Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/LjYU-YKvTmMbjGE3-M-ynoVb4hk.roa
File: LjYU-YKvTmMbjGE3-M-ynoVb4hk.roa (raw, json)
Hash identifier: KpadP4ZD620s+hu2ftJmHaAbpr6Wlv1xyzoVl8XCZOI=
Subject key identifier: 2E:36:14:F9:82:AF:4E:63:1B:8C:61:37:F8:CF:B2:9E:85:5B:E2:19
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 018C00F84C0950CBAA0BAE0CB39407762F31
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/LjYU-YKvTmMbjGE3-M-ynoVb4hk.roa
Signing time: Fri 24 Nov 2023 10:55:21 +0000
ROA not before: Fri 24 Nov 2023 10:55:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 45.149.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:00:f8:4c:09:50:cb:aa:0b:ae:0c:b3:94:07:76:2f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Nov 24 10:55:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e3614f982af4e631b8c6137f8cfb29e855be219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:d8:0a:f8:de:c3:d7:d2:ca:88:6d:42:72:
3b:f9:6f:74:4e:8c:77:03:3b:76:5c:34:06:a4:64:
4f:4a:11:0c:64:51:0a:fb:93:f3:ae:0b:34:c7:88:
19:16:9e:dd:dc:71:3b:0e:e4:54:58:0c:7f:e6:18:
ab:07:0f:90:73:f0:9b:76:d3:53:0e:e7:3b:af:92:
32:b7:05:c1:d9:e5:4e:2f:ce:3d:46:a5:18:03:2d:
77:03:65:53:73:ac:26:ea:1a:5b:a1:6b:d5:0d:13:
a0:1c:a6:9d:0a:33:cc:98:5a:4b:a2:57:d7:83:82:
87:e8:df:6a:5c:aa:a0:75:b3:f2:4c:8b:ea:7e:3e:
1c:74:96:ca:a2:c0:a6:e4:de:c7:d8:24:52:63:6f:
9c:a2:ee:63:2a:bf:2f:a2:98:e5:f6:24:98:36:66:
4d:d4:fc:a4:c7:7f:40:ad:4b:6d:59:73:c6:e1:26:
bd:68:47:31:93:d5:cd:1e:6a:25:30:f7:59:3a:77:
a4:b9:39:c3:f7:69:9e:50:8d:33:3d:48:67:52:0d:
56:8d:72:d9:ae:e3:90:3d:9e:33:0f:b8:9e:4c:44:
d4:fe:a6:2e:4e:2d:75:6f:19:c4:64:30:9f:ac:12:
20:df:cd:06:b4:79:7e:b8:3e:36:62:11:83:6a:a1:
25:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:36:14:F9:82:AF:4E:63:1B:8C:61:37:F8:CF:B2:9E:85:5B:E2:19
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/LjYU-YKvTmMbjGE3-M-ynoVb4hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.38.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d0:3c:df:bf:d6:3b:da:b7:a6:df:d0:e4:58:a8:26:1b:7c:
19:86:91:05:08:e2:3f:0a:e3:4b:cf:d7:3d:15:7f:b7:be:db:
07:e4:9b:d4:a6:42:07:e9:31:6c:8b:8c:4d:03:5f:27:f4:8b:
92:15:4b:3c:c3:53:1e:70:25:10:a7:29:ac:d0:52:3b:22:35:
f1:86:8a:6c:8a:af:d3:00:dd:20:9d:9a:7a:c0:f8:3b:d0:b8:
c1:a6:83:5f:0e:74:a0:2f:ca:a0:fd:9a:0a:2b:16:52:fe:f5:
da:a2:5c:0f:7b:07:a2:af:b8:6f:27:e3:0d:21:1e:96:0e:a3:
ed:a7:77:31:58:08:8b:e5:3b:ef:81:a1:69:c3:17:76:f4:ad:
c4:12:40:b6:59:bc:ef:58:45:2e:47:c7:64:83:c5:6b:d4:ca:
01:37:f6:25:ad:5f:17:29:23:1c:32:cc:53:cb:7f:1b:52:90:
eb:9d:66:6c:e5:d1:0e:1f:9e:37:31:a5:cf:e8:5b:4b:0c:39:
26:c3:0e:a4:f2:01:64:c4:12:d6:34:d7:bb:c7:eb:49:9f:31:
32:13:59:2e:71:47:a0:e4:c2:cc:30:a5:d1:b3:7f:5e:2f:37:
35:fe:99:da:85:57:6d:02:09:72:91:37:67:7b:3f:30:89:5a:
eb:d1:87:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:29 2024 by rpki-client on console-ams.rpki-client.org