Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/lmuZpk_0do2kktcrHHXllKBGLHA.roa
File: lmuZpk_0do2kktcrHHXllKBGLHA.roa (raw, json)
Hash identifier: mlsdixLS5FpwgZe3x7LUAMJHMI7apI07AKmZ/Xl6EQw=
Subject key identifier: 96:6B:99:A6:4F:F4:76:8D:A4:92:D7:2B:1C:75:E5:94:A0:46:2C:70
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 0186A215974F8B0795868D280EDB67172EB8
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/lmuZpk_0do2kktcrHHXllKBGLHA.roa
Signing time: Thu 02 Mar 2023 11:29:29 +0000
ROA not before: Thu 02 Mar 2023 11:29:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207492
IP address blocks: 45.140.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:15:97:4f:8b:07:95:86:8d:28:0e:db:67:17:2e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Mar 2 11:29:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=966b99a64ff4768da492d72b1c75e594a0462c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:7d:83:75:5d:4c:12:91:cc:c3:ec:1c:54:
fe:dd:a9:db:23:62:4c:bc:79:5e:61:85:af:87:e7:
d3:1d:64:df:61:0e:e0:38:2b:f7:0e:e9:ac:23:8d:
ec:71:85:c9:d2:09:4b:cf:23:71:38:40:c9:5f:b9:
a0:e1:67:96:76:f5:ca:58:da:97:04:0a:5c:33:9a:
bd:56:38:8a:48:5b:af:46:4d:54:64:bb:ea:1a:c9:
11:e7:9b:02:07:09:64:6b:ab:36:8c:a9:a7:b1:20:
fe:26:d0:9f:b0:1b:75:c7:e5:4c:28:8e:31:1a:b8:
50:a6:5c:c4:33:91:1a:8a:99:63:81:65:5a:82:12:
f0:4b:15:16:62:8c:78:91:b6:e9:a3:5a:0d:21:0c:
c6:68:23:b6:90:e0:a9:f3:a6:a5:17:68:76:de:2a:
3a:6b:27:d2:7f:4f:52:14:6b:f3:18:6c:ae:7b:06:
10:ee:85:eb:5d:31:3d:7d:95:d2:5d:91:da:e6:63:
14:ef:45:32:dc:cb:da:ce:9f:7f:24:76:1c:c9:83:
5c:d3:b6:b5:32:85:49:67:3a:32:12:5c:9b:73:fa:
98:63:71:10:e2:2f:fd:ed:60:53:0c:5a:1e:9a:f9:
46:eb:0f:45:5f:f8:76:fa:9e:67:18:c0:38:df:14:
cf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6B:99:A6:4F:F4:76:8D:A4:92:D7:2B:1C:75:E5:94:A0:46:2C:70
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/lmuZpk_0do2kktcrHHXllKBGLHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.40.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:46:db:d8:f5:eb:03:29:1b:1f:a5:b1:af:d8:ce:3f:e9:1e:
a7:fb:e4:ce:69:a0:f4:27:f6:18:6f:30:00:21:04:e9:1c:95:
07:8d:24:c5:b1:2c:f7:2a:a6:7a:63:8e:68:5c:c5:b3:b1:31:
dd:e4:95:a9:71:c0:03:f1:14:b4:61:7e:66:2b:2b:d6:3b:54:
e9:c0:e1:f7:79:c1:41:9b:b8:e5:7e:f4:79:cc:d3:63:03:c3:
65:89:ab:85:6e:b8:a0:bc:41:96:3a:df:2c:1f:e5:d8:ac:1a:
28:2d:25:55:be:52:82:ae:9d:47:2f:c3:fd:36:25:28:bc:e9:
7e:58:18:20:e3:74:9c:c7:ea:1a:86:fc:a4:7a:e7:0c:8a:a8:
44:2b:12:b3:8b:e6:32:de:26:fe:05:ae:eb:66:d8:ce:51:44:
dd:f7:a0:b4:18:32:86:ae:ba:d1:3d:60:a6:9b:a1:25:07:fb:
fb:26:18:33:c7:6d:b6:5e:23:4a:7e:d2:52:a4:90:00:4e:bd:
32:77:43:44:50:1d:e4:a1:24:ce:94:18:6e:ea:73:64:7c:37:
2a:2e:41:09:21:f1:52:4d:91:fb:b0:36:d0:02:02:5d:73:b2:
05:7a:78:86:a7:83:d5:db:6e:12:41:04:72:01:ce:77:8f:b9:
e4:95:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:30 2024 by rpki-client on console-ams.rpki-client.org