Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/LaglyV_j-853shQCsgAYehOZuRg.roa
File: LaglyV_j-853shQCsgAYehOZuRg.roa (raw, json)
Hash identifier: 14jWvDwbGpJC1DDuirh0Gv9vCdsNyZuulbyCPO02iaQ=
Subject key identifier: 2D:A8:25:C9:5F:E3:FB:CE:77:B2:14:02:B2:00:18:7A:13:99:B9:18
Certificate issuer: /CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Certificate serial: 0190AB278E7B6FBA3B69583F38C2DFA3863E
Authority key identifier: 48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/LaglyV_j-853shQCsgAYehOZuRg.roa
Signing time: Sat 13 Jul 2024 08:13:34 +0000
ROA not before: Sat 13 Jul 2024 08:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215655
IP address blocks: 45.86.4.0/24 maxlen: 24
45.86.5.0/24 maxlen: 24
95.130.225.0/24 maxlen: 24
185.140.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 13:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ab:27:8e:7b:6f:ba:3b:69:58:3f:38:c2:df:a3:86:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Validity
Not Before: Jul 13 08:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2da825c95fe3fbce77b21402b200187a1399b918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:11:6a:79:79:91:8c:67:40:0b:fc:54:b5:3c:
30:4a:51:8b:d4:e4:7a:b0:2a:c4:42:52:52:f5:a1:
9d:7b:25:65:dc:69:9e:27:41:92:10:84:a0:c3:de:
6b:76:ba:e6:83:fd:85:4c:05:77:c3:94:8e:76:4d:
5b:8e:88:7c:b9:38:f2:6e:28:24:e1:bc:9e:a2:62:
b4:90:76:ed:d8:6a:35:81:04:73:9e:37:45:90:ee:
bd:eb:00:0d:df:51:8f:06:8d:49:66:4a:fc:d9:1b:
eb:9b:fd:d8:cd:0a:f0:27:e1:78:d0:1f:ca:dd:14:
95:53:7d:03:75:f8:75:59:23:41:0a:2c:a2:78:d3:
48:0c:fb:6e:92:ec:cc:26:ae:8f:0a:50:ef:d6:78:
61:9d:48:4a:ba:ed:fd:6f:27:32:36:a2:3c:c6:31:
2e:1b:87:d0:04:57:a2:9d:cc:67:a7:70:3b:41:cd:
d4:88:7f:ca:ac:d0:75:7d:09:18:da:f2:8a:ca:01:
69:6f:c0:e3:f4:c0:e1:23:7e:a0:18:fe:77:4e:ac:
c8:50:7e:ce:db:be:e3:16:ab:80:d2:ca:c2:a6:12:
fb:86:5c:13:e9:b5:1e:47:fd:b8:40:60:a4:cf:85:
f9:ff:19:12:fa:6b:3f:06:c3:e4:22:04:df:b2:80:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A8:25:C9:5F:E3:FB:CE:77:B2:14:02:B2:00:18:7A:13:99:B9:18
X509v3 Authority Key Identifier:
keyid:48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/LaglyV_j-853shQCsgAYehOZuRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.4.0/23
95.130.225.0/24
185.140.235.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:5c:e4:28:de:50:10:5d:f6:62:b3:e6:c3:34:4c:34:c4:ec:
fa:ac:1a:49:fc:72:6c:9c:45:41:cc:92:4c:21:63:a7:e6:fc:
65:8f:14:d0:fc:66:21:5e:ac:78:fa:20:35:00:da:7d:0a:f2:
d1:e9:eb:dd:f6:10:c0:8e:40:e8:c2:45:21:a1:35:66:18:9f:
ad:11:0a:7e:35:f8:c8:3d:b6:9f:15:b0:d6:a4:1a:5a:bd:53:
bc:ea:bf:71:93:cc:91:7f:ad:a1:e3:9e:23:1b:d1:53:99:63:
81:66:73:09:0f:60:22:26:7b:2d:2b:f6:a9:f8:1b:2a:6d:3a:
a1:75:f8:3a:b0:a5:71:3f:a0:57:4a:cd:bf:d6:08:f4:70:c1:
9d:d7:3a:8d:c6:d5:e2:4c:a6:5e:3c:f5:e4:f4:6f:be:11:83:
70:29:e7:b2:38:32:31:25:94:e9:03:31:f4:ed:3a:75:9b:b2:
92:82:98:23:f1:cb:e8:c0:90:22:e6:de:e6:82:a7:4a:09:4d:
30:81:7c:cb:c5:23:5f:f8:79:9b:75:58:3b:c7:61:20:47:1d:
97:3e:84:3d:cd:ef:ad:36:97:69:10:5d:90:a3:10:fc:0b:94:
51:e1:23:30:ca:fd:6e:41:10:4b:e0:0f:3b:b2:ae:37:c0:12:
aa:ba:99:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 16:23:40 2024 by rpki-client on console-ams.rpki-client.org