Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/lPufuP-Uv9w6L00hWZ9C0LARjDo.roa
File: lPufuP-Uv9w6L00hWZ9C0LARjDo.roa (raw, json)
Hash identifier: 5kHwpNQvcePm/c2SpRtm0bxTltOrzSLehNBMz7Ja6Jw=
Subject key identifier: 94:FB:9F:B8:FF:94:BF:DC:3A:2F:4D:21:59:9F:42:D0:B0:11:8C:3A
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018CC0EDC97CCABE83BD3C5B9922B00B36FD
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/lPufuP-Uv9w6L00hWZ9C0LARjDo.roa
Signing time: Sun 31 Dec 2023 17:30:58 +0000
ROA not before: Sun 31 Dec 2023 17:30:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.84.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c0:ed:c9:7c:ca:be:83:bd:3c:5b:99:22:b0:0b:36:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Dec 31 17:30:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94fb9fb8ff94bfdc3a2f4d21599f42d0b0118c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:ac:4f:9e:42:c2:ba:e1:8e:c5:03:b7:a8:
5a:a0:b4:93:74:59:72:d4:9a:38:ea:3b:a8:10:8e:
e1:31:9b:4d:05:bd:1c:f6:42:fc:96:66:bb:03:aa:
48:f1:d6:0e:f1:12:77:1f:df:7a:23:ce:ac:f5:3d:
f6:fa:c7:aa:54:4a:8b:12:ce:5e:2c:6e:52:10:ec:
d1:ca:f5:bf:0e:d6:70:b0:ce:dd:98:33:06:5a:0e:
1c:b6:04:6e:ae:26:f3:aa:43:89:1b:3c:61:83:37:
d5:0f:d3:13:68:b7:7b:58:9c:05:a9:6d:59:a3:01:
38:54:d0:72:52:bf:6e:57:23:c8:b2:7d:48:0a:de:
a1:0b:8f:87:64:a8:b0:fe:28:fb:61:c6:56:5a:23:
17:da:bd:da:33:44:90:2d:8c:2b:3b:27:28:ce:58:
71:4d:bd:56:a5:90:07:8d:4a:fd:f4:2c:78:11:c1:
dd:1c:be:a3:5f:f3:1a:16:ad:30:ec:6b:d4:2e:bc:
43:8e:9a:7c:ce:b9:86:32:25:f9:65:4e:b7:2c:b8:
3e:91:bb:b4:bf:81:65:19:6a:09:55:bb:f1:b0:74:
c3:92:cf:82:1d:35:ba:93:f4:5e:6d:0b:e3:82:f9:
eb:f8:ec:22:65:ab:cc:db:3c:7d:86:4a:ac:75:94:
61:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FB:9F:B8:FF:94:BF:DC:3A:2F:4D:21:59:9F:42:D0:B0:11:8C:3A
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/lPufuP-Uv9w6L00hWZ9C0LARjDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:21:2f:7c:27:12:13:98:17:ca:ab:02:9d:fd:a7:3a:c0:ff:
22:ba:4d:3d:66:f9:27:09:2c:67:6e:df:16:a4:cb:fd:b1:4e:
f5:2b:ce:b6:30:d4:84:44:b0:c5:ff:04:93:52:49:e9:4a:c7:
2a:21:73:b1:84:04:06:67:58:4a:00:66:07:42:1f:70:c3:8f:
ee:ad:48:dd:72:21:72:59:1e:1d:c4:eb:52:7f:2a:2c:a2:13:
7e:52:90:9e:8c:ed:f1:69:77:56:d6:27:1f:eb:9f:37:55:67:
08:a2:5a:3c:2a:69:d0:6e:cf:a3:57:88:3c:52:77:10:71:42:
84:0b:2d:12:43:75:8a:18:d7:e9:6e:f1:be:42:0c:a6:50:5e:
51:f5:38:bd:af:12:6d:8d:3a:7c:46:e8:a2:43:30:b6:28:0b:
c1:63:d7:9b:45:99:18:49:eb:54:57:96:37:3e:1b:2c:2d:c2:
36:d5:33:d5:ed:95:98:38:01:76:42:c2:54:ed:7f:36:86:50:
7b:21:c7:74:2b:46:79:8e:91:d2:6a:2f:b8:0c:82:e9:f7:69:
3e:98:ab:da:4b:57:8b:0c:63:49:26:51:cc:ca:4c:57:a1:80:
ed:4f:80:84:ab:44:23:7d:e3:72:16:87:13:0c:d1:f4:aa:7a:
50:7d:db:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 31 21:09:36 2023 by rpki-client on console-fra.rpki-client.org