Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/ldX-WpYYYplPVHV4oncD4f1_g8w.roa
File: ldX-WpYYYplPVHV4oncD4f1_g8w.roa (raw, json)
Hash identifier: cwyQe3jQ1UJ28A79er2exctqH6smN7hCVZS/7DUhK/Y=
Subject key identifier: 95:D5:FE:5A:96:18:62:99:4F:54:75:78:A2:77:03:E1:FD:7F:83:CC
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 018570796FBAAA3BD7B89311B166F26BAFA6
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/ldX-WpYYYplPVHV4oncD4f1_g8w.roa
Signing time: Mon 02 Jan 2023 03:14:44 +0000
ROA not before: Mon 02 Jan 2023 03:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48266
IP address blocks: 45.141.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:6f:ba:aa:3b:d7:b8:93:11:b1:66:f2:6b:af:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 03:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95d5fe5a961862994f547578a27703e1fd7f83cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:2c:fd:c6:9e:98:62:45:10:28:e8:26:65:
55:ba:2a:07:7c:bc:76:f8:f0:e0:39:58:ae:ad:de:
2a:ff:e4:a2:f9:e7:81:5b:60:ec:d9:63:86:6b:cd:
28:17:e4:0b:f9:fe:13:3b:59:d1:b5:8b:4a:93:c9:
47:6c:0c:f0:00:75:7e:a3:d7:37:82:6c:ce:84:9c:
47:ca:02:76:17:62:82:af:23:d4:39:a8:50:82:4b:
71:3c:6b:32:28:b5:ce:58:81:0d:9f:65:08:89:aa:
5b:ec:9e:c3:93:a5:5d:86:23:58:22:55:95:d2:43:
09:75:3d:0b:b3:e9:7c:38:3b:79:01:85:db:27:95:
2e:0e:c2:8b:ed:e7:64:0d:8e:0f:23:63:2f:b6:52:
9b:4e:02:21:fa:c6:d2:91:7c:eb:c0:09:c7:d5:7c:
00:0f:2c:2a:86:03:56:2d:97:cd:81:8f:e5:1e:c8:
b2:e8:80:50:67:d6:04:03:d9:8a:7a:41:2d:9c:68:
d8:a1:13:66:8a:96:21:5d:04:2e:18:ba:f1:97:b7:
79:ae:2e:26:97:c0:11:a7:db:d0:d3:28:91:42:48:
25:c7:97:bc:1b:0b:bb:1d:0f:16:1c:d4:3b:94:2e:
28:2f:ef:54:37:fd:a3:9e:e1:65:f4:ee:5a:82:a1:
dd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D5:FE:5A:96:18:62:99:4F:54:75:78:A2:77:03:E1:FD:7F:83:CC
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/ldX-WpYYYplPVHV4oncD4f1_g8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:90:63:e0:34:c2:de:77:78:b7:16:93:f8:8d:c5:ce:34:0a:
12:27:05:4d:7c:87:b6:8c:37:9d:dd:1c:e0:99:1b:07:e0:43:
fe:d2:c2:ea:8e:51:d3:f6:f7:b9:b8:07:c6:64:cc:c8:02:d7:
31:7a:fc:fb:c2:7c:e4:6b:04:39:89:13:4f:a2:0f:be:e9:09:
7f:d1:6d:e2:25:50:d1:65:43:32:87:92:fc:20:49:47:74:36:
0d:61:6e:54:0f:1e:f2:38:7b:37:25:8b:f3:7a:11:86:29:db:
9e:6a:82:7c:ec:5a:6c:74:4a:d8:4a:34:e6:73:ce:1a:eb:ee:
db:82:3b:28:b7:69:14:43:02:84:58:df:15:78:14:b9:08:d0:
33:59:2d:20:bf:7d:80:46:c0:77:76:bb:1c:67:8b:cd:a7:26:
c0:80:e8:56:b8:9f:6d:f1:5a:25:13:c2:aa:d3:1b:4d:bc:82:
9e:2c:61:07:ec:54:52:90:aa:8c:bb:64:03:0f:58:de:7c:ac:
b6:24:5d:05:a0:c3:d3:f5:c3:7e:8d:21:c0:d5:7b:8c:b0:90:
ed:33:31:01:b1:4e:91:53:20:b6:3f:56:e3:d6:cc:25:f6:76:
52:b3:7d:ac:ed:46:f7:93:2b:aa:53:81:f1:af:24:b1:49:5e:
68:ad:d7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 07:39:03 2023 by rpki-client on console-fra.rpki-client.org