Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/lJVH10JJbPkCbQepyZSojPM-CIY.roa
File: lJVH10JJbPkCbQepyZSojPM-CIY.roa (raw, json)
Hash identifier: Pg4oyMbKHMefCDG2XE7Q6rZ2tNHfbasaJLkzLoLR0yU=
Subject key identifier: 94:95:47:D7:42:49:6C:F9:02:6D:07:A9:C9:94:A8:8C:F3:3E:08:86
Certificate issuer: /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Certificate serial: 018B46F02A82DA4D6A4F721E61C7D900E4EC
Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/lJVH10JJbPkCbQepyZSojPM-CIY.roa
Signing time: Thu 19 Oct 2023 07:57:06 +0000
ROA not before: Thu 19 Oct 2023 07:57:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208873
IP address blocks: 45.81.158.0/23 maxlen: 23
45.81.156.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:f0:2a:82:da:4d:6a:4f:72:1e:61:c7:d9:00:e4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Validity
Not Before: Oct 19 07:57:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=949547d742496cf9026d07a9c994a88cf33e0886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:da:43:05:59:1e:c3:38:2b:6b:9b:ad:db:08:
44:d5:2d:b8:80:a0:d6:07:6f:ee:55:83:43:55:cb:
c1:40:cc:2d:f1:c2:f1:b1:04:83:05:9d:e0:14:90:
65:a6:98:7e:96:36:44:0d:8a:80:54:f0:ab:fd:0e:
62:1f:5a:ca:f1:09:bd:d3:49:40:f9:73:9c:e5:4b:
cb:63:81:d1:e8:54:49:d6:c7:24:da:c0:35:91:ee:
59:ed:71:a1:b2:58:a8:b1:b6:48:f2:bf:f1:39:ee:
93:01:6d:3f:ae:6f:cd:0e:a8:35:2a:9f:f4:f0:d9:
36:3a:b7:76:d2:dd:d5:12:af:46:f4:59:af:b2:84:
b6:d0:b1:b0:7a:e5:c3:b4:7c:54:57:9d:44:76:05:
1b:67:ea:c1:82:7e:b4:97:7a:88:17:31:48:5d:66:
09:3c:83:5a:d9:26:5c:5b:0d:b6:32:7f:4a:4a:aa:
3f:33:ac:51:14:0e:0f:86:0f:0c:ab:01:4d:22:62:
95:87:73:ac:78:a2:f5:8e:e4:09:89:9b:23:19:b2:
66:99:03:70:ed:43:6c:03:2f:a9:c8:6f:22:40:e5:
5a:8b:f5:03:0f:f0:58:a0:fc:01:57:b3:51:34:19:
40:19:ff:9d:c6:30:a5:bb:25:67:56:c4:c4:26:e5:
51:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:95:47:D7:42:49:6C:F9:02:6D:07:A9:C9:94:A8:8C:F3:3E:08:86
X509v3 Authority Key Identifier:
keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/lJVH10JJbPkCbQepyZSojPM-CIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.156.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:4a:25:7b:28:a5:79:08:b6:0a:b1:d1:a2:c8:5d:cb:b4:56:
f3:8e:90:66:be:e8:19:ac:0f:12:35:7f:c5:0d:a0:b3:6a:9a:
f0:4a:fc:b1:ab:76:83:3a:64:e4:46:02:0a:17:81:81:11:09:
0d:f1:08:ac:8f:51:af:76:6c:d9:58:89:d9:cf:bf:ab:c9:54:
9b:ad:f7:3d:b0:ca:e1:c2:73:a7:fa:2e:4b:fb:de:d0:8a:4d:
89:43:7c:07:40:43:e0:3a:78:fd:59:34:df:44:f9:c6:40:59:
b7:5b:96:88:0d:fa:72:19:14:01:e7:5d:59:d9:68:7b:3f:20:
a8:bd:0d:b9:94:56:82:c8:b2:22:84:4d:cd:0c:bb:fe:8d:9d:
42:48:11:49:e6:ef:74:70:e3:a6:89:5c:38:48:7d:97:54:97:
00:75:af:71:e2:28:bc:ea:be:88:c3:35:11:12:49:89:43:0e:
e9:0d:82:82:a6:57:bc:a3:fc:75:3b:11:e2:cf:19:da:6d:74:
07:b1:15:82:76:47:5b:af:8c:2f:5c:3c:36:0d:d7:a9:a9:5c:
9d:8b:49:2a:41:d7:d5:7c:f2:18:db:9c:70:b0:ed:dc:33:42:
cd:06:fd:6e:36:8e:85:e2:b1:44:d6:47:d7:d6:e7:18:52:d1:
f2:e4:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:50 2024 by rpki-client on console-ams.rpki-client.org