Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LEZEmpbFUXJ0Q0_gq6AJ6f6jjkw.roa
File: LEZEmpbFUXJ0Q0_gq6AJ6f6jjkw.roa (raw, json)
Hash identifier: mt6KtHRPtH/HtlMRkeZgeWUwLypjQusKSOL1ehDHoRo=
Subject key identifier: 2C:46:44:9A:96:C5:51:72:74:43:4F:E0:AB:A0:09:E9:FE:A3:8E:4C
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018C2954AD3633D37B8456D9199227CBBD2A
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LEZEmpbFUXJ0Q0_gq6AJ6f6jjkw.roa
Signing time: Sat 02 Dec 2023 07:01:04 +0000
ROA not before: Sat 02 Dec 2023 07:01:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 45.154.96.0/24 maxlen: 24
45.13.117.0/24 maxlen: 24
45.13.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:29:54:ad:36:33:d3:7b:84:56:d9:19:92:27:cb:bd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Dec 2 07:01:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c46449a96c5517274434fe0aba009e9fea38e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:e2:cf:4b:cc:e7:c9:dd:94:b6:3c:79:c0:
f0:2a:ee:85:62:62:61:00:31:7e:08:34:f0:6c:79:
34:25:7e:66:57:4a:89:0e:0e:c4:99:54:4f:fc:36:
57:c7:ad:74:45:31:c7:d4:cc:5b:c7:8b:cf:01:6d:
d9:37:a4:b6:27:84:64:d7:c3:ec:93:51:f2:26:2f:
68:0f:8a:24:7d:c7:f8:d4:1d:06:1c:69:aa:89:ae:
fd:b1:5c:65:e3:04:92:37:67:f8:bf:81:54:15:d3:
18:80:e9:5e:7f:45:11:67:6c:07:b8:51:36:1c:d0:
b2:3d:83:46:b8:0f:bd:f8:8a:ac:b0:07:63:0a:a9:
3e:61:aa:d5:ca:df:2e:65:06:2e:da:4d:bb:17:1b:
3e:31:06:e2:cc:be:d1:96:f4:65:5a:ea:51:86:d5:
77:f5:5f:6a:28:8d:14:7e:f0:5a:49:92:c8:19:e0:
fe:2c:02:3c:23:c0:1a:a0:c7:d8:0c:8a:95:be:82:
f9:ee:ab:90:93:bd:41:61:e8:a9:3c:21:48:7d:36:
1c:a9:56:84:c1:39:86:89:18:f1:bb:d2:a8:e1:d3:
a2:f9:69:9b:1e:d3:37:2a:15:56:de:be:f9:d3:88:
88:02:e4:8c:e8:9e:12:16:1d:5c:fa:ee:dc:d9:53:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:46:44:9A:96:C5:51:72:74:43:4F:E0:AB:A0:09:E9:FE:A3:8E:4C
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/LEZEmpbFUXJ0Q0_gq6AJ6f6jjkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.117.0/24
45.13.119.0/24
45.154.96.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:90:6b:78:ca:e1:4b:7d:59:b9:22:13:97:17:ef:da:16:25:
d7:98:df:a2:a6:f8:93:8e:34:d6:0b:62:b0:36:07:4d:21:d3:
b7:17:ae:00:da:71:c7:d2:51:db:ee:cd:ea:94:9f:12:e6:5a:
86:7f:b3:3f:f0:10:3a:ce:6a:ed:b5:14:e0:d3:f9:59:44:31:
72:78:5d:b4:49:af:83:ec:d7:cd:e1:af:a1:0b:c8:10:31:f8:
3f:b8:98:a6:99:b7:e0:64:0d:bd:98:11:17:c5:eb:4f:b4:84:
0b:40:f2:24:61:bf:d7:bd:e3:84:b9:37:c0:54:ba:10:b2:66:
8f:e8:99:c9:0b:fa:d9:52:5f:cc:b3:4c:db:ba:e5:e0:00:81:
5d:5a:b4:8a:3d:2d:4b:45:84:83:ee:ce:72:36:8d:c5:95:2e:
ba:d9:d5:55:da:f7:94:84:80:48:1c:92:41:84:c6:d7:51:61:
9e:9d:be:93:ec:9c:5b:b7:e5:6c:38:7f:0c:28:25:3f:82:bc:
98:ca:84:2d:5a:c2:0d:84:6d:e0:47:d8:2b:6d:0c:28:00:5a:
38:76:e6:74:ec:58:76:47:1b:2a:e7:22:6e:eb:37:a5:7e:f4:
03:79:74:66:b1:82:da:04:44:c9:10:a9:17:52:25:d3:cd:d9:
12:0b:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:01 2024 by rpki-client on console-ams.rpki-client.org