Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/LgiimZnT5g279qm6z0olVo7YR8c.roa
File: LgiimZnT5g279qm6z0olVo7YR8c.roa (raw, json)
Hash identifier: X7wakV+TFtwCzzqibiJa9hRYbXlyUQJbGyzmkRIlVZE=
Subject key identifier: 2E:08:A2:99:99:D3:E6:0D:BB:F6:A9:BA:CF:4A:25:56:8E:D8:47:C7
Certificate issuer: /CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Certificate serial: 01856BDCADF252B28D7098DED013D45BF75B
Authority key identifier: 73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/LgiimZnT5g279qm6z0olVo7YR8c.roa
Signing time: Sun 01 Jan 2023 05:45:02 +0000
ROA not before: Sun 01 Jan 2023 05:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208200
IP address blocks: 45.154.72.0/23 maxlen: 24
2a0f:b300:1000::/36 maxlen: 48
2a0f:b300::/36 maxlen: 48
2a0f:b300:b300::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:ad:f2:52:b2:8d:70:98:de:d0:13:d4:5b:f7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Validity
Not Before: Jan 1 05:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e08a29999d3e60dbbf6a9bacf4a25568ed847c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:9e:94:7b:13:71:7a:cf:aa:ca:59:8c:80:
4b:a5:2c:b4:1b:89:4b:93:36:04:ba:d1:01:90:3b:
03:cc:a7:46:7d:ea:9c:70:63:ea:35:1a:97:9a:2a:
f2:7f:3c:28:e8:c0:05:4b:f2:f1:f1:34:95:6b:d8:
54:d7:eb:7f:4e:13:e0:43:c7:d7:ea:7f:70:a3:ba:
58:86:2c:9a:41:3f:63:ae:f0:cf:9b:33:ad:b8:9f:
d2:96:75:67:42:cb:cf:cf:63:ef:e7:48:d8:8f:a3:
1a:3a:a8:e3:e0:a9:cb:1f:65:b6:79:7b:93:fe:ee:
ee:a7:c1:40:52:c8:3f:ce:8f:c1:ae:e5:37:7e:6c:
e6:a8:f0:3b:0e:18:e8:77:74:2c:45:20:b7:13:26:
15:6f:fb:bf:e4:c9:23:37:95:be:e3:5f:9f:a1:f4:
d8:a2:37:ec:2a:e6:b0:c9:56:ed:fd:e4:af:86:96:
d6:59:ba:f1:26:5d:86:a3:68:a8:b3:64:0a:f9:49:
98:f3:b3:70:ea:ed:8e:fa:5e:2a:54:34:41:99:bc:
73:7a:66:af:5a:8a:04:44:ef:13:7d:2e:13:9c:fd:
17:3f:13:7c:2d:3b:ad:60:24:47:f9:d7:72:44:cb:
2d:f4:f2:18:19:a0:21:0f:67:c5:a1:a7:43:e4:18:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:08:A2:99:99:D3:E6:0D:BB:F6:A9:BA:CF:4A:25:56:8E:D8:47:C7
X509v3 Authority Key Identifier:
keyid:73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/LgiimZnT5g279qm6z0olVo7YR8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.72.0/23
IPv6:
2a0f:b300::/35
2a0f:b300:b300::/48
Signature Algorithm: sha256WithRSAEncryption
02:ff:09:27:b5:c3:5b:db:05:df:5f:93:bf:60:80:22:d4:f1:
4e:3c:bf:84:bc:43:0d:2f:da:20:dc:99:9d:3b:1f:f3:da:2a:
5d:ce:7e:fe:71:3a:e0:4b:da:eb:7c:d1:fa:e6:f3:23:38:b4:
bf:fa:fe:81:e8:aa:3d:9c:2e:61:01:44:35:53:a8:12:99:6b:
b3:ef:98:d3:10:20:65:cc:40:a7:a5:1f:c9:77:7f:18:46:5a:
8e:81:4a:31:37:aa:50:74:75:61:1d:e1:76:b4:dc:84:93:3a:
71:d6:80:5d:b6:04:8d:c6:65:27:37:f7:43:a0:fc:d1:7e:22:
e5:8d:f7:f0:8c:bf:52:98:94:79:0f:1a:12:0d:bc:0d:d4:17:
fd:9b:be:83:04:94:1f:6a:c4:8c:fe:43:a0:72:9f:d7:21:b0:
08:65:95:f6:8c:b2:4e:e2:92:69:91:88:07:87:0b:d3:a3:96:
94:bd:82:52:4f:ff:cd:7a:ab:6d:3d:d6:e8:80:dd:a3:9f:38:
92:a3:c5:c8:d8:71:8a:1b:cc:f8:ab:ad:c7:ad:16:dc:3e:3a:
db:04:08:8f:4f:ad:d1:b8:c7:1c:1e:d4:fb:75:de:60:a9:ae:
86:8e:51:f9:20:d9:50:6e:5e:37:b2:75:03:fc:01:63:3a:76:
1b:b6:fc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:34 2024 by rpki-client on console-fra.rpki-client.org