Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/LZfU7iC-kcmmP-7aH18Wc6xjyj8.roa
File: LZfU7iC-kcmmP-7aH18Wc6xjyj8.roa (raw, json)
Hash identifier: 9N7zAsLDcZvMI0oJCR0aCsB8vUwIlX6JOl4/0v5OUFU=
Subject key identifier: 2D:97:D4:EE:20:BE:91:C9:A6:3F:EE:DA:1F:5F:16:73:AC:63:CA:3F
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018803BCDF0C18BD5E05ACD74B5B522B0F07
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/LZfU7iC-kcmmP-7aH18Wc6xjyj8.roa
Signing time: Wed 10 May 2023 03:38:09 +0000
ROA not before: Wed 10 May 2023 03:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.65.113.0/24 maxlen: 24
45.65.114.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:03:bc:df:0c:18:bd:5e:05:ac:d7:4b:5b:52:2b:0f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: May 10 03:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d97d4ee20be91c9a63feeda1f5f1673ac63ca3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:16:21:ef:3b:b8:f0:6d:65:2d:bd:ab:23:4d:
d3:fc:bd:17:36:04:58:36:c7:27:a9:45:16:80:36:
57:e0:ce:b6:bd:2c:88:e1:24:60:12:a3:fd:75:51:
89:f1:9f:ac:5c:53:b4:9d:7c:75:9b:00:76:fc:31:
8f:f6:87:ed:b2:27:fb:6a:27:16:d7:54:d9:e5:3d:
3b:e3:34:d4:fe:76:6d:2a:f7:ba:07:74:3e:5c:da:
45:f4:28:a2:e4:90:de:ee:b4:b3:bb:0e:f4:8d:b5:
c7:67:46:bc:a5:35:8b:21:d3:5b:4a:88:2f:15:18:
64:95:8e:c6:15:76:48:69:66:14:5e:a4:a2:66:3f:
25:7b:6a:2f:c7:f6:17:00:c4:83:c5:34:1e:40:fa:
d3:7f:0c:4f:8b:21:8d:17:5b:34:81:83:81:62:35:
b9:bf:ad:e7:0f:19:a2:5c:f3:36:d2:82:4c:91:c0:
9a:54:ff:42:06:f8:a1:79:d7:11:8e:24:0e:93:22:
f1:93:2e:7d:6b:a9:c4:2a:af:e6:05:a4:bb:52:d2:
f7:9c:74:26:60:c1:50:63:7f:72:a8:23:13:a2:87:
b0:e0:68:94:2e:ff:74:3e:a0:2d:3e:ae:7d:26:7f:
e6:58:b3:f6:0c:e1:06:25:1a:f8:9b:29:48:40:01:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:97:D4:EE:20:BE:91:C9:A6:3F:EE:DA:1F:5F:16:73:AC:63:CA:3F
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/LZfU7iC-kcmmP-7aH18Wc6xjyj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0-45.65.115.255
Signature Algorithm: sha256WithRSAEncryption
68:46:98:49:2c:1a:3c:0f:99:4d:8f:11:36:71:f8:5c:c9:4d:
71:f3:39:da:05:08:db:75:3e:28:fd:f6:0e:d4:fd:67:81:89:
ce:57:24:2f:a0:b8:56:f0:cf:be:1d:d7:b9:35:2d:bf:85:26:
ab:c5:4f:b2:68:29:68:7e:6f:14:1e:9f:27:83:0f:be:2b:7c:
6f:19:64:12:00:f9:f3:7b:5a:ba:08:d7:f7:b7:c4:2b:47:94:
ec:c5:6b:93:81:db:84:59:ca:ab:6c:55:20:cf:b8:a8:0c:6f:
86:49:56:b5:02:b8:46:18:66:f6:78:7b:00:2f:a7:02:d4:78:
d3:1e:b1:65:ce:c2:55:db:51:77:84:3b:a4:99:2d:c0:dd:6a:
2a:63:b9:97:88:a9:14:97:50:c6:e7:af:c6:ce:72:ab:62:02:
c4:33:71:b1:0d:0b:e2:56:be:9c:2b:4f:21:5a:0d:97:c5:0d:
28:af:6f:5d:6e:58:ce:56:67:b4:0b:b3:c3:0b:08:92:78:d2:
1f:7f:b1:97:e3:39:a7:49:ca:50:54:0d:41:c5:6f:de:41:db:
12:64:13:c6:3f:d5:80:ce:07:47:68:25:0a:c6:77:5d:c6:39:
30:e6:15:a0:4d:00:3a:94:c9:d0:21:5a:b7:a6:c9:c2:bc:bd:
71:d3:76:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:13 2023 by rpki-client on console-fra.rpki-client.org