Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/LGgnZRp9GD0KIgJP1QgCJhRCF0s.roa
File: LGgnZRp9GD0KIgJP1QgCJhRCF0s.roa (raw, json)
Hash identifier: YPO7VjtPjQ0eZUnQrDb7Ky+gACcrQR/94R+DtF6dICU=
Subject key identifier: 2C:68:27:65:1A:7D:18:3D:0A:22:02:4F:D5:08:02:26:14:42:17:4B
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 018AEA93A78418A066E841F2BAC5E99BBD02
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/LGgnZRp9GD0KIgJP1QgCJhRCF0s.roa
Signing time: Sun 01 Oct 2023 09:30:59 +0000
ROA not before: Sun 01 Oct 2023 09:30:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210392
IP address blocks: 45.144.17.0/24 maxlen: 24
45.144.16.0/24 maxlen: 24
45.144.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 11:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:93:a7:84:18:a0:66:e8:41:f2:ba:c5:e9:9b:bd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Oct 1 09:30:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c6827651a7d183d0a22024fd50802261442174b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bc:9a:3a:d1:7c:75:c4:12:ae:2c:a5:55:64:
e5:4f:57:9b:e2:82:9d:4b:d1:c1:3c:7a:9f:99:61:
51:bf:3b:67:4b:a4:a6:11:d8:94:eb:c9:54:1c:9e:
f8:85:d2:c0:5c:aa:f6:c0:55:e5:21:87:25:8a:06:
7c:68:8e:ef:89:be:06:d5:b4:f1:ff:25:61:af:2b:
28:27:c7:5d:f4:91:a1:61:3e:24:62:10:0c:d9:76:
3f:19:00:41:cb:ff:58:c6:ab:54:fc:9f:2b:6a:36:
6d:5d:6b:2e:db:2a:28:49:cc:ed:4c:2e:ee:c0:d8:
87:41:dd:c2:c0:13:85:32:66:c1:ca:65:c0:5c:5e:
91:22:b8:b1:17:77:28:7f:bf:53:85:d4:cf:44:63:
6a:a1:23:23:cd:a5:e7:27:1d:e7:a0:61:b8:b4:70:
7f:39:5a:e2:4b:b3:52:84:6c:1a:94:00:95:94:c3:
50:c8:7e:3f:2a:19:70:0b:c6:9e:98:8b:47:34:8c:
3d:63:44:97:4c:41:76:33:b0:68:0d:b7:7b:93:6e:
52:91:66:19:96:af:c8:4f:8b:62:d4:7a:e2:71:fa:
e6:1b:ac:b0:07:09:f9:6c:16:02:cb:fc:81:f5:bb:
39:a5:77:4a:4f:3a:26:92:49:9b:43:74:4a:93:19:
fd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:68:27:65:1A:7D:18:3D:0A:22:02:4F:D5:08:02:26:14:42:17:4B
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/LGgnZRp9GD0KIgJP1QgCJhRCF0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.16.0/23
45.144.19.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:80:62:b2:a9:fb:fa:f3:6a:74:ff:7d:e0:50:b4:bd:ed:d7:
fa:c7:a2:7d:3e:b6:85:81:85:6c:bc:d6:6b:9a:f2:29:d5:36:
16:8a:bf:cc:8d:b0:2b:7a:32:1e:e6:a8:2a:84:8d:b8:33:89:
15:15:f3:5a:8b:7f:8e:11:99:4c:fb:d4:f6:a3:2f:da:14:ea:
24:47:c5:8c:88:2d:4d:9d:ee:62:21:94:6d:03:c7:c2:19:85:
de:f3:bd:70:24:50:65:27:c0:f9:0b:00:5d:19:55:b5:f5:dd:
70:33:d6:61:0c:3b:97:99:47:79:40:28:92:c4:e8:66:b2:07:
e4:8e:b9:4c:3b:34:62:b0:26:3c:42:44:1b:1b:53:bd:63:cc:
33:69:81:69:d2:e1:91:f7:e3:bf:54:25:ac:69:85:a3:68:c4:
be:42:bb:cb:75:2d:05:86:c4:bf:93:9c:63:d3:4b:25:ac:ac:
6f:38:6f:5d:3e:39:72:4d:66:0e:30:c3:a5:19:d4:ef:05:4e:
5d:4b:f3:91:d8:29:d8:cc:b7:35:9c:dd:81:11:e2:99:39:77:
01:ab:30:a5:31:e5:5f:80:1b:62:e0:1d:bc:e7:73:80:fc:c7:
05:82:23:50:5a:c4:82:cc:7a:18:55:d1:c5:1a:4a:3a:47:d5:
ea:41:7b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-fra.rpki-client.org