Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lp0lRdWSTuSmcvEgLXzJEsIiGLY.roa
File: lp0lRdWSTuSmcvEgLXzJEsIiGLY.roa (raw, json)
Hash identifier: KczmGuO4X/t6OlTmvOnc3CeFytMsui15puRyOh3s4Iw=
Subject key identifier: 96:9D:25:45:D5:92:4E:E4:A6:72:F1:20:2D:7C:C9:12:C2:22:18:B6
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0187BA5F5257D1DF8B2BB736A7662BFFFC99
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lp0lRdWSTuSmcvEgLXzJEsIiGLY.roa
Signing time: Tue 25 Apr 2023 21:43:41 +0000
ROA not before: Tue 25 Apr 2023 21:43:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 45.140.220.0/23 maxlen: 23
77.83.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 May 2023 16:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ba:5f:52:57:d1:df:8b:2b:b7:36:a7:66:2b:ff:fc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Apr 25 21:43:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=969d2545d5924ee4a672f1202d7cc912c22218b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b6:e4:af:cd:cf:8b:3a:c7:4e:cf:66:34:50:
b2:19:b8:91:56:64:02:e3:3b:c9:bb:74:7a:b2:41:
33:10:c0:01:f3:8a:9b:23:1b:fc:3b:bd:4a:42:ab:
7d:52:19:95:82:33:f1:19:1a:6f:22:c9:39:17:8e:
3b:d8:75:08:55:81:b9:fe:fd:7d:cf:ae:60:79:2c:
59:df:a7:e4:ca:dd:53:91:d6:a5:d9:99:e3:58:ab:
53:37:01:3b:b4:51:f3:15:24:a6:a4:6d:4c:94:b4:
f5:a8:5f:ec:17:b2:ca:4d:ea:73:7f:79:98:d7:7e:
f9:ff:cc:f2:a5:97:ed:d5:6d:55:c8:0d:61:8c:a3:
fa:45:3f:b2:bc:6f:03:d7:b7:93:24:cc:7f:9e:dc:
2d:d3:ec:8f:78:51:f1:d2:d5:3b:b7:dc:25:c8:72:
25:1a:14:39:3e:06:ef:1b:f0:4a:7a:ae:4f:81:22:
7f:c1:c1:d7:68:a9:92:a8:bb:5c:6a:c6:f8:aa:31:
30:de:cf:7c:24:a7:c1:51:0c:eb:65:5d:1b:3a:e4:
54:66:61:bb:74:a9:ed:d2:d5:dd:71:0b:65:de:9a:
ee:54:ea:22:7d:f3:d6:c1:3d:ef:51:e3:9b:31:af:
c9:7f:66:50:79:15:6e:76:34:11:82:10:00:ed:f4:
95:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9D:25:45:D5:92:4E:E4:A6:72:F1:20:2D:7C:C9:12:C2:22:18:B6
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/lp0lRdWSTuSmcvEgLXzJEsIiGLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.220.0/23
77.83.241.0/24
Signature Algorithm: sha256WithRSAEncryption
32:9c:72:0a:b1:55:ce:b6:44:97:73:c4:9d:fd:93:3f:1d:1b:
a6:9f:34:6d:d0:93:99:e2:df:62:c5:e8:5d:10:9b:c9:f8:bf:
c1:50:c5:d9:81:3a:89:13:f3:ad:32:e3:8a:3d:87:4e:bc:c2:
2b:5c:ee:c8:f3:8c:00:1a:f2:f9:60:ae:3d:0e:7c:8f:07:23:
30:aa:d0:9a:3b:f2:f5:50:98:0e:f7:3d:4f:19:ad:4c:2a:54:
b2:35:53:a6:8e:89:07:2b:cc:b2:1c:bb:ae:52:be:e6:b8:37:
71:e3:90:ff:2b:ad:02:a8:72:0b:87:2a:8b:85:42:49:06:8a:
d3:6a:5a:49:eb:5b:70:a7:99:90:7e:29:69:8c:7b:e1:ad:8d:
5d:55:8e:3e:af:89:f3:67:a9:1d:6c:71:10:8b:91:04:04:cf:
47:2c:1c:80:e2:82:e0:0a:6f:de:c9:49:59:11:b1:49:b5:9c:
c1:75:4a:7a:e7:c8:20:a1:cf:4a:ac:05:4d:3c:c0:24:67:dc:
26:5b:e4:81:20:ca:f1:4c:c7:f5:4e:cd:a0:68:1a:b1:e7:82:
cb:2a:f0:a2:9c:49:c7:c1:f5:82:48:7c:c9:7f:42:43:4a:6e:
00:d5:95:b4:3f:2c:cb:45:35:32:23:1e:f6:c9:05:75:70:4e:
19:4a:c2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org