Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/LytOwJZcUfPtJ86_mItyRApdoGc.roa
File: LytOwJZcUfPtJ86_mItyRApdoGc.roa (raw, json)
Hash identifier: a8C4wW/xDOODWI4QbFdSLhLnksuOb6f+4nWKC44xU90=
Subject key identifier: 2F:2B:4E:C0:96:5C:51:F3:ED:27:CE:BF:98:8B:72:44:0A:5D:A0:67
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018EC95FDF6C732718E3371C0DFAD6AE9CA1
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/LytOwJZcUfPtJ86_mItyRApdoGc.roa
Signing time: Wed 10 Apr 2024 18:58:07 +0000
ROA not before: Wed 10 Apr 2024 18:58:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.149.94.0/24 maxlen: 24
80.246.229.0/24 maxlen: 24
80.246.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 07:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c9:5f:df:6c:73:27:18:e3:37:1c:0d:fa:d6:ae:9c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Apr 10 18:58:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f2b4ec0965c51f3ed27cebf988b72440a5da067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:79:97:1b:92:63:ab:a5:43:db:57:6f:4f:
b8:4c:06:ce:4f:d4:78:62:38:61:86:08:e7:fb:61:
97:e3:cc:64:bd:1a:9e:b2:f7:32:c3:32:0d:d3:b6:
e0:2e:19:64:d8:d2:4b:14:0f:02:6a:9d:b5:48:f5:
2d:2e:14:18:f7:95:a6:cf:dc:ef:f7:ca:ae:a3:4a:
fc:ff:a3:f1:77:1f:2d:75:e8:aa:03:d0:ca:70:e3:
20:03:dc:ba:a6:a6:97:b2:ec:ba:98:89:4f:13:8d:
12:89:ed:6e:32:4a:b4:d5:28:19:b5:6b:f5:59:d3:
45:b9:02:2e:58:96:b4:a2:ff:5b:45:34:0c:bd:6c:
f7:8f:ae:17:38:3f:e6:93:f5:48:18:8e:8b:4a:a5:
4e:0b:13:bb:42:e6:d0:d6:01:cb:87:3a:29:c8:a6:
26:32:4e:80:8f:c5:d7:5e:b4:6a:e9:45:36:b1:c2:
34:c9:c0:e8:1f:21:d4:d9:bb:1d:73:8b:a9:95:f1:
8f:61:76:c0:f6:37:05:1a:4e:c5:05:dc:82:98:c5:
87:9c:fa:33:6e:92:c0:bd:2f:b9:07:37:e9:e0:d3:
48:75:0e:88:a9:bf:8e:34:a9:ec:a8:b5:5c:92:d4:
9b:d7:e5:b9:98:a7:df:81:a9:a5:a0:b9:54:48:5e:
65:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2B:4E:C0:96:5C:51:F3:ED:27:CE:BF:98:8B:72:44:0A:5D:A0:67
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/LytOwJZcUfPtJ86_mItyRApdoGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.94.0/24
80.246.229.0-80.246.230.255
Signature Algorithm: sha256WithRSAEncryption
56:47:ea:85:8b:4c:40:54:ac:fb:db:af:6d:dd:2e:ff:fa:d0:
2f:6d:4e:e9:30:13:98:39:5f:01:5f:5d:fa:a8:67:57:c4:8e:
cf:29:a9:93:79:de:9f:f8:69:00:0d:66:99:9e:99:9d:d7:bc:
b6:e3:8d:a4:82:4c:84:4b:ad:d1:fd:18:e8:6b:f2:4e:86:88:
56:73:fc:03:22:87:c9:6a:29:1f:2a:03:2c:ec:1d:e6:e9:7c:
7b:4e:3d:19:4f:da:51:f8:fe:91:06:c8:c7:94:ee:d1:5d:32:
d0:37:d3:69:85:ca:8f:6c:89:c5:59:9d:d9:fc:1f:91:e6:85:
4f:10:00:a3:e3:89:86:b8:1d:05:f4:65:03:e2:b5:59:9d:39:
86:95:3a:36:f7:98:44:69:79:7b:60:2d:05:cf:ba:f4:bd:97:
6c:4c:ab:00:6f:ed:a1:e5:d0:2e:a3:68:1c:90:0f:a6:25:c2:
6d:9a:ba:dc:a4:ac:ea:ae:1a:c7:c8:1a:38:09:5c:02:57:e9:
bb:be:d5:e4:94:05:d2:a3:20:a1:79:0a:70:07:1d:82:c3:86:
c4:04:41:de:19:ba:fe:8f:b3:e9:f5:1b:33:f8:22:3b:36:64:
4b:38:98:fa:16:6e:c5:74:bf:c9:43:10:b1:52:bd:f3:c4:f3:
73:61:df:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 15 11:50:12 2024 by rpki-client on console-ams.rpki-client.org