Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LT0p8ngF8qoCmjBnJeKafJxxI-A.roa
File: LT0p8ngF8qoCmjBnJeKafJxxI-A.roa (raw, json)
Hash identifier: pb81mexFNCOW8mlhFkOE/AsQBDAgpEy/Foq9GjpFx+c=
Subject key identifier: 2D:3D:29:F2:78:05:F2:AA:02:9A:30:67:25:E2:9A:7C:9C:71:23:E0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD0E5E043105CF9DFA87BF898579A4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LT0p8ngF8qoCmjBnJeKafJxxI-A.roa
Signing time: Tue 02 Jan 2024 06:29:39 +0000
ROA not before: Tue 02 Jan 2024 06:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 45.66.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:0e:5e:04:31:05:cf:9d:fa:87:bf:89:85:79:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d3d29f27805f2aa029a306725e29a7c9c7123e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f9:91:96:3b:d3:7e:0c:60:f2:64:44:c2:94:
cd:4f:04:19:94:c2:0a:aa:4a:b8:34:ad:66:b7:09:
6f:62:b5:9d:21:a6:10:a7:69:77:9f:0e:e5:02:bb:
ea:26:bb:fa:dd:d2:0a:01:cc:0a:94:8e:ce:ea:44:
e7:76:2d:c0:d2:45:b1:12:b8:51:42:00:67:d0:7b:
c7:97:55:6e:0c:51:35:2f:96:c2:14:e1:a6:07:91:
3f:bc:f4:24:e9:b6:92:88:dd:c9:41:2e:0e:55:9a:
ce:ba:8d:f2:d7:92:e3:a1:d6:40:a2:43:78:33:41:
87:08:94:ed:f4:4d:e6:ec:6e:c8:99:c8:5e:f9:ae:
38:c1:c0:60:6e:1e:77:5c:53:87:b3:ce:2c:27:99:
6f:ae:0e:2a:63:3c:49:34:3e:48:42:ee:eb:39:de:
37:1d:5f:ee:6c:29:1a:f5:9f:16:a6:37:39:ec:9b:
6b:a6:1b:0f:44:fd:bd:36:53:fc:97:14:99:d3:ca:
ae:de:05:0f:90:aa:81:7f:b8:e1:f8:bd:8f:55:ac:
74:13:ba:8c:cf:03:ab:cf:9f:49:89:7f:f6:8b:69:
50:34:18:84:ae:af:78:f8:d7:73:61:03:e2:26:7d:
cd:0d:ea:a5:ca:17:6d:10:c3:bc:c4:31:b8:06:32:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3D:29:F2:78:05:F2:AA:02:9A:30:67:25:E2:9A:7C:9C:71:23:E0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LT0p8ngF8qoCmjBnJeKafJxxI-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.230.0/24
Signature Algorithm: sha256WithRSAEncryption
43:5a:e3:92:7e:ae:ce:6d:55:94:4c:8a:60:11:6a:d6:de:00:
c3:b4:cc:08:59:74:1a:5e:96:ee:af:53:80:f5:b8:e3:14:71:
75:7f:dd:67:42:38:4b:86:90:52:ec:e3:01:c5:d7:69:79:5e:
67:65:4f:62:f6:51:bf:f4:02:33:fe:73:0e:8d:10:f1:9c:6a:
19:3a:b2:b0:b5:da:2e:7c:8c:c0:39:fe:a0:af:29:d1:65:1b:
87:e0:f1:56:50:f8:ed:37:1e:6a:97:35:f3:52:0d:8c:d0:4e:
ea:7c:e9:7a:c8:c9:37:7d:cf:c8:11:3a:cc:95:cd:fa:6b:b2:
03:95:3c:9e:75:49:c9:c6:83:91:e5:24:66:8d:ad:11:70:45:
b3:29:ba:ae:5e:63:f9:7b:42:7c:47:1c:4f:64:a8:c3:cc:62:
53:3e:72:1e:2b:ba:c7:07:1c:04:da:d2:28:6b:11:ac:78:a0:
ac:e2:8c:bb:fd:0a:e7:f6:c0:14:33:5e:10:fd:31:a5:2e:a8:
d1:05:bc:51:94:45:01:53:0d:96:35:20:3e:aa:5d:28:eb:a0:
1c:92:fb:6c:cb:fd:98:e9:12:70:b3:15:66:38:e1:bc:78:eb:
d2:fd:e7:65:47:98:84:d2:94:c8:27:ae:8f:bf:55:dc:1f:04:
54:1e:8c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:16 2024 by rpki-client on console-ams.rpki-client.org