Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1LvT-Dewq12bDL8EiSMRJ-NW0xY.roa
File: 1LvT-Dewq12bDL8EiSMRJ-NW0xY.roa (raw, json)
Hash identifier: wa5As8js4SUybCCO8wuOzr4UyMV6TKbVveU0wNrdw60=
Subject key identifier: D4:BB:D3:F8:37:B0:AB:5D:9B:0C:BF:04:89:23:11:27:E3:56:D3:16
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01906EB8BBDDA4E0FE7C81D5A02B6B80CCFC
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1LvT-Dewq12bDL8EiSMRJ-NW0xY.roa
Signing time: Mon 01 Jul 2024 14:35:18 +0000
ROA not before: Mon 01 Jul 2024 14:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 45.141.168.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 15:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:b8:bb:dd:a4:e0:fe:7c:81:d5:a0:2b:6b:80:cc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jul 1 14:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4bbd3f837b0ab5d9b0cbf0489231127e356d316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c8:8d:f5:28:50:8b:30:3d:a6:df:4b:ea:3d:
97:1c:72:15:de:9b:28:ae:c4:5d:10:88:9e:fe:c0:
bf:f4:2d:9a:7a:d7:17:07:79:7a:98:b7:9e:8e:b0:
66:9a:43:02:90:37:ec:48:c3:10:a7:41:0e:0a:c8:
d5:4f:66:90:cf:9b:81:69:4a:96:a8:41:4c:33:c8:
9e:38:1d:94:bb:6a:bb:07:5f:d7:5b:3c:40:01:99:
be:c4:3b:cf:b3:a4:92:50:11:c7:36:04:75:1e:7a:
6c:13:f9:59:9e:bd:9b:fe:2b:51:1f:71:c1:5b:dd:
0a:9e:7f:16:4e:08:e0:f8:19:c4:10:a2:44:2b:1c:
25:80:e0:51:f6:b2:eb:80:aa:4c:b8:95:e8:52:7e:
4b:04:65:1f:a5:ca:e4:ff:f5:95:32:7c:8a:ef:6a:
70:be:23:9d:09:4d:85:4d:75:4f:1d:8a:56:25:6f:
05:ae:1e:63:2c:93:fb:e1:b5:84:10:97:c3:d1:ff:
cf:f9:5f:eb:0c:f6:30:c8:98:b3:90:1c:05:67:5a:
7e:82:26:aa:d8:1e:70:48:0c:40:58:11:01:60:88:
48:b4:d6:80:1b:67:ef:f2:35:29:65:a7:e3:fe:3d:
62:54:2d:53:29:60:e5:e7:ed:11:08:9a:36:7a:a6:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BB:D3:F8:37:B0:AB:5D:9B:0C:BF:04:89:23:11:27:E3:56:D3:16
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1LvT-Dewq12bDL8EiSMRJ-NW0xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.168.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:b9:cc:d5:1d:e7:9d:c9:8a:16:c3:ab:80:bd:d8:82:f1:83:
8c:db:8e:d8:06:4e:c5:02:32:40:18:da:e1:f8:95:5d:5f:ee:
7d:52:bd:47:1c:ec:55:ef:fe:38:9f:aa:ad:7f:a3:e6:df:05:
27:28:59:3f:7c:54:3f:b6:d9:3e:e8:0c:24:9e:7e:9e:fe:39:
80:56:fb:34:de:0e:20:19:53:31:8f:c9:96:d0:b7:93:05:1d:
23:50:4c:e8:02:f7:6d:3d:1c:ae:8f:8b:1a:fd:92:dc:c1:3c:
91:42:7a:5f:a4:2b:ca:c5:4f:41:93:7a:86:ca:f1:fb:d4:ab:
31:5c:c8:7a:5e:7e:92:fc:5c:2b:17:c3:e7:ab:cf:86:c9:70:
b3:65:df:58:6a:e7:8e:28:2a:c2:5f:b9:9f:72:a2:4c:74:5b:
fc:37:06:8a:53:15:20:e7:88:64:da:08:8f:13:cb:64:3a:b5:
33:63:06:4b:a6:ab:08:42:b8:19:08:66:0c:8e:f6:fb:3e:45:
80:f5:37:5e:12:30:c3:f8:80:79:c2:e6:fd:f9:ed:1b:20:c9:
84:a5:e5:fb:06:90:64:57:47:59:84:50:37:50:4b:41:15:c5:
26:07:3a:76:ca:f6:10:3f:8a:3c:2f:e9:d0:85:f2:1d:7e:1f:
7e:38:aa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 18:05:18 2024 by rpki-client on console-ams.rpki-client.org