Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/lnC7R8ukme1e6ohukzgnLvBhPqI.roa
File: lnC7R8ukme1e6ohukzgnLvBhPqI.roa (raw, json)
Hash identifier: 7qL1BZcPZWnBuZRJEXsoRDCMEEFFGjhuCK3RINzlZwY=
Subject key identifier: 96:70:BB:47:CB:A4:99:ED:5E:EA:88:6E:93:38:27:2E:F0:61:3E:A2
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0185729ECCBD2EDC88288876B6BFF077509E
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/lnC7R8ukme1e6ohukzgnLvBhPqI.roa
Signing time: Mon 02 Jan 2023 13:14:47 +0000
ROA not before: Mon 02 Jan 2023 13:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212433
IP address blocks: 45.143.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:cc:bd:2e:dc:88:28:88:76:b6:bf:f0:77:50:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 2 13:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9670bb47cba499ed5eea886e9338272ef0613ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:93:7c:15:51:d0:83:5d:54:68:ce:1b:13:
71:01:6e:bc:bb:ef:00:32:df:4a:96:0a:4d:4e:34:
ee:32:9e:44:1f:fb:5a:1b:29:fc:d3:66:4f:05:1f:
68:bb:30:c4:67:db:94:ce:2d:5f:f8:a4:2e:a8:2e:
87:6f:6d:4f:a8:a1:e5:97:c9:09:67:a0:00:8b:80:
56:a9:86:b7:79:12:e5:85:91:8e:fa:32:ae:56:ac:
eb:42:41:68:93:67:ed:e7:e9:e0:c9:04:6e:c9:6a:
07:37:34:92:8a:c2:20:67:20:e3:cd:e3:93:f9:5a:
6f:13:83:81:0e:08:6e:04:ce:18:94:9d:f9:32:cd:
41:2c:17:02:a6:c8:c6:22:1b:a0:5f:ae:86:e7:a5:
49:20:c7:36:e6:be:13:86:68:1b:a2:39:91:c5:fa:
ff:9e:91:05:41:b8:a4:72:ec:0f:b9:4d:4c:c2:28:
09:bb:3d:48:5d:ef:74:e2:c6:1b:79:98:fb:e5:40:
b6:c3:13:43:28:b9:42:8e:be:be:ba:91:43:7b:a8:
b7:7f:4e:42:a7:86:ab:2b:2b:d2:f1:29:85:78:63:
55:8b:e6:8c:ff:cf:8d:9c:dd:69:2b:cf:a6:e4:89:
5f:d5:91:71:06:e4:d6:74:48:02:fa:69:57:33:ce:
2f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:70:BB:47:CB:A4:99:ED:5E:EA:88:6E:93:38:27:2E:F0:61:3E:A2
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/lnC7R8ukme1e6ohukzgnLvBhPqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.98.0/24
Signature Algorithm: sha256WithRSAEncryption
52:bd:3f:65:b2:5d:8d:bc:b3:12:f7:a1:c2:d1:88:84:48:73:
38:2b:de:f6:3b:28:2f:fc:ea:6b:01:a5:8e:09:28:33:b4:5e:
12:80:55:95:1e:a0:da:a4:58:54:9e:19:5a:44:a6:47:6d:3c:
38:7f:ad:9e:65:e8:c9:f4:fe:6a:7c:e0:6d:ed:1d:3a:41:d2:
e2:90:61:d1:c2:ba:93:f2:cc:03:13:b9:ff:e1:8f:fc:49:75:
51:1f:7e:78:b0:79:8c:7b:6c:1a:64:3f:fa:33:c9:02:b1:77:
12:d7:48:0a:1a:0a:7b:12:b0:93:17:eb:a3:e3:b4:9f:fe:35:
03:2a:79:20:ae:e9:f1:0d:41:bb:22:28:b7:a7:7e:3a:dd:13:
25:d9:98:63:e5:00:2c:83:65:f1:6c:e3:77:c5:c4:d4:0b:b1:
a5:20:44:8c:96:dc:51:a4:d3:cf:e5:b4:06:35:6b:c8:9a:11:
ae:57:f6:b7:f5:88:f3:d5:b7:eb:51:9f:2d:90:d2:c0:4e:5e:
89:bc:e3:f2:6b:66:b6:4c:35:32:e9:ea:64:f1:b5:81:b8:95:
29:1e:03:5f:e2:1d:34:a0:d0:9a:a4:c6:2c:9b:a0:0e:f7:5b:
ad:13:9a:97:d3:00:20:12:6b:68:07:0c:9b:ca:32:4c:d1:53:
de:85:ee:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:44 2023 by rpki-client on console-fra.rpki-client.org