Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/lhwwj0DWfUuuN3LnVOR_k9bNemw.roa
File: lhwwj0DWfUuuN3LnVOR_k9bNemw.roa (raw, json)
Hash identifier: aLWyvxOuB3Posf2uwoTYgwoJ/pzYVGq6zBTUsgeJXHU=
Subject key identifier: 96:1C:30:8F:40:D6:7D:4B:AE:37:72:E7:54:E4:7F:93:D6:CD:7A:6C
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 018AD469A1C7FDEE6B5555A3F4C6A01ED959
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/lhwwj0DWfUuuN3LnVOR_k9bNemw.roa
Signing time: Wed 27 Sep 2023 02:13:27 +0000
ROA not before: Wed 27 Sep 2023 02:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64286
IP address blocks: 45.84.102.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d4:69:a1:c7:fd:ee:6b:55:55:a3:f4:c6:a0:1e:d9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Sep 27 02:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=961c308f40d67d4bae3772e754e47f93d6cd7a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:e1:9c:55:a2:c8:ae:c4:26:71:ad:df:13:
36:d9:c0:6d:ec:29:fb:59:29:bf:b4:e5:1a:64:6d:
13:4e:94:80:1f:d5:ea:de:d9:34:30:8d:68:db:63:
a9:fd:fb:b8:71:91:e0:0e:8c:8b:71:96:ef:3d:4b:
67:86:06:9f:29:b4:eb:e4:d5:01:04:7b:ad:7b:b4:
70:c5:aa:24:e8:e1:46:a2:83:f7:8c:76:d1:17:d6:
20:ac:22:8e:c6:2c:f8:a4:1c:b2:6d:40:2e:ff:c5:
29:26:df:c7:1a:ce:ed:dc:0b:48:ef:06:ae:89:b9:
de:7d:50:81:42:fa:21:23:19:e5:94:47:d4:d5:b4:
94:18:ba:b5:6d:db:ea:4c:fa:42:9e:30:73:ef:b5:
16:88:d9:91:47:07:0e:34:fd:68:08:63:de:ea:3f:
d9:46:49:20:34:01:59:c6:17:21:ff:3a:82:81:c6:
68:10:ed:1b:6e:03:7d:ea:bb:2c:84:e0:2f:bf:57:
97:b3:55:b6:5e:6e:32:f0:8d:ad:92:28:81:2a:e2:
16:b2:c2:cc:3b:15:8a:4e:d3:f6:74:0b:26:e9:82:
77:aa:42:c1:b2:be:4c:81:0d:7c:e2:b3:1f:08:ef:
eb:57:bd:9a:61:46:69:7e:9e:ee:51:8e:99:78:a3:
3b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1C:30:8F:40:D6:7D:4B:AE:37:72:E7:54:E4:7F:93:D6:CD:7A:6C
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/lhwwj0DWfUuuN3LnVOR_k9bNemw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.102.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:25:85:ff:9d:14:5d:1c:6a:2d:81:ea:22:56:0c:59:53:cb:
a8:8e:67:45:73:ec:48:42:38:0b:b1:b0:5c:42:d5:ae:43:70:
64:96:c8:03:be:98:e6:c5:ae:b0:50:f8:3e:86:fa:aa:04:f9:
97:f6:3e:2b:c5:e2:44:21:ae:dd:02:40:bd:af:92:81:db:15:
2b:1b:43:34:ed:18:25:e4:a6:0c:c3:f2:91:b5:a4:62:33:97:
dc:b5:a6:f9:d4:2d:73:c1:90:31:e0:b1:44:58:19:ba:9f:71:
f5:5c:56:e8:bf:2f:c3:4f:5d:c3:51:09:8e:0e:42:3d:3a:f5:
f6:e8:78:3d:18:37:3a:51:1c:88:5a:98:00:14:32:16:36:87:
8c:80:97:86:08:4c:a3:24:ed:c4:89:fb:26:61:f3:1a:7c:96:
b7:76:dd:a4:80:ff:77:9a:86:92:af:65:4d:08:0f:7f:2a:38:
1f:72:ff:90:dc:76:b2:fe:07:f8:6d:55:82:1d:27:26:a4:b3:
72:77:f1:12:28:95:9c:4a:0f:34:6c:19:cc:f4:30:5b:d3:e8:
a7:54:43:14:53:3d:b0:36:82:4f:a4:22:69:a0:a2:88:8a:35:
6f:2d:7a:f6:e6:1b:bf:1d:38:94:c3:c8:44:04:13:ee:0c:9b:
44:6a:e5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:19 2024 by rpki-client on console-fra.rpki-client.org