Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/lIeTKsa_bbwrbxuSW449ZVG7t7Y.roa
File: lIeTKsa_bbwrbxuSW449ZVG7t7Y.roa (raw, json)
Hash identifier: oCI/ckzYOvKhW9oBSkmPn+JNdUU9ldvNqAQazI4W274=
Subject key identifier: 94:87:93:2A:C6:BF:6D:BC:2B:6F:1B:92:5B:8E:3D:65:51:BB:B7:B6
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018AA1A8D29EB34BE95C4583ED19F0EB1FA5
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/lIeTKsa_bbwrbxuSW449ZVG7t7Y.roa
Signing time: Sun 17 Sep 2023 05:41:50 +0000
ROA not before: Sun 17 Sep 2023 05:41:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 45.146.234.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a1:a8:d2:9e:b3:4b:e9:5c:45:83:ed:19:f0:eb:1f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Sep 17 05:41:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9487932ac6bf6dbc2b6f1b925b8e3d6551bbb7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:df:56:2d:e2:27:f7:91:e6:ba:09:cf:6c:
9f:82:2e:07:24:d9:24:32:d5:6e:b0:55:5c:40:ee:
d0:b8:22:3a:d9:5a:35:c5:96:99:14:10:7f:2e:f4:
8f:18:1b:4a:1e:f3:dd:bc:b5:7c:56:22:b8:7c:20:
10:e2:7c:83:0b:9c:b2:f3:d9:1d:ab:f5:44:b1:86:
90:a1:62:d4:bf:93:db:bc:3a:8e:1b:11:bb:5c:ab:
2c:5d:02:1e:ca:0e:86:c1:c7:f0:bf:2c:a0:d9:aa:
74:15:05:73:48:20:26:4b:6c:95:a9:10:5d:48:d0:
c1:cf:12:42:6d:78:ff:db:19:36:62:0a:88:7f:93:
2d:f2:55:11:e4:22:8e:6b:8a:4f:af:86:e2:19:0b:
1b:d5:31:a7:27:42:9a:88:86:c5:41:ea:8b:e4:8f:
1f:5a:85:47:19:ba:ea:78:5d:61:1f:bc:83:d7:3e:
1b:81:4f:d1:de:d6:10:76:13:8a:f5:86:02:4a:dc:
20:ec:1d:08:19:14:be:87:7e:e3:6b:d1:ce:7a:9e:
43:1b:1f:ae:d1:f0:fa:94:df:f0:98:ea:96:ff:ae:
cd:03:57:b3:70:55:b3:22:fa:ed:f4:5f:24:7a:9e:
7c:13:ea:f4:b7:6d:59:2f:d9:7a:61:92:79:20:fb:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:87:93:2A:C6:BF:6D:BC:2B:6F:1B:92:5B:8E:3D:65:51:BB:B7:B6
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/lIeTKsa_bbwrbxuSW449ZVG7t7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.234.0/23
Signature Algorithm: sha256WithRSAEncryption
27:9f:82:9b:5c:fc:33:bd:12:3c:4e:5e:a0:76:ef:75:bd:9e:
20:ac:d9:6e:7f:94:4c:33:82:d2:8c:17:d4:4c:a2:3c:fa:c7:
01:2d:36:97:ca:77:bb:58:c0:37:13:fd:e8:30:62:af:0b:05:
68:14:ba:69:1d:bd:e4:e7:cd:37:7d:54:ea:ed:8f:ed:46:47:
cc:20:cd:6e:bd:1d:66:d5:a7:07:93:b3:a6:e6:5b:aa:f1:60:
c2:32:cf:08:a3:2e:01:85:60:57:57:0c:4c:c0:e4:f9:ac:14:
e8:f4:76:a5:7d:f6:41:93:c3:19:20:de:b5:51:e9:c2:97:19:
84:fd:66:d3:78:7e:77:54:3c:7b:2b:f5:a1:b4:b3:7e:bd:fd:
b1:ee:44:eb:d1:04:a9:ff:f5:8a:68:41:6f:10:fc:20:f9:cd:
8a:9a:5c:7d:fe:65:a6:25:b0:db:d2:4e:48:86:d4:f6:6b:73:
9e:df:be:06:85:35:a8:d7:72:20:ea:b6:f9:3a:60:af:4f:95:
94:e5:ea:b2:f7:08:88:d4:8c:9d:6c:11:91:9f:78:48:2c:ac:
5e:e6:1b:8d:11:71:8e:6f:e0:46:09:61:6f:ed:ac:44:7e:e7:
85:75:ce:ee:a8:8d:1b:0e:54:78:c5:2b:7c:4c:0f:94:d1:4a:
9e:c0:02:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:23 2024 by rpki-client on console-fra.rpki-client.org