Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/LkVLHLNvTXBZZbrpAIMqoxcXJDU.roa
File: LkVLHLNvTXBZZbrpAIMqoxcXJDU.roa (raw, json)
Hash identifier: WKY2k6j19hQp75xIttgqgqxTlyQcLh6oZ7Ml69Hj4mQ=
Subject key identifier: 2E:45:4B:1C:B3:6F:4D:70:59:65:BA:E9:00:83:2A:A3:17:17:24:35
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018570306D570E71BE71591E8350BAA7D11C
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/LkVLHLNvTXBZZbrpAIMqoxcXJDU.roa
Signing time: Mon 02 Jan 2023 01:54:59 +0000
ROA not before: Mon 02 Jan 2023 01:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58079
IP address blocks: 84.1.245.0/24 maxlen: 24
84.1.241.0/24 maxlen: 24
84.1.244.0/24 maxlen: 24
84.1.243.0/24 maxlen: 24
84.1.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:6d:57:0e:71:be:71:59:1e:83:50:ba:a7:d1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e454b1cb36f4d705965bae900832aa317172435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:98:ff:8d:93:f2:9a:e0:2f:f1:3f:6b:b5:
0e:33:24:b2:ff:34:15:d6:25:4e:d2:3e:3d:fa:99:
df:e9:44:d2:02:24:1f:3b:1d:de:37:2d:eb:52:95:
5c:0c:fa:42:ed:73:27:d8:c1:ac:99:30:c8:ca:bb:
83:fe:11:96:36:48:22:16:c1:84:e7:8e:41:42:71:
aa:92:85:ee:49:51:13:d5:dc:89:5e:31:e2:29:78:
aa:5c:24:21:ab:ef:bd:ba:27:54:c3:5a:c6:38:de:
02:12:b4:96:68:1a:d2:e6:f6:89:c7:26:0d:f0:a0:
78:b2:48:40:6f:77:d7:12:99:02:65:8a:07:1d:e1:
59:2b:8c:d7:95:82:fc:b4:7c:7f:17:ab:65:ab:cb:
98:2a:52:66:52:73:c6:60:cf:7f:d5:b8:f7:35:42:
e5:8f:24:96:59:8c:d2:33:7a:70:9c:5d:6a:5d:2e:
70:da:63:01:69:cb:8a:bb:f0:35:81:d7:12:83:67:
27:e4:c1:e9:04:24:a5:b1:44:55:91:5f:11:0f:ff:
7b:b7:7c:41:bd:92:d9:39:74:68:cb:c3:38:77:c1:
73:69:10:55:08:fb:b7:1c:c6:c2:79:3e:3d:25:77:
da:44:54:17:5d:c1:7b:03:8c:81:32:66:46:43:be:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:45:4B:1C:B3:6F:4D:70:59:65:BA:E9:00:83:2A:A3:17:17:24:35
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/LkVLHLNvTXBZZbrpAIMqoxcXJDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.241.0-84.1.245.255
Signature Algorithm: sha256WithRSAEncryption
4b:e9:e4:35:f4:00:18:03:79:df:d8:c3:a5:7d:5e:cc:7d:dc:
81:8b:ab:50:12:8a:f3:ca:a8:5e:ce:c0:0c:84:81:eb:70:27:
29:4f:19:75:8f:57:cf:eb:7b:5c:63:1c:26:39:79:70:e8:40:
87:cd:f8:25:95:7f:4e:43:f1:b2:f6:5b:e3:3b:f9:8c:36:53:
71:d2:fd:31:7e:74:19:a8:5d:e8:9f:56:6d:90:ac:d3:4a:02:
9d:2f:84:8b:50:07:c3:ba:fc:e4:5a:09:80:a3:5f:de:5e:3c:
93:38:a0:6e:67:04:f5:c9:fd:08:99:0d:90:8e:f9:b5:e5:27:
ce:ea:59:9c:c8:97:07:2c:df:b2:c1:72:40:be:59:d0:82:d6:
5c:97:0d:84:93:90:34:bf:c7:0f:05:66:b8:a3:ec:17:1c:8c:
9a:cc:96:ac:a5:cb:78:38:b9:b3:df:2f:c4:7f:d0:04:68:92:
40:7a:83:07:a0:db:c8:bc:ae:b9:40:f1:00:3e:21:6f:c3:6b:
87:8b:4e:37:98:0f:31:14:fb:ac:6b:0c:9c:3f:bf:5f:36:7a:
1f:ba:0a:2d:54:79:fb:03:34:71:56:07:f1:2e:e7:de:18:66:
4d:83:94:34:50:17:cb:50:ee:53:39:83:07:98:ac:22:59:cc:
d6:70:e8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:13 2024 by rpki-client on console-ams.rpki-client.org