Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/llV13ks-VpKUncEz8ouOY170ZBg.roa
File: llV13ks-VpKUncEz8ouOY170ZBg.roa (raw, json)
Hash identifier: xjsjb+Hc4IM61HTdoCftyBMjR8qYHc4LYcmXCKIeXOg=
Subject key identifier: 96:55:75:DE:4B:3E:56:92:94:9D:C1:33:F2:8B:8E:63:5E:F4:64:18
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 01870AE1D3F122B427DCA3F1130929630356
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/llV13ks-VpKUncEz8ouOY170ZBg.roa
Signing time: Wed 22 Mar 2023 19:53:04 +0000
ROA not before: Wed 22 Mar 2023 19:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36231
IP address blocks: 45.88.228.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0a:e1:d3:f1:22:b4:27:dc:a3:f1:13:09:29:63:03:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Mar 22 19:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=965575de4b3e5692949dc133f28b8e635ef46418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:f8:a3:85:e6:84:f9:39:bb:ae:66:2f:d9:
89:d7:f7:e9:6d:0a:10:e6:42:15:f7:41:80:1e:a4:
ce:0c:93:1f:d6:7f:f4:10:63:f0:e2:f3:32:d4:ed:
82:e5:3a:04:c7:dc:c8:63:d0:01:e5:80:58:fa:54:
62:12:69:44:77:76:4c:53:42:62:21:10:6c:44:88:
96:e6:57:57:c5:d0:42:2b:9c:a8:67:e5:b3:a1:d9:
48:6e:40:a1:28:ab:e3:95:81:e9:9f:92:71:0c:bb:
93:d2:f5:44:f6:8f:86:57:e6:c6:bb:28:d6:18:ee:
b9:e3:1b:e6:a1:be:d8:72:2f:18:55:55:c9:82:a3:
84:bb:fa:3f:92:4a:fb:17:05:ba:32:d5:19:24:7a:
5a:da:87:ed:1e:d4:53:b5:a7:9c:b4:3c:75:80:39:
f7:31:23:c0:ef:43:74:4b:bb:51:b6:7c:92:50:16:
c2:2a:b2:93:e9:43:70:f8:23:58:83:a5:c1:6d:6f:
3f:ad:df:1f:0f:1b:1c:db:2f:45:dd:06:05:37:67:
35:55:a2:8a:ae:9f:ed:cc:1c:ad:28:72:df:24:a1:
f9:be:dd:ae:b1:d8:8b:41:f1:6f:63:2f:86:40:51:
23:05:a4:8c:26:e0:29:bd:1e:36:9c:6f:26:26:d8:
a8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:55:75:DE:4B:3E:56:92:94:9D:C1:33:F2:8B:8E:63:5E:F4:64:18
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/llV13ks-VpKUncEz8ouOY170ZBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.228.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:0c:2d:c5:14:1b:b9:fc:d1:0f:62:12:e2:d7:1a:2b:4a:f8:
d4:5b:c7:d8:ff:a9:30:eb:63:c7:70:58:94:ad:53:9d:8b:c5:
70:63:a1:b4:8a:00:21:e4:27:4d:5e:ce:3c:e4:0f:9d:b3:2d:
b6:ab:79:b6:a9:46:ed:b1:8d:fa:6e:a0:b8:a5:38:90:07:73:
18:1d:8e:4d:15:aa:d4:02:b9:bf:fe:47:ce:2a:42:47:2c:f4:
60:3f:82:a6:2c:47:f7:7f:23:da:34:3e:de:60:2d:ae:2a:82:
89:e3:c0:10:ed:db:5e:f0:b5:7a:a5:0c:e8:45:1f:ef:1c:c3:
79:cc:38:4f:b5:ed:f0:f2:52:7d:27:e6:89:fb:3f:cc:d7:4a:
db:3f:dc:58:d1:f5:10:90:5f:67:41:e9:5e:66:8f:08:38:ec:
a6:33:c5:37:d4:28:1e:c7:03:99:e7:90:26:ff:e3:22:c7:8d:
b1:0a:a0:42:f6:8e:7c:65:db:33:e5:91:df:10:1c:23:c8:d9:
7e:13:19:23:65:24:4d:1d:a7:2b:87:42:cf:0b:dd:73:eb:0a:
0e:4a:36:42:93:7a:2d:9a:53:50:27:28:4b:d2:6b:c7:4f:f1:
3b:2f:4a:2d:24:97:0f:49:bd:c7:fe:69:41:d8:3a:4d:0b:57:
f2:5c:05:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:53 2024 by rpki-client on console-ams.rpki-client.org