Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/LqYSWfzDkQdemasswUYFBarhlyg.roa
File: LqYSWfzDkQdemasswUYFBarhlyg.roa (raw, json)
Hash identifier: 4W7hoNInroIUYl7PrjOkuiTyzyzfd0L2vzySS9J5GSs=
Subject key identifier: 2E:A6:12:59:FC:C3:91:07:5E:99:AB:2C:C1:46:05:05:AA:E1:97:28
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 0187DCF9AD19AE0EF95AA9063AA2D0A8C991
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/LqYSWfzDkQdemasswUYFBarhlyg.roa
Signing time: Tue 02 May 2023 14:59:22 +0000
ROA not before: Tue 02 May 2023 14:59:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41164
IP address blocks: 46.212.0.0/17 maxlen: 17
46.212.128.0/17 maxlen: 17
178.232.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 03 May 2023 07:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:f9:ad:19:ae:0e:f9:5a:a9:06:3a:a2:d0:a8:c9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: May 2 14:59:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ea61259fcc391075e99ab2cc1460505aae19728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:4a:e5:02:0c:eb:ef:0c:32:7c:2a:02:fb:
22:9c:54:23:0c:b9:87:f4:3a:9e:e3:c4:3c:af:e4:
40:66:b7:40:0e:e6:fb:2d:ac:17:96:b1:4d:56:6b:
76:33:69:77:f2:4a:8a:cd:6b:7a:3e:e8:db:fc:ca:
f2:bc:4e:6a:1e:1d:1f:fe:02:a7:8b:d9:50:fa:bb:
b7:55:24:3e:93:3d:9c:47:7b:88:75:8c:ee:4c:c5:
49:ae:df:57:53:2a:88:b2:9d:54:e9:91:34:b5:4a:
06:20:fc:7f:26:30:60:ef:08:9f:38:ba:69:f6:24:
61:74:6e:b2:67:26:50:16:90:2b:7e:2f:8b:59:d3:
cc:83:b5:8b:cd:d1:07:c7:1f:34:5e:c7:64:da:5c:
a8:ae:56:d8:16:c9:20:83:f2:88:be:9f:86:e0:50:
18:83:9c:bc:c3:d7:6f:75:a6:dd:79:c6:d4:73:db:
df:ac:5c:82:75:65:34:3e:b6:15:a1:91:02:4e:20:
a9:48:82:3c:cd:a5:66:4b:cc:75:ba:a4:1b:d1:f6:
9b:e9:ca:b4:7b:8d:27:09:36:26:ac:4d:84:83:38:
e5:67:62:30:9c:03:9d:ee:80:de:58:8b:6c:ed:20:
ea:63:11:70:a7:41:4e:f3:61:80:0a:b9:0f:5f:8b:
97:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A6:12:59:FC:C3:91:07:5E:99:AB:2C:C1:46:05:05:AA:E1:97:28
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/LqYSWfzDkQdemasswUYFBarhlyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.212.0.0/16
178.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:1d:41:a6:37:91:94:7a:be:3d:06:49:3a:a8:f2:58:29:90:
90:1a:56:21:fa:57:4c:8b:fb:3a:24:14:f0:36:72:14:9b:c5:
1a:0a:fc:77:3e:be:f1:38:6e:8e:8b:70:d8:63:8c:e1:ea:b9:
f9:36:b9:d0:91:ed:38:55:85:60:12:3e:5b:d8:de:c3:ec:9d:
84:d1:34:68:b1:49:06:ce:16:ec:27:39:f0:26:9d:82:69:56:
ea:c2:48:1d:d0:de:c3:ca:d3:37:aa:b0:f7:04:89:f5:cc:20:
a3:dc:6c:60:6e:66:d4:13:40:8f:31:83:02:f2:e5:f5:20:fe:
e4:36:38:53:e1:3b:ca:22:92:e1:2b:bf:88:1a:0a:64:d7:4e:
d0:0f:3f:0d:3b:cf:e4:c1:39:83:9e:da:cc:0d:d6:a0:47:14:
35:06:03:7c:f5:2d:68:95:9c:88:c7:11:1b:17:1d:ab:40:46:
e9:ca:e7:ba:04:2b:5e:29:e7:a6:f9:af:06:a0:ac:d9:68:34:
63:1e:09:c5:96:e9:6b:34:e8:39:bd:e4:4a:5b:b9:8a:d8:d9:
94:da:4d:1f:72:6d:8c:b5:cd:85:05:b7:fb:dc:6c:c9:bc:ff:
b3:63:07:e5:1f:f6:c1:bf:0a:3a:50:52:64:b0:7d:4d:5e:21:
ab:0d:61:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:43 2024 by rpki-client on console-fra.rpki-client.org