Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/lATU0Ok-FuLzdCTJffwvSnKJlWE.roa
File: lATU0Ok-FuLzdCTJffwvSnKJlWE.roa (raw, json)
Hash identifier: ZnSOEfUozalCcINBY8cTSgrNMCXcsbSabkDrIRhLZco=
Subject key identifier: 94:04:D4:D0:E9:3E:16:E2:F3:74:24:C9:7D:FC:2F:4A:72:89:95:61
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 018829609030C20AD1237ED8871336784B61
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/lATU0Ok-FuLzdCTJffwvSnKJlWE.roa
Signing time: Wed 17 May 2023 11:02:54 +0000
ROA not before: Wed 17 May 2023 11:02:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.11.172.0/23 maxlen: 24
45.11.174.0/24 maxlen: 24
45.11.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 00:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:60:90:30:c2:0a:d1:23:7e:d8:87:13:36:78:4b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: May 17 11:02:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9404d4d0e93e16e2f37424c97dfc2f4a72899561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:50:a6:47:49:87:b2:69:25:3e:ba:ee:47:
2a:72:2d:1c:a2:6d:50:81:35:d6:c6:b9:e9:88:79:
99:e8:12:db:0d:b3:a9:6b:4c:78:35:88:c2:c5:dd:
c8:ef:f5:39:4f:52:7a:93:2c:4e:ed:6e:92:c1:2b:
a2:4c:41:8c:10:b6:1b:d3:0b:c5:48:c7:e2:cc:a3:
fa:2c:98:0c:c4:1c:c0:e4:53:14:e5:3b:d4:bb:09:
c3:5f:d5:23:22:f5:f5:52:b6:5a:85:14:f8:83:6d:
dc:e6:39:50:b6:89:31:f3:b3:1f:be:00:60:3f:f1:
4b:74:a2:4a:d1:e5:fa:38:ec:e3:00:4c:f7:b4:a7:
e5:9b:ad:f4:c3:85:84:21:39:03:95:18:5c:f9:0d:
46:68:a5:04:24:8d:c0:c5:7e:81:ed:3e:5b:36:71:
cc:ae:6c:48:78:d0:f9:c1:35:8f:d2:16:94:56:3a:
8d:a3:13:7c:46:87:0a:66:5e:1b:68:ef:0b:ce:0f:
33:ea:85:b1:43:8b:eb:08:ca:7e:5b:07:32:70:1e:
ae:ed:d7:72:26:d8:e8:ed:eb:85:3b:43:2e:29:d3:
29:96:82:f0:7d:5d:0e:90:05:41:0a:e5:ef:67:d8:
dc:07:3b:89:64:b4:54:06:d0:fb:61:7d:bc:ba:a4:
e9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:04:D4:D0:E9:3E:16:E2:F3:74:24:C9:7D:FC:2F:4A:72:89:95:61
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/lATU0Ok-FuLzdCTJffwvSnKJlWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.172.0/22
Signature Algorithm: sha256WithRSAEncryption
93:5c:2e:81:00:de:c2:b0:02:49:70:ac:fd:37:f1:60:30:52:
c4:0f:6d:e4:00:46:c9:63:3e:dc:3a:af:07:ee:60:55:90:12:
56:6b:07:e6:cf:52:42:4c:ee:67:19:34:4f:c9:09:c3:4e:ac:
0c:87:1d:3c:0a:94:e3:3f:96:30:59:b5:ca:5f:57:3a:b0:24:
27:76:08:08:a5:1e:68:3f:e8:0e:db:f3:90:59:de:c1:f8:fe:
24:d7:17:fa:1b:92:8d:58:e4:c3:17:ea:6b:c0:27:a1:ed:af:
ea:e9:64:78:89:54:c3:32:4e:19:3d:8d:30:f9:53:e3:8d:df:
8a:b8:0f:85:38:b3:03:75:63:25:71:33:a5:3f:91:17:fb:13:
b4:c1:fe:e6:3b:81:20:db:36:52:e8:05:1b:0f:c0:44:68:8a:
2e:45:e3:5b:fb:17:6b:2e:8e:82:53:e7:70:55:ab:95:a7:97:
6f:9d:42:d5:6e:97:5b:4e:e3:bc:e6:bc:fb:c8:e5:c1:6e:bb:
a8:ee:37:8c:3e:e5:86:be:54:6c:0c:6d:84:64:d1:ea:bb:db:
a8:6c:f3:b9:56:be:a5:01:8f:b6:ae:08:70:7f:de:72:45:74:
7f:0b:4a:a6:4d:37:fc:8a:c9:94:31:81:fa:a9:8e:6e:09:e1:
e2:c9:da:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:12 2024 by rpki-client on console-fra.rpki-client.org