Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/LwWGb_vl82ox-doxqBWypzMsfGQ.roa
File: LwWGb_vl82ox-doxqBWypzMsfGQ.roa (raw, json)
Hash identifier: PMmi0R+5spIGwS+IFbocpOaZZVy5t6QlbDtrOpbuJP8=
Subject key identifier: 2F:05:86:6F:FB:E5:F3:6A:31:F9:DA:31:A8:15:B2:A7:33:2C:7C:64
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018B628A5A6D4624E3170E134F969100C5EF
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/LwWGb_vl82ox-doxqBWypzMsfGQ.roa
Signing time: Tue 24 Oct 2023 16:35:16 +0000
ROA not before: Tue 24 Oct 2023 16:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210411
IP address blocks: 45.94.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:8a:5a:6d:46:24:e3:17:0e:13:4f:96:91:00:c5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Oct 24 16:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f05866ffbe5f36a31f9da31a815b2a7332c7c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c4:50:65:ce:83:38:89:ff:f3:dc:d0:ca:a7:
02:da:85:4c:5c:7d:f2:10:5f:6f:ba:53:df:79:7d:
49:d7:6f:f9:e5:8d:18:dc:3e:73:7f:ca:85:47:29:
a9:c9:39:df:4f:eb:18:2c:47:a5:d8:20:c5:fc:bc:
8f:ca:cc:ad:05:02:94:ea:0c:e4:1e:83:bb:4c:05:
51:cb:61:ac:40:57:2b:eb:0c:fd:e3:d2:fc:20:90:
7f:6a:05:fa:7e:e5:d1:a0:7c:3e:fe:f9:00:8f:dd:
03:12:63:40:ea:e9:70:83:0d:4e:fc:b3:e9:a0:32:
36:0d:44:fe:76:01:2a:e6:a5:c8:54:98:68:37:2b:
c0:88:04:81:b3:21:f9:e9:2b:b5:d3:b1:f6:31:bc:
c8:b2:bc:ed:71:a1:4f:5f:2e:b8:40:44:db:13:52:
07:98:80:52:dd:a9:1e:b2:8a:c4:7c:5d:b9:67:fb:
da:e2:ce:9f:39:5f:18:79:e8:69:5b:4e:46:35:a5:
de:de:04:9f:7d:62:5e:70:d4:ba:e5:a8:66:0d:bf:
e6:3f:a1:1d:03:e1:7d:17:4f:73:ec:3f:07:b4:e0:
6d:d9:04:04:0f:11:35:6e:29:16:07:36:63:cc:fc:
cd:41:72:13:98:fc:81:2f:5b:b6:35:a9:d1:55:12:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:05:86:6F:FB:E5:F3:6A:31:F9:DA:31:A8:15:B2:A7:33:2C:7C:64
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/LwWGb_vl82ox-doxqBWypzMsfGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.52.0/24
Signature Algorithm: sha256WithRSAEncryption
07:99:5c:f0:41:75:de:aa:c8:89:ed:51:39:cb:86:28:57:82:
8c:c5:1a:a8:c4:0b:ae:67:62:25:d3:b4:d0:bd:a0:3a:4b:47:
02:53:71:57:fe:e4:f5:5a:36:f9:1f:38:da:fd:5f:40:a4:40:
df:a9:5e:e8:e5:3c:ef:7d:91:0a:14:2a:7f:ba:9c:24:1c:59:
23:39:9a:4b:d2:e6:3e:f6:05:31:5b:58:db:3f:fd:66:c1:c3:
fa:5c:57:ac:7c:03:32:92:7f:e9:74:fd:51:b8:c4:f1:20:a7:
ad:6b:4c:8d:13:fa:7d:dd:2a:e6:97:5c:9b:66:1f:56:f1:a3:
d5:ca:1d:22:67:91:0f:24:34:ee:97:60:d6:82:01:6e:02:f4:
49:fd:a4:48:e3:ba:24:2b:2e:b7:f9:e3:63:b4:2e:80:42:4d:
7f:39:fc:b0:ff:14:9b:28:dd:03:48:b7:db:d5:43:8d:46:28:
6d:c5:76:42:b6:0c:c7:0b:b4:3b:14:1e:be:52:28:79:57:41:
45:ad:ba:8e:34:00:ff:b6:95:b9:77:56:f6:9e:8e:18:09:98:
9b:bc:ef:c4:bd:a0:21:7c:94:96:04:46:91:72:ef:f2:81:f3:
0f:94:4f:89:ea:98:76:0e:ea:91:d9:f1:58:c1:f5:ab:21:c9:
63:64:4e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:51 2024 by rpki-client on console-fra.rpki-client.org