Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LjDQGSGGg03s3-3qgSDSiJ-HJy0.roa
File: LjDQGSGGg03s3-3qgSDSiJ-HJy0.roa (raw, json)
Hash identifier: GrmqHuBG1392t/qg087dCVmOhgGDYxHvUSHLh3N1kX8=
Subject key identifier: 2E:30:D0:19:21:86:83:4D:EC:DF:ED:EA:81:20:D2:88:9F:87:27:2D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01880E807BFA89238B31A6BA60283C418A6D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LjDQGSGGg03s3-3qgSDSiJ-HJy0.roa
Signing time: Fri 12 May 2023 05:48:01 +0000
ROA not before: Fri 12 May 2023 05:48:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.129.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 May 2023 14:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:80:7b:fa:89:23:8b:31:a6:ba:60:28:3c:41:8a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 12 05:48:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e30d0192186834decdfedea8120d2889f87272d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:76:b0:d5:ae:d8:15:65:01:c2:37:aa:ff:
a5:f5:bc:3d:f6:8f:5d:0a:cb:d5:0a:71:63:36:f8:
15:96:b7:1a:71:af:6f:61:a5:69:ee:ca:3c:ea:32:
7b:49:f1:c8:9e:6f:89:b3:b8:26:5e:7d:3f:da:51:
b7:17:c1:5a:db:2d:af:7c:7f:a2:f3:9e:ef:8e:2c:
56:d3:34:38:e3:53:bb:a5:1f:00:31:84:2f:e1:cd:
33:7d:b8:7c:0e:bf:5f:93:02:98:68:8a:d0:50:88:
ad:9e:cb:f2:20:ac:09:27:8b:06:83:69:3b:21:02:
b9:d1:f0:0e:de:31:54:6d:68:91:f2:ba:83:7e:2c:
44:7a:c4:d8:29:19:1a:09:40:1a:53:81:5b:c9:ad:
43:fc:52:15:b2:8b:40:4d:16:69:21:8b:35:87:c9:
b7:14:63:7b:4d:53:7a:f3:2c:a0:65:63:df:bd:ca:
59:fc:4a:15:ea:ed:e2:f0:7b:a1:9d:63:f7:dc:61:
f5:03:c3:dd:80:77:7b:a4:eb:c8:73:02:1f:41:60:
ef:fd:39:5a:63:17:4a:55:9b:85:b6:27:e1:dd:96:
ec:e8:b0:db:ec:bf:00:2c:5f:c6:3a:4b:8f:57:d3:
65:6d:18:03:00:f1:b3:1c:6c:5a:8d:57:fb:38:a7:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:30:D0:19:21:86:83:4D:EC:DF:ED:EA:81:20:D2:88:9F:87:27:2D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LjDQGSGGg03s3-3qgSDSiJ-HJy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.85.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c7:84:c9:54:ef:8e:97:dd:50:5a:52:69:35:1a:d3:d6:f4:
2a:c0:6f:13:26:f3:9b:ef:4a:1b:20:0c:4f:d1:7b:9c:93:88:
84:c6:8b:8f:d9:23:be:88:a7:94:c6:7c:47:73:18:9f:44:0f:
71:d5:ae:22:69:73:e8:67:f7:70:00:c7:68:48:c3:bc:91:bd:
65:a9:ae:69:6d:d6:0a:26:54:ef:23:e0:17:78:20:27:25:11:
26:64:83:be:42:0c:23:d5:0a:8f:76:ed:41:b9:de:b4:c8:b1:
a5:66:ec:a5:e3:86:b8:21:52:64:6e:e6:76:27:f5:51:a1:a5:
01:a1:bd:74:ce:e7:08:80:e9:dd:6a:bc:45:21:78:90:40:72:
1a:65:57:9d:36:ea:33:09:56:ec:e1:10:63:11:af:22:18:97:
72:94:c9:9e:cc:c2:f0:6e:7d:05:b3:1d:21:02:63:95:7e:31:
b5:26:28:17:aa:c2:93:e3:c9:d5:70:f6:f8:58:34:fd:95:6b:
bd:ee:21:19:59:77:fd:9b:95:d5:1c:4c:20:f4:d0:24:8e:b3:
1f:73:ca:3a:b6:80:84:1d:ab:4a:63:27:9d:1c:71:e8:5e:98:
fb:b8:56:23:1a:98:f7:c1:2f:d0:55:10:2c:fc:2c:90:f4:72:
57:4f:b2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:05 2024 by rpki-client on console-fra.rpki-client.org