Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/LkXaqwwB4XVmdlu2PvU0suWrAQg.roa
File: LkXaqwwB4XVmdlu2PvU0suWrAQg.roa (raw, json)
Hash identifier: 57QfwQ5aG7eLolYc7dwIKmnxR6FCmSqWxBREf2GDKbA=
Subject key identifier: 2E:45:DA:AB:0C:01:E1:75:66:76:5B:B6:3E:F5:34:B2:E5:AB:01:08
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 018572C37D758955C0D53CB430317AEDBEA2
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/LkXaqwwB4XVmdlu2PvU0suWrAQg.roa
Signing time: Mon 02 Jan 2023 13:54:52 +0000
ROA not before: Mon 02 Jan 2023 13:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60330
IP address blocks: 45.128.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:7d:75:89:55:c0:d5:3c:b4:30:31:7a:ed:be:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Jan 2 13:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e45daab0c01e17566765bb63ef534b2e5ab0108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e2:e3:f4:0e:1f:1f:5c:6b:ce:51:ed:fd:af:
df:b9:e7:93:4c:f0:2b:ac:57:da:ba:c5:9b:7e:14:
6a:13:80:90:3e:fe:e0:1f:e1:91:e9:0d:f4:a2:8d:
34:3e:2b:10:8c:44:9b:03:f7:59:6f:f8:51:5e:00:
54:8a:04:f9:e3:d4:25:60:7c:63:40:78:a3:36:a7:
c8:0c:ca:98:1f:fd:12:72:e0:eb:be:81:a0:c1:b5:
04:8f:5f:f0:14:b5:6f:c1:11:16:03:41:e1:d9:9e:
08:9e:48:44:1e:80:79:32:6a:cd:0f:b1:c5:36:1f:
4b:ad:f4:b8:8a:48:86:c9:d1:ed:c5:7a:bc:a6:21:
1e:a7:40:3d:e7:d2:c8:03:4f:38:45:57:a2:59:99:
d6:e6:46:99:86:03:6c:4d:d7:f2:2f:bd:72:49:90:
99:1c:0b:19:38:4e:7d:29:a1:00:6b:3c:25:ae:15:
39:98:ff:da:70:dc:10:42:94:11:7c:2b:7c:13:73:
0d:f8:9c:35:5a:61:59:95:49:69:79:96:7c:8d:01:
d4:bb:67:f2:cf:67:57:57:f7:2e:e2:f3:fb:4f:34:
9c:e7:22:c8:26:b4:7b:c1:f6:23:4e:4d:02:3c:05:
16:f6:7e:ad:e2:0b:9a:b1:f4:de:6e:3d:9f:ba:28:
c1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:45:DA:AB:0C:01:E1:75:66:76:5B:B6:3E:F5:34:B2:E5:AB:01:08
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/LkXaqwwB4XVmdlu2PvU0suWrAQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.205.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:45:8a:1d:04:c6:ec:a0:e1:f9:36:a3:18:37:bf:ad:60:41:
02:3e:35:16:45:d1:11:5a:82:49:3c:b0:d5:ba:1a:42:96:e2:
8d:fc:08:37:6f:11:b2:e2:e5:9f:db:86:48:d5:47:8d:ab:bd:
af:8b:f8:12:30:4d:9d:dd:89:17:cd:a9:37:f8:58:2c:9c:c0:
9c:e8:cb:7e:2c:16:d7:34:31:9d:09:ea:ca:27:10:17:f4:3b:
0f:37:69:74:1f:e8:fa:06:f4:7c:ed:ca:33:0f:c1:82:18:b9:
cc:86:0a:cd:69:aa:3a:63:f3:9d:9d:d0:05:d2:41:9b:70:3f:
54:82:4c:36:34:a4:52:a1:89:3f:77:a9:cb:77:a5:b1:7b:0e:
d5:00:05:c0:96:14:df:82:a5:68:8a:4c:b1:b9:54:f3:55:53:
6f:c4:0e:b3:ec:ed:7d:15:29:4f:2a:8d:ea:58:09:58:f7:4e:
d2:1e:56:5b:4a:88:fd:ec:5c:2f:0e:ab:09:e9:3b:72:a7:68:
64:39:9f:b3:cc:4d:73:7e:64:a5:2c:1f:cc:fe:0d:a5:27:df:
33:6e:41:14:74:bf:8a:69:88:ac:5e:eb:75:c6:8e:ac:07:ed:
f9:89:84:54:12:d0:a0:b6:d2:77:d8:14:90:ea:e7:2f:1c:99:
72:30:f2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:02 2024 by rpki-client on console-ams.rpki-client.org