Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/LwGb8WkFuIRV62vg1E32bEE3avg.roa
File: LwGb8WkFuIRV62vg1E32bEE3avg.roa (raw, json)
Hash identifier: cA3IAI+/cT1HgNOcqaAH0UKjT+753HwjHdvFOi4i/9c=
Subject key identifier: 2F:01:9B:F1:69:05:B8:84:55:EB:6B:E0:D4:4D:F6:6C:41:37:6A:F8
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018BD3ECDD1CD9A3BD1A0ABA781A895425A6
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/LwGb8WkFuIRV62vg1E32bEE3avg.roa
Signing time: Wed 15 Nov 2023 16:59:57 +0000
ROA not before: Wed 15 Nov 2023 16:59:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.151.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:ec:dd:1c:d9:a3:bd:1a:0a:ba:78:1a:89:54:25:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Nov 15 16:59:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f019bf16905b88455eb6be0d44df66c41376af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:65:6f:7a:8b:ad:71:6e:4d:97:d1:a0:2f:8a:
3c:ec:9b:2e:b4:62:d7:e5:98:be:b0:69:16:50:9d:
a7:31:bb:04:f2:ad:54:07:8d:5f:77:2e:6c:39:d5:
1b:45:02:50:2e:8a:19:4f:8d:22:2b:06:33:cb:be:
14:d7:79:28:83:96:90:35:9d:9a:da:75:4a:5c:46:
ff:1f:3c:d7:a1:4a:0b:28:1c:4e:48:4c:fc:f4:29:
28:5d:49:d2:f5:41:29:0c:06:e5:9a:b5:5a:90:72:
46:f5:94:83:ab:7c:7a:c9:99:9e:ee:8e:4f:a0:a3:
37:0b:23:34:82:d8:c3:a6:d2:ef:26:15:34:db:d6:
f1:26:f9:d3:ce:c6:76:9e:d5:12:b6:60:c5:bd:be:
5d:44:7f:b8:3d:00:eb:19:18:65:26:2e:cd:57:54:
d2:99:ea:65:d0:0e:5d:22:d2:db:a4:34:f5:0b:f0:
ee:de:0c:c9:7c:8b:07:7d:7d:82:69:d7:7d:4f:66:
ba:0d:00:28:a5:d4:b0:da:90:a9:eb:1d:ec:c4:4f:
7d:92:81:92:d3:a4:85:63:54:3d:27:f8:21:73:8c:
35:48:c1:c2:b0:64:96:83:1c:ff:f4:2c:9d:41:41:
31:5b:e9:a5:b6:67:80:0a:00:87:ba:15:25:d8:85:
62:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:01:9B:F1:69:05:B8:84:55:EB:6B:E0:D4:4D:F6:6C:41:37:6A:F8
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/LwGb8WkFuIRV62vg1E32bEE3avg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.97.0/24
Signature Algorithm: sha256WithRSAEncryption
01:99:d2:28:7a:6c:4b:c1:83:49:5a:eb:75:43:b8:61:32:c0:
94:1d:5b:ec:e4:d1:9e:35:1e:06:bf:19:5c:b8:0c:55:08:fb:
9d:d4:1f:bb:1d:81:fc:4c:ad:73:a8:38:f2:02:ef:ce:d7:80:
9a:3c:60:8f:24:67:96:38:d2:05:05:f6:bd:a6:69:ce:c4:78:
b7:47:79:b8:2e:17:03:72:b8:c4:bf:db:ca:2c:88:f1:0a:e1:
88:4b:4e:f8:fb:3e:73:2e:65:7c:76:f8:35:88:70:dd:a1:d1:
7c:93:63:e5:48:5d:b6:5a:44:da:04:33:22:db:6b:b1:4e:ed:
b5:bd:44:ef:37:c4:7f:72:86:a6:82:76:75:36:9a:2f:ba:6e:
0f:cd:2f:23:67:ba:19:c2:b4:8b:e0:8c:02:fd:d3:1d:39:8d:
92:cd:6d:47:6d:5b:b8:11:34:89:07:be:6c:ea:93:cd:7e:67:
83:c0:bb:ff:74:44:c3:69:64:0b:0a:89:83:6c:15:32:d4:1a:
75:20:5e:f7:e1:50:eb:9b:1b:b1:42:a0:dc:95:7d:81:09:0d:
05:bd:18:bd:2d:b5:48:a8:37:29:84:db:44:9e:31:91:fa:f5:
50:bb:52:ab:c2:47:ee:2b:24:16:1c:87:d7:b4:1c:b0:ef:86:
db:96:f7:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvT7N0c2aO9Ggq6eBqJVCWmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0
NzA2OTcwHhcNMjMxMTE1MTY1OTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjAxOWJmMTY5MDViODg0NTVlYjZiZTBkNDRkZjY2YzQxMzc2YWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmVveoutcW5Nl9GgL4o87JsutGLX
5Zi+sGkWUJ2nMbsE8q1UB41fdy5sOdUbRQJQLooZT40iKwYzy74U13kog5aQNZ2a
2nVKXEb/HzzXoUoLKBxOSEz89CkoXUnS9UEpDAblmrVakHJG9ZSDq3x6yZme7o5P
oKM3CyM0gtjDptLvJhU029bxJvnTzsZ2ntUStmDFvb5dRH+4PQDrGRhlJi7NV1TS
mepl0A5dItLbpDT1C/Du3gzJfIsHfX2Cadd9T2a6DQAopdSw2pCp6x3sxE99koGS
06SFY1Q9J/ghc4w1SMHCsGSWgxz/9CydQUExW+mltmeACgCHuhUl2IViPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC8Bm/FpBbiEVetr4NRN9mxBN2r4MB8GA1UdIwQY
MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt
ZDRkYmY3MDY2ZmQzLzEvTHdHYjhXa0Z1SVJWNjJ2ZzFFMzJiRUUzYXZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz
LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZdhMA0G
CSqGSIb3DQEBCwUAA4IBAQABmdIoemxLwYNJWut1Q7hhMsCUHVvs5NGeNR4Gvxlc
uAxVCPud1B+7HYH8TK1zqDjyAu/O14CaPGCPJGeWONIFBfa9pmnOxHi3R3m4LhcD
crjEv9vKLIjxCuGIS074+z5zLmV8dvg1iHDdodF8k2PlSF22WkTaBDMi22uxTu21
vUTvN8R/coamgnZ1Npovum4PzS8jZ7oZwrSL4IwC/dMdOY2SzW1HbVu4ETSJB75s
6pPNfmeDwLv/dETDaWQLComDbBUy1Bp1IF734VDrmxuxQqDclX2BCQ0FvRi9LbVI
qDcphNtEnjGR+vVQu1KrwkfuKyQWHIfXtByw74bblvfh
-----END CERTIFICATE-----
Generated at Tue Nov 21 20:06:15 2023 by rpki-client on console-ams.rpki-client.org