Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/LPZS46aXOwx_3-cMz1diGRb1Les.roa
File: LPZS46aXOwx_3-cMz1diGRb1Les.roa (raw, json)
Hash identifier: ZlWNg+9+FmK6FbaGb3WhV3cNdXkxygQcStGe/Oe0cbA=
Subject key identifier: 2C:F6:52:E3:A6:97:3B:0C:7F:DF:E7:0C:CF:57:62:19:16:F5:2D:EB
Certificate issuer: /CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Certificate serial: 0189063EFAA570CF4574E39D98B9E79428A4
Authority key identifier: 4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/LPZS46aXOwx_3-cMz1diGRb1Les.roa
Signing time: Thu 29 Jun 2023 08:22:17 +0000
ROA not before: Thu 29 Jun 2023 08:22:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201850
IP address blocks: 45.136.142.0/23 maxlen: 23
45.136.142.0/24 maxlen: 24
45.136.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:06:3e:fa:a5:70:cf:45:74:e3:9d:98:b9:e7:94:28:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Validity
Not Before: Jun 29 08:22:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cf652e3a6973b0c7fdfe70ccf57621916f52deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d5:79:ad:81:91:e8:f1:5a:7b:c9:43:65:4d:
f5:b1:46:3e:7b:9a:bd:de:24:60:68:2e:6b:96:e7:
1f:6d:be:dd:df:a0:8e:ea:e7:ac:dd:be:09:2c:c8:
a9:de:2a:8e:fa:a6:9b:a0:db:95:0a:3a:d4:5a:ba:
66:9c:46:5b:7d:47:94:f2:93:04:81:95:8a:1e:98:
2e:db:c6:a9:d6:80:5b:04:54:e7:49:f6:50:a7:bd:
22:d9:52:99:9d:ab:b1:01:57:11:a2:c9:19:f4:f8:
e5:f9:4a:5a:c3:25:e7:3c:0e:2e:f4:b7:ff:2a:10:
62:6e:a0:fb:54:1a:77:31:b2:3d:9c:bc:57:33:e1:
5c:05:f1:4b:27:e3:20:7c:e2:bf:2a:bd:4f:9f:02:
69:a7:44:05:44:2b:56:e2:4d:54:9c:4b:a1:b7:61:
5d:5c:4d:ca:72:87:e0:a5:fa:0b:aa:ff:a7:71:8f:
78:cf:ae:68:97:cc:71:0b:f6:b0:45:43:ea:f9:85:
b7:ed:b3:4d:63:2b:ec:39:2b:da:4b:a3:d4:49:48:
95:30:78:a3:87:9c:85:8c:ad:f6:2d:90:37:b9:58:
7f:6b:19:a1:e4:72:3a:08:af:d2:1f:fc:e8:b6:2c:
7c:28:6f:5b:07:18:40:94:ec:14:ce:8b:2f:e0:3e:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F6:52:E3:A6:97:3B:0C:7F:DF:E7:0C:CF:57:62:19:16:F5:2D:EB
X509v3 Authority Key Identifier:
keyid:4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/LPZS46aXOwx_3-cMz1diGRb1Les.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.142.0/23
Signature Algorithm: sha256WithRSAEncryption
e3:e0:c2:9e:02:18:64:43:00:3a:1c:a2:f7:dc:ad:e8:1e:d3:
d2:08:5e:f2:8b:5e:a6:d9:73:ca:1a:4e:4c:da:8a:55:97:eb:
1f:3d:df:e1:6c:fb:b9:1f:c2:3b:06:9a:23:b6:35:0a:cd:e3:
8c:14:a6:f6:aa:6a:c9:b0:b0:1e:65:7b:50:eb:ff:ae:fb:75:
f4:a3:78:01:ae:a2:db:16:59:b5:69:ac:e7:bd:9a:c1:76:e4:
39:bd:e7:83:4b:59:f5:f4:5b:84:fa:c6:57:37:d5:2b:31:17:
6d:5d:3d:a9:77:38:d1:be:79:91:a5:64:fe:f6:6b:c6:dd:9a:
5d:39:f0:f4:5e:31:8b:f0:bf:b8:0d:80:b2:a7:cf:8e:c3:ac:
a2:35:21:fc:89:a1:9e:0f:bc:28:b5:60:75:51:c1:87:b3:0f:
32:93:4c:12:2e:47:38:a5:ec:4e:91:0d:ed:1a:27:fd:e5:8e:
06:df:be:51:a9:31:f9:c5:b8:32:ae:18:b2:7f:e5:c9:ba:47:
d2:d9:6d:b3:4d:95:bd:9c:b0:e8:7f:17:c2:f5:48:4a:83:27:
ae:b4:c7:44:c7:ac:23:c0:8f:cd:3c:05:e5:f6:8e:f4:c3:76:
a1:8a:0a:d4:25:28:f2:d3:a6:ff:41:c1:37:53:20:f3:fe:12:
45:2b:f0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:20 2024 by rpki-client on console-fra.rpki-client.org