Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/lixWLCMfxnx129ClIaJ2y0ZPAj8.roa
File: lixWLCMfxnx129ClIaJ2y0ZPAj8.roa (raw, json)
Hash identifier: OceA1zdOv6fuT/lUy7FhSwoa16I9yV+YzZsxGe5bS5Q=
Subject key identifier: 96:2C:56:2C:23:1F:C6:7C:75:DB:D0:A5:21:A2:76:CB:46:4F:02:3F
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 018E18FEE2CA39A24218DC1939A0163B3FD4
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/lixWLCMfxnx129ClIaJ2y0ZPAj8.roa
Signing time: Thu 07 Mar 2024 12:59:01 +0000
ROA not before: Thu 07 Mar 2024 12:59:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.9.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 11:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:fe:e2:ca:39:a2:42:18:dc:19:39:a0:16:3b:3f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Mar 7 12:59:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=962c562c231fc67c75dbd0a521a276cb464f023f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:f3:38:d4:e3:d6:75:c7:3c:ec:05:35:2c:
3d:ee:ff:b2:86:af:79:13:f5:5c:01:d5:04:40:84:
3a:de:7f:94:09:5c:6a:70:1f:8e:14:d3:2f:a3:5e:
6b:23:29:49:92:30:cd:06:35:67:89:f4:06:52:54:
10:f4:88:19:be:cb:34:d1:6e:38:f4:3c:97:82:68:
9f:95:7d:ba:17:7e:9f:ad:52:6d:fd:38:88:d0:6e:
7e:b3:a1:44:6c:00:63:3d:ca:e6:2d:a1:c5:9b:21:
f8:37:53:bd:78:50:03:ba:d7:1a:7e:5d:27:d4:b8:
0d:58:34:e3:de:74:a9:b0:65:22:58:87:c5:e1:75:
16:07:20:f2:48:9e:2f:43:fd:04:0e:90:7f:fe:1a:
37:82:15:05:5b:6c:db:bb:af:9e:24:fe:80:ff:24:
4a:cc:19:bb:ba:3e:87:1d:56:33:4e:76:51:19:e7:
34:88:00:e5:ac:80:2a:46:01:d3:ba:22:23:2f:ed:
8b:07:5e:42:64:e7:66:d4:48:a0:68:19:09:f2:64:
cb:a1:52:74:44:93:07:5c:79:6f:41:22:7f:03:a5:
c4:ae:02:5a:6a:4c:f8:3e:68:ee:38:dd:b2:08:a4:
ea:8b:0b:94:14:e7:95:3e:62:ec:02:c3:a4:a2:40:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2C:56:2C:23:1F:C6:7C:75:DB:D0:A5:21:A2:76:CB:46:4F:02:3F
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/lixWLCMfxnx129ClIaJ2y0ZPAj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.128.0/24
Signature Algorithm: sha256WithRSAEncryption
28:03:9d:40:70:e9:b8:39:78:b8:1b:39:c6:b8:f4:48:47:9f:
49:c3:49:c3:1d:43:23:db:3d:6d:4d:5d:f0:1d:73:c2:e0:15:
d3:69:9e:b9:26:60:ee:87:70:9d:20:63:b3:b5:0d:6d:2b:b0:
e6:60:0c:23:9d:bf:43:64:97:f5:5c:9f:a5:29:e2:17:f6:e1:
d8:29:a4:b1:d8:84:9a:d8:b9:a0:d5:d2:7f:9c:f4:8e:92:ae:
04:05:ce:b0:70:c3:da:9b:ae:06:70:1d:59:2b:ca:c2:ef:68:
41:43:21:b2:95:10:0a:e8:24:a7:c6:90:1a:90:c6:e3:c9:aa:
8d:fe:72:1f:ac:1c:54:5f:c1:24:80:b2:7c:e1:1b:1e:50:f1:
98:22:9b:b1:4b:46:f5:fb:a9:53:f3:16:8c:26:c2:03:c5:69:
aa:8a:08:dc:22:a8:28:fb:1f:4d:0f:5b:f4:64:ff:79:d7:26:
0c:34:24:7e:f1:80:9b:29:16:e6:26:5b:50:56:d9:7e:4d:e0:
a7:f3:fc:61:ae:db:e2:e7:fb:9e:97:77:8c:64:29:5e:fc:b7:
c8:22:57:38:be:d6:2c:9d:2b:3d:28:8e:25:38:29:7a:2c:79:
ea:0e:a1:e8:28:54:e3:a0:7a:c8:56:aa:03:80:b1:1b:dc:e7:
5f:63:30:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:55 2024 by rpki-client on console-fra.rpki-client.org