Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/LF8bYXCLZbCdx82Y3YG9_7FxtPs.roa
File: LF8bYXCLZbCdx82Y3YG9_7FxtPs.roa (raw, json)
Hash identifier: 9bEuukn9jasZGs4svbASpOlfDdDuFSh35xMF5D23i0o=
Subject key identifier: 2C:5F:1B:61:70:8B:65:B0:9D:C7:CD:98:DD:81:BD:FF:B1:71:B4:FB
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 01857102D57CDE9DCA01CE45E9B68F138A7F
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/LF8bYXCLZbCdx82Y3YG9_7FxtPs.roa
Signing time: Mon 02 Jan 2023 05:44:49 +0000
ROA not before: Mon 02 Jan 2023 05:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210129
IP address blocks: 45.137.232.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:d5:7c:de:9d:ca:01:ce:45:e9:b6:8f:13:8a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: Jan 2 05:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c5f1b61708b65b09dc7cd98dd81bdffb171b4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1d:17:2b:3c:aa:d4:3f:b4:cc:ea:3b:ea:2e:
c0:65:32:30:b1:d9:a0:63:38:45:fb:63:51:d0:d5:
55:df:36:a4:4f:6e:9a:d6:dc:98:f4:36:4f:ba:10:
38:5d:7a:f6:74:c5:11:0e:83:2b:35:cb:71:d2:f9:
76:13:65:66:41:bf:24:f2:dd:5e:bb:5f:c5:70:7d:
24:d5:70:d4:13:a4:08:fd:b4:a1:a4:01:27:54:dd:
3e:ce:b1:ba:57:70:70:ed:5d:91:26:fa:8f:17:c9:
60:49:cb:8e:e1:34:59:67:81:cd:cf:e5:71:0e:f1:
76:c5:2c:50:fe:e8:16:e6:32:9c:ce:b1:dd:94:a7:
32:97:c3:b0:be:32:97:fa:07:d1:44:be:2b:05:d2:
aa:6b:c6:41:35:8f:5e:4d:07:c0:12:5a:2a:72:ef:
e0:a1:7f:b2:c0:fb:41:55:a9:ee:02:37:f5:9e:3e:
0c:44:9a:f4:22:e5:e1:41:af:d3:90:1e:d0:d0:fa:
46:f2:c0:f9:e7:d4:c2:15:72:19:62:cc:a8:56:2e:
ac:2c:b1:d3:81:06:e7:ba:72:1a:9a:d4:e3:aa:82:
54:fb:df:c6:13:f3:8a:7f:1d:2d:73:77:fc:6d:23:
ae:bd:62:97:45:32:d1:60:56:85:1a:d7:4b:84:20:
05:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5F:1B:61:70:8B:65:B0:9D:C7:CD:98:DD:81:BD:FF:B1:71:B4:FB
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/LF8bYXCLZbCdx82Y3YG9_7FxtPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.232.0/22
Signature Algorithm: sha256WithRSAEncryption
56:e2:fe:ee:d8:cd:f2:db:ca:f2:0d:79:c5:ae:07:16:97:f3:
1b:af:2e:94:ca:45:c6:9d:bb:0a:18:1b:9b:ab:41:53:18:4d:
3b:08:06:c3:88:9f:89:12:0e:15:14:ff:7c:48:4f:2e:57:88:
15:66:27:21:a9:ff:a9:4b:3a:2f:4a:95:87:4d:2a:b6:05:08:
be:85:a5:35:c2:7b:02:b4:02:0b:35:b5:85:3f:5b:5a:1e:b2:
ce:fa:b6:84:35:b3:67:dc:0c:29:f8:e9:00:45:b3:68:4b:97:
cb:94:92:ca:5b:95:6c:c5:fe:1a:14:be:2b:06:8d:0a:8c:fa:
48:2a:17:43:6a:57:c4:79:46:13:16:c3:0f:71:97:cd:91:47:
86:d6:05:47:23:a4:5d:7c:91:e9:0b:1c:14:da:c9:28:e0:ff:
49:b6:ca:0a:15:d9:10:ad:f6:1f:13:1c:93:93:ad:fd:de:e1:
ce:0b:8e:66:dc:33:2b:c8:ac:2d:65:05:a5:f2:c6:d0:0f:12:
ff:9c:37:39:27:fb:10:54:6a:03:03:6f:5c:12:a6:9e:93:50:
23:37:c5:43:e8:0b:72:4b:a4:cc:89:57:1b:4d:ec:d9:35:e6:
c6:5d:3d:4b:25:9a:75:dc:dc:83:f1:fc:67:41:cd:3c:03:ec:
6f:a4:d8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:10 2024 by rpki-client on console-ams.rpki-client.org