Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/LRSN3LsOf3JYUKE2N5BvolYDabQ.roa
File: LRSN3LsOf3JYUKE2N5BvolYDabQ.roa (raw, json)
Hash identifier: R5fRRVtqnqzdn7YAUj0ZTsmCX7kHejzwjOb7VgoWbD8=
Subject key identifier: 2D:14:8D:DC:BB:0E:7F:72:58:50:A1:36:37:90:6F:A2:56:03:69:B4
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A72D14A8AD9E7AA02A329AB7F244D
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/LRSN3LsOf3JYUKE2N5BvolYDabQ.roa
Signing time: Tue 02 Jan 2024 12:33:48 +0000
ROA not before: Tue 02 Jan 2024 12:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142019
IP address blocks: 45.146.241.0/24 maxlen: 24
46.249.104.0/24 maxlen: 24
46.249.105.0/24 maxlen: 24
46.249.106.0/24 maxlen: 24
46.249.111.0/24 maxlen: 24
46.249.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 02:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:72:d1:4a:8a:d9:e7:aa:02:a3:29:ab:7f:24:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d148ddcbb0e7f725850a13637906fa2560369b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:b7:c6:12:fe:0f:bf:fe:f6:f2:90:58:e3:
67:b0:6d:81:82:f4:2d:80:7e:dc:84:9b:0a:d3:a8:
e1:4a:5f:ea:e0:c5:0a:76:67:6e:03:d6:12:8b:86:
88:3b:e0:17:ba:32:29:55:cf:7d:66:7d:47:56:ea:
3b:36:eb:ce:24:e7:7a:83:9a:7b:61:25:d2:1e:37:
d3:fe:b1:be:4e:e3:d2:04:e6:50:e8:00:65:f6:02:
3d:ae:75:18:5d:b7:e1:75:6f:30:a1:d2:3b:0f:28:
1b:29:a3:ac:45:59:37:a7:75:d1:16:cd:59:92:e3:
c2:57:25:b0:9d:14:1e:49:8c:b7:f1:04:db:ba:e0:
2b:63:bd:43:98:86:97:ba:92:84:fe:9b:40:b7:37:
92:5d:09:f4:a6:ec:5a:61:35:7e:7b:8c:12:bf:5b:
2a:28:a6:7f:f1:7e:ac:c3:cc:6b:da:4d:f7:4b:8a:
45:bf:b6:b2:dc:4f:38:d9:ca:45:11:f8:3e:59:35:
96:e4:ca:4d:be:84:ab:6f:7f:32:5a:f7:94:33:0e:
12:1c:9c:16:10:96:cd:99:80:e7:0e:42:8d:12:e6:
fd:a6:06:7e:ef:f8:80:66:1e:29:79:b0:72:22:df:
8f:20:64:46:ac:2d:f8:ab:b8:ab:50:a6:98:8e:1d:
8c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:14:8D:DC:BB:0E:7F:72:58:50:A1:36:37:90:6F:A2:56:03:69:B4
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/LRSN3LsOf3JYUKE2N5BvolYDabQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.241.0/24
46.249.104.0/22
46.249.111.0/24
Signature Algorithm: sha256WithRSAEncryption
66:68:5f:c7:c7:b6:2c:32:fd:f3:95:33:31:c7:d0:1c:26:18:
0f:44:08:2c:31:93:9d:92:4f:34:f7:37:52:63:8f:69:d8:75:
4e:f1:5f:3d:c9:e9:f4:e5:d7:b2:10:b5:87:d0:34:af:52:e6:
f7:1a:f4:42:b4:9c:e4:5d:fe:cb:9a:39:e4:87:e4:e9:41:83:
eb:ac:16:76:11:01:6d:7b:9d:e1:1a:64:cd:f5:2b:ab:80:9a:
2c:86:48:92:b6:52:08:16:fe:9c:af:cc:5b:33:b9:52:00:b0:
7b:9d:22:b2:69:41:ca:53:06:d0:da:65:1d:ed:e8:21:8d:78:
ca:ce:5a:54:ed:ba:8a:5a:ce:d4:f4:77:50:08:d4:ba:5a:a1:
a2:7a:67:d9:dc:83:82:cc:8a:b2:2c:da:82:e4:c1:1b:22:b6:
fd:05:e7:16:54:3d:2a:b7:18:67:e5:3f:2a:a8:e7:5e:f4:1e:
73:9a:f9:f4:a7:e6:d1:f0:84:e3:1b:89:79:19:31:45:3e:e4:
fc:8e:08:96:25:e3:3b:14:80:39:2a:33:91:e6:45:d9:7d:fa:
fd:db:3e:40:f2:ec:47:69:42:e7:18:9d:67:b8:63:39:ed:a8:
44:f1:e0:be:cc:0b:f0:d9:1d:f9:38:3b:b7:61:3e:e7:fe:eb:
17:04:7f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 02:53:46 2024 by rpki-client on console-ams.rpki-client.org