Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lg1vnfXrBlWVux0QMZfgc3XxHOE.roa
File: lg1vnfXrBlWVux0QMZfgc3XxHOE.roa (raw, json)
Hash identifier: 1E7EP+yqpIOnA2He/vGQfOYTr2egssWlC8BPkvKqhPw=
Subject key identifier: 96:0D:6F:9D:F5:EB:06:55:95:BB:1D:10:31:97:E0:73:75:F1:1C:E1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CB0D15856425791182DB6EE2356809885
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lg1vnfXrBlWVux0QMZfgc3XxHOE.roa
Signing time: Thu 28 Dec 2023 14:25:58 +0000
ROA not before: Thu 28 Dec 2023 14:25:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200105
IP address blocks: 87.121.124.0/23 maxlen: 24
91.200.192.0/22 maxlen: 24
45.129.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:d1:58:56:42:57:91:18:2d:b6:ee:23:56:80:98:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 28 14:25:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=960d6f9df5eb065595bb1d103197e07375f11ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:33:20:3b:34:eb:8b:1f:21:21:d8:de:fd:7e:
96:b2:02:c8:d0:23:3e:d8:ab:0c:61:a3:f1:c4:af:
7b:c5:db:d1:6d:93:e7:40:b3:3a:8a:ba:a5:17:f0:
9d:b6:7c:87:d1:4a:46:3c:27:29:7f:01:87:f7:ef:
8a:2d:93:1c:1b:d6:c5:20:03:9d:27:df:20:82:03:
69:58:f6:a9:01:c2:af:74:9a:77:3d:db:ff:87:3c:
2c:84:35:33:4e:b9:31:e0:77:4e:4a:e2:8b:b6:5b:
aa:93:72:5a:6b:72:0c:3e:fe:32:13:c8:03:f8:9b:
bd:6d:2f:48:23:26:0b:e9:7c:fd:f0:0b:03:0c:76:
36:d3:d5:68:e0:d1:4f:d6:a2:c5:1c:a1:97:cd:2f:
e7:0c:71:fb:ef:77:76:a2:d0:42:13:c8:9e:bd:46:
6d:c0:6d:0e:5b:26:39:c5:35:c9:c9:6d:5a:35:d9:
c8:1f:67:da:42:b3:ce:ce:5d:62:ca:be:6c:2a:df:
f8:11:70:44:83:6d:b1:22:a5:56:1c:31:2d:dc:66:
c0:c1:54:aa:c5:56:db:dd:de:74:1d:86:45:71:65:
3a:a8:3e:4d:6d:66:7d:31:b6:b6:75:f5:c3:0f:7a:
07:1a:0e:4f:51:f6:a3:c9:42:f5:bd:0f:12:d0:b4:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0D:6F:9D:F5:EB:06:55:95:BB:1D:10:31:97:E0:73:75:F1:1C:E1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lg1vnfXrBlWVux0QMZfgc3XxHOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.84.0/24
87.121.124.0/23
91.200.192.0/22
Signature Algorithm: sha256WithRSAEncryption
75:85:62:f8:9a:0f:ea:f7:40:85:fb:c6:44:41:9c:bc:94:54:
88:46:d9:9c:93:7b:e4:06:1d:cd:f8:16:59:a9:fb:2f:3d:f5:
74:4a:ee:1a:17:ae:5e:42:c2:9d:60:f2:d8:3d:7a:f4:0a:18:
0f:ad:f9:a2:01:9e:80:8e:c8:07:8d:5a:36:19:bd:a8:00:0b:
76:49:45:c1:1f:e9:f5:cf:76:a4:80:c3:b4:30:dd:69:2a:b6:
b8:c0:ff:cb:02:fc:c7:70:7a:37:f9:f4:c8:1f:b7:92:9e:55:
6b:5f:71:b8:30:e1:b3:e3:72:73:c8:50:9e:8f:4a:1a:21:b6:
97:09:3b:93:0e:b1:14:9b:ad:6a:67:f5:cb:68:ff:79:f7:51:
dd:b2:6b:3c:4e:12:b2:5c:99:e2:1a:52:92:02:f2:49:74:bd:
5d:17:66:95:e7:66:aa:30:46:e2:95:ea:fe:b3:89:38:38:77:
35:34:66:ce:93:13:ac:8e:c3:17:2a:aa:be:d9:c0:89:a5:a3:
d3:0b:a8:5b:31:65:8c:62:b2:c5:ed:94:d8:a4:d4:ff:da:2e:
31:ae:bf:9c:97:4b:7a:fd:f4:7a:d0:18:f1:90:68:d1:f1:8f:
21:45:68:f2:61:73:de:84:06:b2:6e:49:a9:f4:10:71:45:a3:
34:84:18:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:13 2024 by rpki-client on console-ams.rpki-client.org