Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/lug8A5DfmCb0eTRK9-y7K_AZlBE.roa
File: lug8A5DfmCb0eTRK9-y7K_AZlBE.roa (raw, json)
Hash identifier: 5FZ6dMYuFw3t56E6dTYIH4cmbzl0SQBlSnP0nL0jPhM=
Subject key identifier: 96:E8:3C:03:90:DF:98:26:F4:79:34:4A:F7:EC:BB:2B:F0:19:94:11
Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial: 0192D40E9028E4453C705674C5F8B29D8544
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/lug8A5DfmCb0eTRK9-y7K_AZlBE.roa
Signing time: Mon 28 Oct 2024 16:56:17 +0000
ROA not before: Mon 28 Oct 2024 16:56:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.10.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 29 Oct 2024 14:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d4:0e:90:28:e4:45:3c:70:56:74:c5:f8:b2:9d:85:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Validity
Not Before: Oct 28 16:56:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96e83c0390df9826f479344af7ecbb2bf0199411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:72:9e:e9:5b:ae:9a:89:99:e5:37:09:35:
a2:3b:f3:20:58:45:e3:8f:10:c2:e6:93:be:11:d6:
42:45:93:c6:2f:c9:25:e0:6f:fe:88:30:c4:51:c5:
36:b0:21:43:e3:8e:93:1a:84:13:66:ef:c9:ef:0c:
0d:b5:62:e0:a3:a3:21:98:01:57:35:05:a6:cf:b7:
c7:e0:de:13:43:93:f2:b1:0e:85:54:51:07:87:8c:
6a:a1:2b:8a:79:df:6a:fc:6c:bc:6a:81:e0:f3:09:
34:d2:a7:f6:97:5f:51:72:ac:c9:bb:7f:d4:d0:4b:
f2:fb:e8:cd:4f:ee:59:4e:f0:d7:d6:49:07:0b:c7:
8f:62:0a:d3:a8:b7:5a:5a:67:35:15:ea:a7:58:a7:
9c:0b:59:b2:28:21:eb:43:3d:67:41:02:78:d5:9e:
cf:08:ad:4e:b0:bf:4e:a5:ef:b4:89:ed:c6:03:e0:
5c:49:80:a7:29:6d:93:ab:ae:d4:fe:39:5c:83:94:
67:6f:5b:c7:68:57:e6:88:b0:56:a8:db:08:c4:a9:
ed:64:17:0e:d6:01:91:4f:42:4f:e8:b7:83:63:29:
b5:18:37:1c:6a:7b:fe:fe:0d:3d:a0:29:1c:a3:ef:
b3:e1:d3:90:04:13:f6:cb:6a:dc:f1:fa:1e:8c:83:
9c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E8:3C:03:90:DF:98:26:F4:79:34:4A:F7:EC:BB:2B:F0:19:94:11
X509v3 Authority Key Identifier:
keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/lug8A5DfmCb0eTRK9-y7K_AZlBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.120.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:36:fd:b2:e2:53:81:73:3e:ef:6f:8a:0a:6c:73:c3:00:b7:
04:a1:d9:27:e2:dd:d2:96:c3:ba:fb:8d:42:f3:6c:a8:cc:06:
96:a9:bd:f2:e5:00:4d:a5:2a:2e:eb:17:c9:4f:22:89:67:46:
23:74:e6:66:7a:44:36:56:8a:75:fa:21:d8:ca:2f:09:26:97:
d8:ca:d2:b0:00:7b:bb:c1:ee:4f:ab:15:f6:35:f3:22:5d:0e:
28:7d:c1:8a:cb:ab:f4:6a:4f:24:e4:d0:d8:58:5d:f5:69:f1:
7b:01:7f:36:74:f5:76:47:17:96:93:c7:9a:30:6e:2e:3c:44:
ff:c8:1a:88:a7:4a:05:b6:2b:b9:b3:7e:47:78:c6:11:c8:8d:
1b:f2:13:0f:d0:84:05:d0:c7:bc:9d:eb:5f:7a:f5:99:47:7f:
e3:53:1d:6a:f9:bc:4b:f8:69:e7:b8:91:af:30:c9:86:07:32:
c0:11:2c:35:33:89:18:85:8b:95:a1:c2:23:28:e8:21:1b:a9:
dc:e1:59:64:4a:a9:67:ff:70:d7:bd:79:f8:65:d0:11:cb:86:
b8:03:ef:4f:fd:fa:47:45:d1:65:f8:a2:b4:7a:48:f8:53:cd:
93:62:ed:e9:d9:a0:12:8f:e8:11:30:14:90:81:d2:38:e0:01:
f8:2a:fa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:24:14 2025 by rpki-client