Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lrj-KZp7zdY1XrMNuSJOtdo8eAY.roa
File: lrj-KZp7zdY1XrMNuSJOtdo8eAY.roa (raw, json)
Hash identifier: Boi94ImXIsI7f5Nk+06cff03GjwOqHC7c1a6GyHvIu0=
Subject key identifier: 96:B8:FE:29:9A:7B:CD:D6:35:5E:B3:0D:B9:22:4E:B5:DA:3C:78:06
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01924B6E3D37026D9E548F14FC7F4AEAA620
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lrj-KZp7zdY1XrMNuSJOtdo8eAY.roa
Signing time: Wed 02 Oct 2024 04:12:48 +0000
ROA not before: Wed 02 Oct 2024 04:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
94.176.214.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 18:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4b:6e:3d:37:02:6d:9e:54:8f:14:fc:7f:4a:ea:a6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 2 04:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96b8fe299a7bcdd6355eb30db9224eb5da3c7806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:53:a1:f5:d8:cf:b8:90:de:66:fe:d6:dd:2a:
37:4f:d4:cf:1f:91:93:7f:e5:ec:1a:95:2b:8d:16:
c9:9a:86:86:23:9f:88:31:bc:e9:88:34:c1:cb:90:
1f:a6:a2:a5:a9:a0:be:8a:30:6a:5c:08:4f:d0:62:
94:e3:35:0e:70:db:a7:c8:20:f6:5c:41:8f:49:c3:
81:d1:36:72:99:86:02:5c:50:17:99:72:41:8b:71:
6f:05:06:9f:a5:c2:65:4f:0e:2c:36:21:c5:15:85:
15:fa:40:33:37:2b:4e:3f:86:ed:2f:c2:93:5c:e8:
94:69:ac:62:3f:26:e5:68:38:8d:ef:95:80:08:0b:
a7:26:64:88:40:70:91:52:8e:70:78:72:51:73:83:
1b:a1:a7:ec:a3:ed:47:5d:fa:c3:bf:2a:ce:67:c9:
d8:6f:5e:8c:64:31:85:4f:38:6f:16:21:ce:b2:eb:
34:52:80:b2:04:83:22:62:53:85:f8:fc:f7:c0:aa:
94:4f:81:36:b6:2c:47:aa:fb:10:53:aa:24:e8:ea:
c5:63:4c:3d:b8:ba:01:0f:80:03:a9:01:e8:44:39:
a8:2c:6b:84:ef:cb:77:45:ef:1b:1a:22:6e:23:71:
4c:0a:49:0e:1d:21:7a:0a:41:d4:d8:e8:fa:39:91:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B8:FE:29:9A:7B:CD:D6:35:5E:B3:0D:B9:22:4E:B5:DA:3C:78:06
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lrj-KZp7zdY1XrMNuSJOtdo8eAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
91.132.51.0/24
93.114.183.0/24
94.176.214.0/24
188.64.142.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e9:61:80:eb:dc:5a:25:09:1c:59:fe:c6:c1:9e:26:97:12:
79:28:60:60:5e:86:fc:e2:b3:92:32:99:1a:37:ef:f1:e5:56:
74:cc:62:af:25:d0:9f:50:7a:61:8e:3e:31:84:fc:c0:bf:67:
9d:b6:94:00:fd:63:4b:3a:a8:69:98:33:4c:a7:36:04:45:f5:
78:fc:70:f9:c2:86:67:5f:b3:67:69:04:93:39:31:eb:22:3c:
26:12:b3:d0:c0:0f:c1:c4:99:c4:2a:c6:e6:d3:e6:7f:84:c0:
c8:ab:62:e6:b3:b4:b1:86:c3:12:04:de:4d:10:fa:73:3c:f4:
d5:8f:82:14:50:42:ea:70:95:15:54:c0:ff:b2:89:51:b1:62:
e2:e0:c1:61:82:99:83:a4:66:2f:b5:41:fb:ca:73:f5:a3:29:
b4:ab:5b:b9:5c:96:44:b6:6b:8a:04:27:a2:7f:4d:70:82:ac:
52:37:1c:77:25:70:0a:5e:69:b2:f6:35:9b:db:43:dc:5f:b1:
ac:9e:94:20:70:f7:49:46:86:81:a3:e3:67:06:b3:ff:65:ac:
c1:29:08:d1:09:53:f1:17:ea:10:5c:10:61:c9:8d:4a:d4:57:
fb:a4:cc:90:0d:81:b4:11:15:06:23:ad:66:af:d0:0a:a7:ca:
71:cd:61:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 21:37:43 2024 by rpki-client on console-ams.rpki-client.org