Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/LwTDe7Xc4MPNwTe_C8aeheOWLIk.roa
File: LwTDe7Xc4MPNwTe_C8aeheOWLIk.roa (raw, json)
Hash identifier: S0yyUnvCHEeJngYmPFFQZQMN/G0w8LoxakvbRANTX6o=
Subject key identifier: 2F:04:C3:7B:B5:DC:E0:C3:CD:C1:37:BF:0B:C6:9E:85:E3:96:2C:89
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A3161696D62F69FC75F676E75CF23
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/LwTDe7Xc4MPNwTe_C8aeheOWLIk.roa
Signing time: Sun 01 Jan 2023 03:05:02 +0000
ROA not before: Sun 01 Jan 2023 03:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58727
IP address blocks: 46.243.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:31:61:69:6d:62:f6:9f:c7:5f:67:6e:75:cf:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f04c37bb5dce0c3cdc137bf0bc69e85e3962c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:81:08:e6:4c:f1:43:8f:2a:45:93:df:12:
b6:58:1e:30:c6:06:ad:01:18:3e:b9:5a:95:b4:a4:
09:b3:da:ed:91:56:1d:dd:ca:42:aa:ac:74:86:22:
25:a8:7e:78:ca:15:80:42:e2:68:8f:21:89:b6:43:
86:32:ed:e2:46:ff:33:d5:d7:4a:5c:64:8e:20:74:
5b:ab:27:02:1c:ce:dd:37:1a:ce:b9:04:16:78:08:
c8:1a:95:c0:4b:fb:a8:79:72:6f:81:1a:6d:a4:fd:
94:7e:15:29:b8:69:30:34:54:66:3f:20:83:ec:9d:
64:9b:33:4a:e2:f2:c1:f2:43:bc:87:81:17:f0:b7:
94:34:1e:5a:b2:8b:10:fc:f8:6e:0f:a7:cc:76:19:
0c:fb:83:d4:23:b9:23:ab:a5:d3:60:59:64:6f:25:
e9:96:fa:c9:01:2f:37:89:43:f9:33:96:23:63:41:
5a:61:fc:c9:0d:2a:17:55:e9:46:a3:23:9c:54:a6:
77:fc:bf:8f:d4:53:fe:1b:2d:21:c5:7a:90:55:2a:
dd:e0:40:87:6b:c1:92:3d:28:cf:5f:c1:a2:dd:20:
4c:7d:83:27:97:f7:a6:7d:7a:d8:f8:2a:f3:02:bf:
36:fa:cf:ca:0a:d6:51:cf:2a:a2:81:04:76:8d:08:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:04:C3:7B:B5:DC:E0:C3:CD:C1:37:BF:0B:C6:9E:85:E3:96:2C:89
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/LwTDe7Xc4MPNwTe_C8aeheOWLIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.137.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:3d:67:3b:e4:43:b3:ec:77:f7:23:e4:e4:d1:73:7c:10:a4:
db:7f:dc:de:cc:fe:39:6c:b3:eb:6a:3c:01:fb:24:50:95:97:
ce:47:71:d1:cf:96:a0:ff:95:71:1a:e6:68:6e:8f:74:14:8e:
0c:21:d7:d4:3d:81:5d:82:6d:f7:a7:38:7c:00:c2:55:93:38:
0a:fb:c2:5f:d3:dc:79:5f:fc:df:f2:f2:24:3c:76:ed:85:9f:
4e:3b:66:cc:58:63:04:ec:5e:c1:dd:49:a8:05:1c:32:f2:70:
2e:26:b3:9c:33:14:a5:5a:fb:53:37:18:4a:66:8d:c0:bc:2e:
6c:d0:f9:aa:e0:0c:9f:af:55:11:08:64:5c:07:26:6a:27:15:
a6:e2:27:c2:c1:cc:ce:6e:dd:35:f3:16:72:d1:5e:18:11:b4:
39:0c:da:59:1f:ee:a9:37:87:48:b0:0b:c5:57:a6:d9:b3:e2:
eb:02:c0:1e:9d:bf:55:7f:59:17:78:57:2c:13:a5:ab:d6:89:
1e:db:b0:63:e2:38:4b:da:0d:d3:19:7e:58:9b:e2:28:d1:4f:
41:a0:a1:7f:a1:6e:7f:f1:0f:25:65:79:42:bf:d5:b5:22:27:
ec:6f:c3:cf:61:6e:1a:30:17:b2:8f:e9:1f:3e:11:86:71:70:
48:83:db:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org