Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/LxVBZcy6vutlSDQQxrPSRzHbu58.roa
File: LxVBZcy6vutlSDQQxrPSRzHbu58.roa (raw, json)
Hash identifier: AD4XCnRZbCseqbJo/hXBbIvlGK+jqybYXiFFJrrJDwQ=
Subject key identifier: 2F:15:41:65:CC:BA:BE:EB:65:48:34:10:C6:B3:D2:47:31:DB:BB:9F
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 018CC6B8465EAA77E5BB9EE26A18A4D6AB0B
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/LxVBZcy6vutlSDQQxrPSRzHbu58.roa
Signing time: Mon 01 Jan 2024 20:30:14 +0000
ROA not before: Mon 01 Jan 2024 20:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210708
IP address blocks: 45.11.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:46:5e:aa:77:e5:bb:9e:e2:6a:18:a4:d6:ab:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Jan 1 20:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f154165ccbabeeb65483410c6b3d24731dbbb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:fa:d8:59:2a:64:9b:c7:fb:44:14:c5:2a:
a2:de:36:d6:05:b2:13:29:17:c6:a2:ad:10:10:87:
6b:ea:01:07:6a:ec:30:9c:2f:b8:c9:78:3c:5a:76:
5f:cd:7e:be:8c:9c:3a:08:af:9a:4f:dd:f2:e8:54:
d7:d2:6d:a2:a2:de:0b:41:10:9a:0a:8e:5b:9f:61:
aa:2a:7d:7a:3b:c0:5e:a7:29:c3:0a:51:57:95:2c:
d8:0b:fa:49:e0:9f:fc:3a:1f:8d:96:dc:60:75:33:
be:c6:07:2c:6b:17:74:d7:a3:77:fd:fa:81:96:4d:
ac:63:f4:4a:ca:2b:e2:8d:2d:9e:0d:59:03:1b:9c:
58:67:21:28:02:60:2c:be:37:86:56:80:ab:a3:bb:
21:55:a2:4d:26:34:9f:2e:f8:75:83:9c:04:71:2f:
b4:4f:4a:a0:7e:4e:f9:45:76:fc:78:17:59:fe:af:
83:a9:2a:9d:b8:a3:fd:3b:6d:02:16:27:47:d1:3b:
77:54:ee:06:17:06:a1:14:0a:ed:70:7d:5d:69:a7:
3d:e3:a1:3a:17:d9:18:24:9b:00:38:84:97:1b:54:
84:d5:e8:38:99:be:9e:57:10:5f:b5:1f:1c:87:9c:
02:55:ee:b5:e3:7a:ce:a1:b9:a8:67:eb:55:2d:e7:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:15:41:65:CC:BA:BE:EB:65:48:34:10:C6:B3:D2:47:31:DB:BB:9F
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/LxVBZcy6vutlSDQQxrPSRzHbu58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.43.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ee:a4:8f:a7:99:8d:02:71:6f:71:0b:b0:c8:74:58:24:16:
f9:b9:98:0b:0a:e1:1c:00:10:22:72:ad:6f:92:72:b9:ad:e7:
47:68:4e:f6:10:ac:a1:f6:06:96:5c:d8:9b:c3:e0:ee:ae:b6:
b8:86:43:87:41:75:d1:44:17:af:1a:47:71:94:21:b1:5b:f9:
1a:02:71:89:c1:5c:e5:8d:ac:54:ff:80:4f:90:46:42:48:d3:
53:2c:45:3c:71:56:2e:2e:ab:17:ff:8c:ad:23:fa:ac:20:63:
64:25:c8:16:00:b2:7b:45:34:e2:92:00:63:f8:c2:87:06:c1:
38:1b:9a:3e:3d:61:42:19:ac:8c:99:c1:67:b2:40:d6:06:5d:
51:f3:7e:98:7f:b8:07:7e:5b:66:28:bb:ec:ff:e4:68:3d:f1:
91:59:f5:fd:9b:5a:be:0a:14:6c:bb:e8:27:1b:d7:a3:81:e9:
c0:e8:90:d7:1b:73:74:08:b8:8a:ed:4d:26:c5:8d:4c:3c:3c:
e5:96:17:2c:a5:be:32:dd:c8:82:9c:d8:fc:63:81:12:d8:c2:
59:ad:02:03:33:64:e2:ca:f7:4d:7f:5c:82:fb:24:a0:fc:29:
0a:b0:c2:b0:6c:16:7d:e8:7b:78:1a:86:05:9a:0e:6e:60:48:
4d:d0:2b:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuEZeqnflu57iahik1qsLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjIxYzg5YmM3ZTJiMjE0MDY3ZjMwNzA3YTRhMDNkYzM0
NmVlMDUwHhcNMjQwMTAxMjAzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjE1NDE2NWNjYmFiZWViNjU0ODM0MTBjNmIzZDI0NzMxZGJiYjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FT62FkqZJvH+0QUxSqi3jbWBbIT
KRfGoq0QEIdr6gEHauwwnC+4yXg8WnZfzX6+jJw6CK+aT93y6FTX0m2iot4LQRCa
Co5bn2GqKn16O8BepynDClFXlSzYC/pJ4J/8Oh+NltxgdTO+xgcsaxd016N3/fqB
lk2sY/RKyivijS2eDVkDG5xYZyEoAmAsvjeGVoCro7shVaJNJjSfLvh1g5wEcS+0
T0qgfk75RXb8eBdZ/q+DqSqduKP9O20CFidH0Tt3VO4GFwahFArtcH1daac946E6
F9kYJJsAOISXG1SE1eg4mb6eVxBftR8ch5wCVe6143rOobmoZ+tVLefB/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC8VQWXMur7rZUg0EMaz0kcx27ufMB8GA1UdIwQY
MBaAFMSyHIm8fishQGfzBwekoD3DRu4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODkt
MDYzYjQwMTc0NTk3LzEvTHhWQlpjeTZ2dXRsU0RRUXhyUFNSekhidTU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODktMDYzYjQwMTc0NTk3
LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQsrMA0G
CSqGSIb3DQEBCwUAA4IBAQA27qSPp5mNAnFvcQuwyHRYJBb5uZgLCuEcABAicq1v
knK5redHaE72EKyh9gaWXNibw+Durra4hkOHQXXRRBevGkdxlCGxW/kaAnGJwVzl
jaxU/4BPkEZCSNNTLEU8cVYuLqsX/4ytI/qsIGNkJcgWALJ7RTTikgBj+MKHBsE4
G5o+PWFCGayMmcFnskDWBl1R836Yf7gHfltmKLvs/+RoPfGRWfX9m1q+ChRsu+gn
G9ejgenA6JDXG3N0CLiK7U0mxY1MPDzllhcspb4y3ciCnNj8Y4ES2MJZrQIDM2Ti
yvdNf1yC+ySg/CkKsMKwbBZ96Ht4GoYFmg5uYEhN0Ct4
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:58 2025 by rpki-client