Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/LYSc-RaKNQFUauIV99eK95p56VQ.roa
File: LYSc-RaKNQFUauIV99eK95p56VQ.roa (raw, json)
Hash identifier: XS0WstTQ/Nv0ha1XjaVc60pKfq7YcofmDMa1Po0pbzE=
Subject key identifier: 2D:84:9C:F9:16:8A:35:01:54:6A:E2:15:F7:D7:8A:F7:9A:79:E9:54
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01861128CF2F4B7FBC09B08159D1D47D190F
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/LYSc-RaKNQFUauIV99eK95p56VQ.roa
Signing time: Thu 02 Feb 2023 08:05:32 +0000
ROA not before: Thu 02 Feb 2023 08:05:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51088
IP address blocks: 45.85.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:28:cf:2f:4b:7f:bc:09:b0:81:59:d1:d4:7d:19:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Feb 2 08:05:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d849cf9168a3501546ae215f7d78af79a79e954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:7b:fb:7a:fd:3f:7e:02:1c:62:e4:b6:23:
50:f0:1a:e5:63:5f:49:88:c2:a1:ab:82:e5:42:7b:
df:9f:6e:9e:6e:35:ca:c0:4c:7f:3e:c2:40:75:f8:
a6:85:4e:b8:8f:30:05:22:89:9f:b7:e0:39:9d:62:
c5:c7:88:cd:b2:fb:4f:6a:33:26:06:9a:3c:36:f0:
7d:d6:e0:07:bd:a2:29:31:cc:c3:68:45:b3:3e:1d:
53:80:87:2b:2f:16:76:13:b1:fa:ba:78:ff:d9:f7:
5b:1b:9a:c4:91:f8:32:67:bf:92:6f:70:a7:54:ca:
f7:f4:dd:d4:79:d3:a0:ff:c1:01:06:27:9d:1f:2a:
84:56:66:20:5f:b2:8a:45:ef:2a:a7:8a:db:c9:dc:
5a:e7:33:33:a7:7a:46:f2:02:6d:6d:58:d2:b4:8e:
93:b1:9f:e1:45:a4:7e:7d:1f:76:01:78:54:81:e8:
e7:d1:2c:2a:70:60:db:98:79:da:e1:08:55:c3:ec:
14:b7:4c:5c:7d:45:08:38:8c:3e:fb:89:98:77:9b:
d1:97:19:7b:a1:8d:87:ee:3e:f2:34:27:b3:32:eb:
49:d8:2b:47:40:9b:e8:c9:0b:b8:fd:57:6e:28:6d:
4b:90:ab:a3:7b:ff:bc:ab:2b:ec:eb:bb:47:0c:6d:
04:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:84:9C:F9:16:8A:35:01:54:6A:E2:15:F7:D7:8A:F7:9A:79:E9:54
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/LYSc-RaKNQFUauIV99eK95p56VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.191.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d7:73:5b:c7:e2:74:47:10:0b:d1:90:21:04:1c:80:c0:f5:
fd:e1:3b:c9:d4:4f:5c:9f:ec:11:7a:4f:04:7c:9d:d4:00:e1:
75:6b:ed:35:74:dd:e2:62:a0:2d:d7:fe:f1:d4:e8:37:4a:47:
b9:00:b0:40:e9:41:30:bb:15:58:2f:71:b1:18:5a:80:55:ca:
ff:d1:60:63:2c:2f:94:e9:1b:40:21:29:dd:9c:10:b9:04:2d:
53:2b:9e:3e:c8:3f:d3:4b:f5:62:4c:35:ce:85:af:98:db:8a:
8d:75:bf:e7:15:85:df:cd:f9:0c:ea:f4:4d:44:91:c5:36:a6:
db:10:9d:57:a7:02:de:9f:73:d7:c1:47:01:5f:97:e4:03:58:
ac:99:72:c6:40:25:74:4f:bd:84:87:bf:fe:69:5d:41:b8:05:
93:85:4d:6d:7e:7c:af:a5:70:60:20:cb:aa:b5:94:d5:da:84:
c8:a0:f8:31:21:ca:5e:22:56:0f:f6:9c:76:79:2a:b4:b0:f6:
ca:72:6f:1c:e2:92:67:fa:16:c3:12:94:b8:69:18:8c:b0:64:
18:f1:2b:4c:4c:13:65:f5:07:6f:a9:15:9a:f7:d7:c0:e8:b4:
58:02:ad:bd:4e:8d:9b:84:8a:74:ec:80:b8:54:9e:6e:6a:7d:
b0:ac:f7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:44 2024 by rpki-client on console-fra.rpki-client.org