Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/4LM-1Ht5fhqxrzpupygfZ766Y8o.roa
File: 4LM-1Ht5fhqxrzpupygfZ766Y8o.roa (raw, json)
Hash identifier: HtgIyyn1aBBms8SUA/EjquSVx1jksP/rU9OApKSzYMY=
Subject key identifier: E0:B3:3E:D4:7B:79:7E:1A:B1:AF:3A:6E:A7:28:1F:67:BE:BA:63:CA
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0187EFCCBE18A64FD180DC3CABEDCC414C6C
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/4LM-1Ht5fhqxrzpupygfZ766Y8o.roa
Signing time: Sat 06 May 2023 06:43:05 +0000
ROA not before: Sat 06 May 2023 06:43:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213221
IP address blocks: 45.158.252.0/24 maxlen: 24
45.158.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ef:cc:be:18:a6:4f:d1:80:dc:3c:ab:ed:cc:41:4c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: May 6 06:43:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0b33ed47b797e1ab1af3a6ea7281f67beba63ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:10:84:c1:43:00:7b:3f:f0:80:e7:83:23:
02:96:d8:45:11:2f:93:4a:4e:7e:19:61:18:86:a2:
25:db:c7:89:b7:a7:f2:cf:5a:6a:fa:28:13:ee:d9:
3d:8c:0a:66:3c:3b:0d:ab:82:3b:2b:92:72:30:1f:
4f:82:3c:27:2b:e8:b7:2f:e4:58:ed:70:2d:11:93:
c5:6d:9a:00:71:6e:d0:31:d6:8c:ec:ed:60:2c:aa:
ba:04:46:5d:9d:8e:0c:1c:22:fe:28:cf:a9:9d:65:
df:15:10:e4:c3:c8:a0:26:db:2f:de:bd:96:27:f1:
9d:55:6c:05:56:e4:ca:0b:e8:9b:37:d7:c0:87:ef:
f8:0c:83:52:0b:c0:03:36:bc:ff:d3:bf:11:20:81:
3c:fd:89:bc:ec:7e:36:8c:a2:af:d0:24:44:bd:ed:
d7:1b:8e:c8:40:3b:55:ff:f9:06:4c:b7:87:09:5d:
60:54:26:63:e2:cc:ff:c9:70:d1:c9:fb:43:01:fe:
68:dd:4c:d1:47:01:5b:b6:8b:f1:b1:10:8a:eb:54:
f8:c5:27:4f:d3:3e:24:43:6c:cf:4c:54:ef:e9:19:
aa:78:d3:ee:ff:92:bb:e8:2d:41:99:b3:f7:34:ca:
82:d1:ea:dc:8a:64:54:f1:12:d7:1b:0a:c6:5a:90:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B3:3E:D4:7B:79:7E:1A:B1:AF:3A:6E:A7:28:1F:67:BE:BA:63:CA
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/4LM-1Ht5fhqxrzpupygfZ766Y8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.252.0/24
45.158.255.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c2:59:ce:e7:e6:66:47:c4:34:f3:41:c6:e0:f4:f6:b4:2b:
7c:90:8c:91:54:b5:84:d0:b2:1a:3d:b8:69:1d:a8:23:82:94:
0c:58:31:81:b6:0a:3e:36:2e:51:be:ca:90:76:4e:af:2f:29:
fd:a1:a1:ae:7a:f0:65:8f:72:d6:41:26:52:52:63:06:4c:8a:
7c:7b:d6:35:42:72:4c:bd:f5:f7:b9:79:cb:a3:db:c1:9d:aa:
cd:75:97:18:a0:a4:50:2e:a7:11:2a:1d:dd:96:c8:fc:5e:09:
83:db:91:a1:76:6d:4c:22:23:c3:27:1c:d5:b7:dd:74:5d:7e:
11:9f:c7:6b:fb:2c:f3:73:94:10:eb:1b:91:9a:c2:41:e7:a8:
96:40:2c:4d:c8:9c:5b:2e:f9:f9:64:7c:2a:19:df:56:50:be:
f8:3c:9d:04:ae:11:45:95:91:04:95:f8:5e:68:dd:79:cd:d2:
d8:88:36:3a:10:92:db:b3:07:87:8a:48:0b:a0:04:40:8f:ce:
50:a0:9c:5f:04:65:e5:40:b9:2d:54:4e:4d:da:58:d8:96:62:
f7:ea:a2:25:0e:29:19:59:34:ac:56:62:d8:b5:92:ed:aa:6a:
98:4e:32:56:47:9b:f0:b9:4c:e5:f4:e5:28:bd:26:cc:a8:15:
c7:fb:cc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org