Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/Lc0LkaR2PqPl7q-KwvXbcr3I6z4.roa
File: Lc0LkaR2PqPl7q-KwvXbcr3I6z4.roa (raw, json)
Hash identifier: AYzOfEDO8lMnH9ZE1Hjnob+7EsaXELQntZoDUvfYiSE=
Subject key identifier: 2D:CD:0B:91:A4:76:3E:A3:E5:EE:AF:8A:C2:F5:DB:72:BD:C8:EB:3E
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 018BB440F4589FAECDDDBF849ED399AA9993
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/Lc0LkaR2PqPl7q-KwvXbcr3I6z4.roa
Signing time: Thu 09 Nov 2023 13:23:57 +0000
ROA not before: Thu 09 Nov 2023 13:23:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 46.17.73.0/24 maxlen: 24
46.17.72.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 23 Nov 2023 08:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:40:f4:58:9f:ae:cd:dd:bf:84:9e:d3:99:aa:99:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Nov 9 13:23:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dcd0b91a4763ea3e5eeaf8ac2f5db72bdc8eb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:c0:0c:41:af:03:90:f4:fe:5b:f2:ee:79:
be:e5:bb:93:da:52:7c:55:f2:01:34:e9:c5:51:ca:
6d:96:05:2f:60:7e:a4:23:17:f3:1b:73:b2:fd:a6:
ef:f2:1c:27:c0:5e:78:3a:f3:ab:7f:7a:11:55:bb:
dd:03:0f:5f:00:d6:02:85:62:e3:41:b1:6f:7e:ec:
4b:48:a7:f4:2d:eb:bb:d8:05:6c:99:cb:33:71:b3:
2f:af:65:db:db:4b:e1:99:29:2f:85:c0:c8:8a:c8:
10:b9:1b:96:be:eb:38:02:00:ac:2d:4c:f7:8b:ca:
f5:fd:5f:42:7d:b8:47:96:35:3a:fa:a4:95:e9:b7:
73:a0:de:4e:31:67:52:2c:3c:e6:d9:76:f2:5c:29:
de:de:3e:4f:99:47:c5:24:e1:99:a2:da:7c:96:97:
2d:4e:8b:42:75:96:6c:e3:6a:c7:ae:f3:3d:ac:b4:
9a:23:54:a9:e1:62:ea:04:a5:fc:6a:25:35:03:12:
40:ac:4c:5d:d3:b0:33:09:d0:4f:b1:ef:1d:db:fc:
06:d4:c9:9c:a9:04:37:7a:2d:eb:a1:75:3c:60:d4:
0f:3b:3d:a8:64:e4:cb:05:91:05:60:29:2b:03:2b:
42:9d:78:7d:5e:9e:cd:43:c6:34:20:44:ee:37:09:
19:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CD:0B:91:A4:76:3E:A3:E5:EE:AF:8A:C2:F5:DB:72:BD:C8:EB:3E
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/Lc0LkaR2PqPl7q-KwvXbcr3I6z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.72.0/21
Signature Algorithm: sha256WithRSAEncryption
43:2e:2e:8a:fd:72:27:87:a3:23:47:3c:34:d0:ba:ca:f4:ff:
91:63:9f:6f:f6:8c:26:af:20:f7:7f:66:78:9b:8c:ee:a1:c8:
03:fc:39:69:9f:c2:9a:36:f6:5e:8d:7e:84:22:61:d6:2b:21:
3f:83:17:fc:77:e5:23:6e:8b:76:eb:71:96:42:69:83:66:de:
db:36:4b:31:67:5c:a9:e5:a1:29:44:46:5a:0a:d3:c0:c0:96:
8b:f9:d2:46:24:44:2e:7c:1d:3b:eb:f1:a5:13:bc:e6:7d:8f:
d4:39:f6:bc:80:ba:35:06:fa:2b:5c:87:ed:59:f4:a1:a9:58:
7b:92:65:e6:16:3c:1b:57:4c:61:14:26:4d:3a:a5:99:7c:5d:
bb:7e:13:97:18:5c:f6:0c:9f:7f:e7:30:87:d4:ba:99:6b:a0:
2f:88:44:a6:bc:a2:c2:1b:d9:66:3e:ee:13:30:ef:f8:76:d9:
5c:37:35:33:95:71:ac:6a:0a:ea:76:08:18:06:30:ff:0e:c4:
03:8b:7a:07:b6:bf:af:7a:5e:a2:59:4b:82:05:41:fc:d8:f1:
4f:31:ab:a6:71:a6:59:e1:7f:7a:e2:7b:71:9e:9f:e3:93:9f:
66:22:f5:8f:b2:32:35:d9:7d:a1:c3:62:fb:85:d9:1c:88:74:
f3:6d:f9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:53 2024 by rpki-client on console-fra.rpki-client.org