Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/lLVpDXtXg2ArGPKvloZJxdqewec.roa
File: lLVpDXtXg2ArGPKvloZJxdqewec.roa (raw, json)
Hash identifier: DoPEJ5HIDP8YQ4PttYvhQVpsoHYC2rC8eE0mR9AKERE=
Subject key identifier: 94:B5:69:0D:7B:57:83:60:2B:18:F2:AF:96:86:49:C5:DA:9E:C1:E7
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018C2065F3F88FF93AE9DBC5CA1796C19961
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/lLVpDXtXg2ArGPKvloZJxdqewec.roa
Signing time: Thu 30 Nov 2023 13:23:21 +0000
ROA not before: Thu 30 Nov 2023 13:23:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216246
IP address blocks: 45.15.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:65:f3:f8:8f:f9:3a:e9:db:c5:ca:17:96:c1:99:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Nov 30 13:23:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94b5690d7b5783602b18f2af968649c5da9ec1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:70:6d:83:fc:1c:c0:dc:80:d7:c7:f9:30:
a1:b6:0f:35:9b:2c:39:96:e7:1f:fd:46:64:86:29:
ef:f6:0f:fb:69:78:7d:db:4a:ca:29:4c:b7:a7:e4:
2c:32:13:68:d9:ba:91:db:ff:54:98:16:a0:41:80:
01:c3:d1:23:63:6a:6e:6a:80:0c:db:d6:25:e1:3b:
65:7d:f6:be:1e:46:fb:de:2f:87:7d:73:3a:0d:e1:
12:b1:4e:70:54:45:5b:87:1b:e7:80:ee:83:fe:22:
5e:0c:e5:43:08:05:e7:65:c8:0e:c6:88:89:f6:f7:
6a:4e:db:42:b3:4c:21:9c:62:f2:8e:12:14:a9:48:
21:97:f1:e1:74:c5:60:9d:92:97:cf:1d:86:eb:ca:
98:2e:d9:3a:f1:0f:53:f5:39:32:47:9e:26:a2:e8:
2f:4c:6e:af:fb:4a:48:5b:77:10:50:19:11:50:5d:
af:5e:80:6f:80:b5:b2:60:ac:f9:d1:53:f8:6a:95:
24:f3:70:83:03:de:49:08:4e:6f:a0:c5:9a:90:05:
f5:69:0a:77:77:17:e9:63:dd:af:38:66:5c:5b:94:
2d:34:ec:f1:ec:fa:f5:a5:00:b7:b8:d7:3d:d0:f7:
51:0c:e4:bc:2c:3b:5a:a8:74:32:e1:42:c4:93:1c:
dc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B5:69:0D:7B:57:83:60:2B:18:F2:AF:96:86:49:C5:DA:9E:C1:E7
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/lLVpDXtXg2ArGPKvloZJxdqewec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.158.0/24
Signature Algorithm: sha256WithRSAEncryption
59:8b:a2:d9:64:ed:ad:99:bd:39:93:47:56:70:d0:b0:b8:c2:
9e:d4:4f:17:55:13:7c:ef:87:ce:61:0e:a8:3d:03:8c:b9:e9:
a1:55:bd:62:47:71:fd:f2:c1:91:79:12:9a:da:2d:4e:15:5f:
e5:67:0c:9f:a3:db:7f:42:3b:ea:9d:41:32:84:0c:40:c3:14:
62:94:dc:2d:bd:d4:4b:c2:3f:ca:62:31:4f:a1:fb:55:57:d2:
5f:68:36:5e:ec:29:28:5b:51:bf:90:a7:ca:32:19:90:1f:79:
9f:45:e1:94:f1:75:c1:27:9e:a6:a4:e5:8a:f1:be:94:27:ba:
fc:78:46:87:8e:f0:fc:66:33:b2:1b:8f:bf:6c:cd:cf:1c:81:
23:3b:ad:43:21:2e:db:6d:14:9f:da:86:7c:d1:5b:ff:a6:ca:
31:62:b5:78:63:5e:96:3b:0a:69:ac:b0:a5:07:9f:d1:cd:02:
30:b6:75:3b:29:02:c4:f5:83:30:1c:82:06:c9:68:86:4f:c6:
26:b4:63:e1:8d:f5:56:f1:ae:f0:f0:b0:05:62:3d:f3:10:31:
c1:b3:51:21:af:e1:c1:a7:a2:9c:cb:38:a3:99:35:c5:19:f8:
3e:1f:87:08:c1:d8:69:14:9c:1b:a5:0f:88:69:78:e7:13:50:
4d:a5:04:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org