Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/LJ-v4ab2dK49JJbmFYGmDU3Z-6o.roa
File: LJ-v4ab2dK49JJbmFYGmDU3Z-6o.roa (raw, json)
Hash identifier: AnbTD0AAATyAm8xkekqd1FdRZ4btHs0YWoYc+muKrB4=
Subject key identifier: 2C:9F:AF:E1:A6:F6:74:AE:3D:24:96:E6:15:81:A6:0D:4D:D9:FB:AA
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01880EE467432B9F44718DCB26F016EFDC8B
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/LJ-v4ab2dK49JJbmFYGmDU3Z-6o.roa
Signing time: Fri 12 May 2023 07:37:09 +0000
ROA not before: Fri 12 May 2023 07:37:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20853
IP address blocks: 185.177.237.0/24 maxlen: 24
45.93.212.0/24 maxlen: 24
45.93.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Jun 2023 13:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:e4:67:43:2b:9f:44:71:8d:cb:26:f0:16:ef:dc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: May 12 07:37:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c9fafe1a6f674ae3d2496e61581a60d4dd9fbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:84:9a:30:fd:63:da:c4:63:f0:a5:bb:f7:5d:
fe:26:df:60:fc:09:c9:1b:08:93:5f:ff:09:01:6f:
43:2e:27:6b:f6:1c:ab:15:57:77:a6:df:fd:e1:ea:
71:4b:49:d0:43:7f:a5:52:18:15:4a:1d:5e:a5:b3:
cc:2c:db:a6:44:6d:9b:18:3f:c2:ad:cc:7f:ad:23:
cb:93:69:1b:15:51:5e:71:3b:db:88:53:e2:a0:76:
32:40:11:7e:69:04:33:0d:55:88:32:b2:d5:de:40:
16:60:61:af:b0:c4:71:d3:70:1a:2d:9c:b0:cb:43:
40:f2:bf:4c:f4:87:a0:b0:8a:ea:97:99:5a:96:81:
f1:55:b6:23:66:7e:12:1e:1e:5d:d9:89:34:ac:1b:
23:f2:9f:64:61:f4:18:28:8b:80:1d:f9:dd:3e:f0:
95:d7:1f:e5:e2:b2:d4:53:1c:34:ce:df:0d:a0:f7:
d5:dc:e9:93:75:16:3b:cf:8a:fb:0a:63:67:96:c4:
86:ab:44:a6:e5:0d:55:45:10:79:3c:0c:61:88:10:
a5:70:de:90:e9:39:7e:fa:e4:5d:34:5a:96:84:ec:
96:8b:2f:06:f7:7a:f3:66:b2:4f:f2:38:b9:2b:f9:
7b:aa:08:79:61:b1:54:00:3f:6b:3f:da:f3:3b:05:
06:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9F:AF:E1:A6:F6:74:AE:3D:24:96:E6:15:81:A6:0D:4D:D9:FB:AA
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/LJ-v4ab2dK49JJbmFYGmDU3Z-6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.212.0/24
45.93.215.0/24
185.177.237.0/24
Signature Algorithm: sha256WithRSAEncryption
35:33:ea:bf:62:0d:54:12:c8:70:e6:e7:c1:5d:7c:d7:e0:b3:
ec:3d:89:a2:68:41:ae:33:d4:6f:e4:af:64:73:11:b4:af:5d:
3b:02:5b:7a:55:c4:91:83:f8:84:e3:c6:ca:41:a1:5b:e5:34:
4c:3f:ff:e8:9e:a7:12:04:5b:db:da:c1:91:a2:db:41:e2:ec:
00:30:27:eb:5b:7d:11:b0:42:45:d4:11:90:0e:d3:e3:2f:a4:
df:29:30:80:50:dc:3d:2d:0c:93:79:14:41:4e:2f:4e:bc:dc:
23:1f:b0:c6:8a:37:85:71:44:d4:6e:fb:13:67:1a:7a:1b:22:
38:1e:1f:56:f3:a1:68:b8:b1:25:db:99:87:40:79:c6:f8:48:
21:ca:ac:0b:69:c0:6d:50:e9:d8:85:f5:c3:6c:e4:dc:f5:4f:
d5:bb:76:01:94:cb:4e:d4:0c:e0:f6:fe:7e:b4:51:4e:74:30:
47:89:9b:c4:e5:dc:79:7d:64:6c:77:e7:2e:1c:83:44:0f:dc:
7e:6f:33:cf:99:2f:67:6f:5f:2a:c0:7c:98:f2:0b:5e:2b:2f:
1e:fb:34:5c:6e:1d:c5:43:6d:56:ee:f8:aa:81:cf:18:dc:c6:
e1:5d:f9:4b:12:fa:a8:87:c7:25:78:fe:46:dd:f3:89:a6:c0:
21:ef:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org