Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/lfVw1OptO3qgGj-MXoAo5fNFQD4.roa
File: lfVw1OptO3qgGj-MXoAo5fNFQD4.roa (raw, json)
Hash identifier: vEu17TYAAS5MhpHVWBx3guZeAEWrUo+XyPyyxqVu0to=
Subject key identifier: 95:F5:70:D4:EA:6D:3B:7A:A0:1A:3F:8C:5E:80:28:E5:F3:45:40:3E
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 018C8C95377B43F3686E199F9414DBD11DA4
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/lfVw1OptO3qgGj-MXoAo5fNFQD4.roa
Signing time: Thu 21 Dec 2023 13:33:58 +0000
ROA not before: Thu 21 Dec 2023 13:33:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136526
IP address blocks: 2.59.154.0/24 maxlen: 24
45.91.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:95:37:7b:43:f3:68:6e:19:9f:94:14:db:d1:1d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Dec 21 13:33:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95f570d4ea6d3b7aa01a3f8c5e8028e5f345403e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:cb:ec:e9:38:43:17:36:1e:0f:bd:bd:a3:
9b:c1:54:63:69:5a:ac:b6:57:d2:db:53:80:26:c0:
19:67:49:dc:98:7f:1b:17:cc:c4:75:d0:07:5d:50:
84:d3:f2:cf:8b:7c:29:3d:54:8a:d1:c3:ec:55:b3:
f6:cd:af:b1:0a:ac:cd:f1:ed:9f:5f:c7:a4:ac:be:
3d:de:8f:71:de:6e:59:96:d3:d1:47:c1:bb:82:43:
35:12:27:d4:39:b2:ad:85:09:ce:49:9b:2f:25:a1:
af:f6:34:f6:06:fe:35:bd:e9:c9:4b:95:d4:39:dd:
4c:8f:31:4f:be:1b:0b:a5:f2:cb:70:27:4d:0f:8f:
e0:fc:c9:17:44:13:87:d7:9b:42:a3:da:be:71:b2:
a8:d2:fe:9d:70:ea:db:bb:91:8f:4a:aa:d2:6b:5e:
e8:f7:6f:1f:cd:6b:a0:30:72:83:a3:ff:cb:0b:85:
e4:27:68:8b:91:1a:a7:31:7e:aa:fd:35:dc:62:b5:
65:8c:7d:44:52:86:e8:78:fd:9c:06:46:1c:a0:81:
77:c6:df:26:95:37:da:fc:21:67:f9:bd:a2:a4:43:
ac:81:a2:d4:5f:ec:8b:74:50:d1:e4:f5:b7:9a:b2:
4a:97:b3:2a:2f:5f:55:9a:4a:bf:66:7c:f9:33:d5:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F5:70:D4:EA:6D:3B:7A:A0:1A:3F:8C:5E:80:28:E5:F3:45:40:3E
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/lfVw1OptO3qgGj-MXoAo5fNFQD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.154.0/24
45.91.227.0/24
Signature Algorithm: sha256WithRSAEncryption
30:b9:73:11:ef:d2:0c:35:af:9c:d8:68:58:c8:ec:fc:79:4a:
d0:46:d0:9f:a6:2f:15:93:67:1b:55:13:86:53:f5:03:27:89:
1c:ad:1a:f0:23:b4:b3:0f:fe:15:51:2e:ed:d3:13:9d:f3:b2:
ad:af:a3:ec:d9:6a:42:5b:71:1a:1f:0f:0a:b1:47:bb:f1:9d:
52:7f:42:19:00:a6:18:f3:5c:86:d4:8b:6a:09:89:07:9a:34:
fe:be:d8:fd:af:3a:de:26:bc:80:fd:f5:5a:fe:90:a4:cd:7e:
31:18:a8:a3:0b:b3:97:bd:72:96:b1:54:bb:f7:0e:21:97:8e:
94:6d:70:7a:91:29:e9:95:2e:e9:5f:e8:f6:b6:b7:5e:8e:35:
51:25:92:65:c4:0c:70:bf:0f:b7:31:da:23:55:19:6d:e7:79:
89:2a:49:83:ab:56:c8:7d:2a:69:4d:26:ee:42:56:b9:d1:5b:
b4:9c:e3:70:a5:da:2a:53:a2:12:57:07:11:81:9f:0b:9a:3a:
71:97:22:8f:0b:24:d9:ba:a1:3d:13:b7:b6:97:fa:cc:8e:7e:
80:78:a7:a1:62:90:4a:51:df:9b:da:24:c7:68:e8:76:0f:15:
2b:37:84:c7:47:bf:50:a2:0d:8e:f9:d0:bc:d1:27:65:e7:ff:
f3:4c:2d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 18:26:21 2023 by rpki-client on console-ams.rpki-client.org