:31:85:d0:02:82:3a:1a:d2:8f:62:dc:
a5:42:ab:b9:a5:7d:67:75:4c:13:9a:42:36:6d:f2:
36:4b:43:05:35:e3:c4:14:e1:bf:a9:49:92:10:03:
d1:62:7b:c3:78:b5:51:d4:f9:4d:5e:20:e7:98:3a:
72:62:e8:a8:c8:e2:db:fb:de:72:ae:b6:ab:fd:a1:
67:74:b3:f3:4d:91:16:2b:91:26:a5:47:22:ab:5f:
b8:22:c9:06:73:d6:5a:ff:f0:f0:68:b3:92:20:58:
a8:50:f0:fe:a5:e1:4a:11:c6:fc:57:db:29:fe:b6:
98:7e:be:3d:14:b2:4a:09:3a:a8:2e:4b:23:b7:13:
95:94:99:fa:a1:fc:83:04:81:2e:0c:1e:56:dc:b0:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4F:A1:11:D9:12:4D:A3:5D:C9:1F:52:27:CA:67:7C:DB:7F:CB:3D
X509v3 Authority Key Identifier:
keyid:C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/LE-hEdkSTaNdyR9SJ8pnfNt_yz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.8.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:ac:9b:0f:77:17:17:26:2a:af:f0:33:8e:7c:7d:c2:2a:ad:
23:c2:37:24:60:e9:ee:80:af:03:7c:ad:f5:67:33:3e:68:fe:
8c:95:ba:e9:00:bc:4b:38:6a:6b:83:70:84:91:9a:6b:46:77:
73:da:e4:48:65:c8:ac:e1:30:d8:fc:fe:24:32:8b:7c:66:ea:
f1:e2:6b:83:a6:21:02:e2:2c:71:38:4f:5a:35:88:92:d9:33:
ec:4f:28:e9:04:e5:35:fb:6b:fa:ca:78:fe:82:ee:a5:26:85:
26:43:78:59:83:df:80:35:fc:32:9a:ca:de:f2:97:f0:9d:c0:
73:1b:f9:e6:11:30:19:2e:fd:12:ec:0c:90:8a:65:39:d2:5f:
c0:cc:84:89:62:cf:5a:f4:d0:89:19:1f:2b:d1:50:7f:6a:b7:
e9:26:cb:5f:c3:30:be:49:9a:87:45:90:2f:57:57:93:13:e0:
23:d7:06:fc:5b:1b:ce:0d:57:e4:9c:4c:fb:ad:58:b8:e0:74:
49:de:b9:4b:b2:74:da:f1:0d:ee:a1:d5:f6:bc:f6:6b:44:89:
a4:bd:65:09:28:ce:e2:6e:62:ea:e0:6b:94:e4:90:d2:08:7c:
2f:87:88:5b:4e:33:c6:e3:cd:e7:52:44:de:2f:ad:18:38:7b:
3d:88:71:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:08 2024 by rpki-client on console-fra.rpki-client.org