Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/lhj9z-SiGGWIwzjK-JTiR9iw-bE.roa
File: lhj9z-SiGGWIwzjK-JTiR9iw-bE.roa (raw, json)
Hash identifier: 7WGkaZaltBOJETTpgIRQPeiQckOedbgs8/b1j6+KW7M=
Subject key identifier: 96:18:FD:CF:E4:A2:18:65:88:C3:38:CA:F8:94:E2:47:D8:B0:F9:B1
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 01856D417E92DD9CC582EDADA4C7A3C21A2B
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/lhj9z-SiGGWIwzjK-JTiR9iw-bE.roa
Signing time: Sun 01 Jan 2023 12:14:46 +0000
ROA not before: Sun 01 Jan 2023 12:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62579
IP address blocks: 45.150.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:7e:92:dd:9c:c5:82:ed:ad:a4:c7:a3:c2:1a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Jan 1 12:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9618fdcfe4a2186588c338caf894e247d8b0f9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:da:df:bc:58:1d:ee:96:7d:90:a4:55:bb:
b4:d5:8e:9a:d0:62:06:bc:84:3d:9c:83:74:4f:93:
31:d0:13:98:55:af:e0:1a:10:a4:80:37:c5:8d:7e:
b9:72:5a:16:df:10:10:fc:ca:8c:5f:ed:28:f6:0e:
1e:ad:8f:8c:76:97:4b:f3:94:f0:13:50:ec:72:c4:
42:03:a2:73:09:04:93:da:63:0c:ff:b2:e0:d2:9f:
30:90:f6:f5:fc:67:bb:5a:69:3b:ad:c6:e9:10:a1:
a9:45:f2:7f:bb:7f:44:a2:14:13:bb:fb:a6:1c:50:
8e:39:7d:a5:23:3a:76:24:c5:cd:62:c5:a8:41:28:
4b:ed:2b:07:6a:ba:30:0c:e6:3a:c4:06:0e:6c:42:
39:b3:38:71:cf:4a:4b:1c:a1:c4:e8:24:8d:d7:40:
07:0c:a6:66:8f:a0:d7:ae:4b:49:74:e0:b7:d3:ff:
51:6c:71:97:f3:9b:6b:76:77:29:67:a4:ea:12:73:
58:49:e8:89:6b:b7:47:fb:8d:85:34:6d:5d:21:72:
10:f8:1a:17:7b:4a:da:6a:e9:99:20:62:c8:fa:41:
25:3c:5a:a7:20:96:3a:9e:db:e2:f2:87:6a:a5:cf:
5a:6b:e9:0f:f0:0a:19:96:24:f0:e4:96:bb:69:ca:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:18:FD:CF:E4:A2:18:65:88:C3:38:CA:F8:94:E2:47:D8:B0:F9:B1
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/lhj9z-SiGGWIwzjK-JTiR9iw-bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.6.0/24
Signature Algorithm: sha256WithRSAEncryption
10:06:d7:96:af:8b:2f:2a:bf:b2:d2:17:7a:41:9c:3b:13:51:
18:09:90:93:91:e1:1c:67:ee:69:ba:54:34:37:c8:20:cd:05:
7d:29:4b:ef:3f:13:3c:9f:a2:63:b7:bd:96:03:38:52:29:e7:
72:2c:2c:8d:91:e0:d9:9e:d1:9a:7f:5c:10:df:14:3d:24:6d:
e1:83:32:94:60:51:2c:70:19:77:22:7c:b5:dc:da:7c:ec:f2:
46:70:33:66:d7:ba:b7:bf:1d:6a:84:43:08:17:5e:18:fa:5b:
67:c7:82:8c:3d:d5:69:ac:a3:f5:0c:be:ba:be:00:fc:3d:1a:
6d:fb:e0:97:1a:df:fa:7d:e4:d1:92:7f:65:bb:68:31:25:54:
53:1c:ac:fd:3e:2e:7f:51:29:f5:30:00:68:fe:29:dd:c4:de:
dc:6b:a6:66:65:ba:09:59:b2:c0:0e:1a:d1:4a:6c:31:b9:26:
54:94:ec:9b:da:fd:26:8b:dc:f3:db:a7:87:00:33:59:e7:f9:
35:c2:1c:fd:48:e4:cb:5e:3c:dd:c9:f5:77:35:50:26:84:76:
7e:49:d2:76:c3:20:6b:fb:bf:e0:b8:79:2d:86:97:77:4d:42:
f4:51:b9:f8:8f:24:cf:6a:de:42:40:5b:3c:f3:8f:ea:60:cf:
68:3f:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 09:30:55 2023 by rpki-client on console-ams.rpki-client.org