Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/LwBcKdv2zsXm2bOrOCuUj4OnISQ.roa
File: LwBcKdv2zsXm2bOrOCuUj4OnISQ.roa (raw, json)
Hash identifier: rhggwiWl2e7LP2Bz4JVJCjuXszUAhb3m7J28tMxQVf4=
Subject key identifier: 2F:00:5C:29:DB:F6:CE:C5:E6:D9:B3:AB:38:2B:94:8F:83:A7:21:24
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018C78FC3F59D7C2299F9F5780014A0F1785
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/LwBcKdv2zsXm2bOrOCuUj4OnISQ.roa
Signing time: Sun 17 Dec 2023 18:14:06 +0000
ROA not before: Sun 17 Dec 2023 18:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.92.0/23 maxlen: 24
45.149.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:78:fc:3f:59:d7:c2:29:9f:9f:57:80:01:4a:0f:17:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Dec 17 18:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f005c29dbf6cec5e6d9b3ab382b948f83a72124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:49:57:54:14:37:4c:14:f1:4d:01:c8:26:
d9:d5:6b:ae:50:4b:4b:f2:7a:03:4a:75:73:12:1f:
a7:9f:e3:27:f7:08:f2:e4:31:d6:6c:0c:4e:66:57:
3b:3a:67:9b:c2:48:64:13:7d:33:63:5e:00:80:52:
2c:d9:d2:f3:6e:f1:02:29:3b:3b:f3:27:ac:4a:70:
cc:1f:8e:60:dd:08:de:3e:c8:5c:3e:b4:c4:8e:49:
15:a8:ef:4e:2b:7d:73:dc:37:81:e0:e2:de:30:9d:
38:af:d6:a3:97:ee:f9:3c:02:68:82:b5:fa:01:a1:
c9:69:5a:a3:dc:58:23:a1:e1:3c:eb:a8:53:70:61:
b3:5c:2e:1c:74:ab:f4:2f:e1:11:4f:38:27:51:d4:
41:ee:2e:8c:a1:4f:f6:bb:93:fd:a8:6f:d5:76:9b:
31:6d:6f:bf:74:bf:f8:29:e1:0f:57:05:e5:4e:72:
94:d3:27:4e:de:60:77:70:97:01:e4:20:52:c1:92:
db:5a:6a:40:07:ee:93:d8:4f:c4:d3:13:7d:cf:00:
48:5b:4b:d9:a6:86:47:fc:2d:e4:ba:54:20:98:01:
11:63:25:5c:b8:b0:3b:01:eb:d1:81:94:78:13:39:
54:e1:97:84:8d:a3:ad:ca:a6:35:35:50:11:dd:13:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:00:5C:29:DB:F6:CE:C5:E6:D9:B3:AB:38:2B:94:8F:83:A7:21:24
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/LwBcKdv2zsXm2bOrOCuUj4OnISQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0/23
Signature Algorithm: sha256WithRSAEncryption
35:b0:d1:07:3f:68:aa:e8:d8:02:59:ac:92:b2:fb:a7:36:f2:
c6:d8:19:ff:40:d0:01:92:2e:b7:70:67:b4:d5:ca:c1:ba:a7:
02:2b:36:18:09:88:b8:7a:41:35:c4:07:43:75:17:bc:40:66:
13:43:41:91:4c:a5:52:b3:34:07:f2:a5:a6:d6:67:07:e3:78:
9e:68:65:6a:8e:59:7d:72:e2:9f:29:95:4a:28:5d:41:7c:a1:
12:ce:69:c0:a7:82:a8:e4:c3:de:86:98:34:9f:db:0a:44:1b:
90:f5:ca:17:78:01:45:18:66:34:e6:2a:5f:6f:03:a4:fa:1a:
2a:9b:77:12:d0:10:cc:2d:51:9e:b7:bc:ff:99:2a:26:a8:dc:
1f:ec:10:f6:ca:d1:54:14:7e:13:be:df:1b:19:18:8d:64:0e:
4b:de:89:4a:89:f2:d3:9e:c4:2d:ed:64:37:8f:72:50:20:9d:
04:6c:97:49:00:e2:cd:0a:af:34:a0:b4:5a:52:24:c6:8c:a5:
db:ab:92:07:d4:5a:00:6b:86:4a:a1:50:f6:63:e2:20:61:c1:
ff:af:5e:b1:da:58:9b:62:77:2a:bf:46:17:02:80:56:d6:5f:
2e:0a:43:a1:d2:f6:b0:74:f2:8d:27:3a:9d:ee:98:27:0c:81:
71:2e:07:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 14:52:05 2023 by rpki-client on console-fra.rpki-client.org