Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/LXzQ-jN7WyPrrYF_WytjcU3EYLM.roa
File: LXzQ-jN7WyPrrYF_WytjcU3EYLM.roa (raw, json)
Hash identifier: YBPf50jVCJM42GUS/nrEs1h5dBWXpJTxO9B/za4YknM=
Subject key identifier: 2D:7C:D0:FA:33:7B:5B:23:EB:AD:81:7F:5B:2B:63:71:4D:C4:60:B3
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 0188AF58E2D7477ED12F25FB4D44092E4BDE
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/LXzQ-jN7WyPrrYF_WytjcU3EYLM.roa
Signing time: Mon 12 Jun 2023 11:23:37 +0000
ROA not before: Mon 12 Jun 2023 11:23:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.84.112.0/23 maxlen: 24
45.84.114.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jul 2023 12:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:58:e2:d7:47:7e:d1:2f:25:fb:4d:44:09:2e:4b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jun 12 11:23:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d7cd0fa337b5b23ebad817f5b2b63714dc460b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:e6:76:e8:bc:a3:dc:9e:0c:a4:09:52:8f:
05:ca:d1:35:f6:c7:45:29:c0:a3:40:c3:1f:4d:fa:
9c:5c:c5:6f:62:fa:61:70:47:74:89:db:95:b2:c6:
20:b4:77:c2:74:23:51:e4:8a:0e:ed:bb:e5:47:21:
15:b4:1e:bc:38:95:0e:75:b8:6e:71:cd:cb:1d:5c:
bd:41:6e:cd:30:8b:b0:1d:3d:53:03:91:c2:1c:ca:
06:69:d4:49:6b:0e:b9:94:e6:1a:ac:ac:b3:e2:bf:
fc:1c:4c:3a:eb:36:50:e5:32:ee:68:a2:15:f4:f9:
52:b6:a3:63:4a:e5:85:e5:68:71:61:12:8b:7d:06:
3d:f0:74:75:e1:ab:e2:94:5e:6c:1c:fd:2c:23:98:
12:5b:bc:7f:b0:17:f7:09:24:5e:f0:ba:ca:9e:32:
cc:0b:0a:bf:36:16:6f:89:7c:c6:39:03:84:1e:ba:
25:c3:c9:a4:80:a4:20:04:77:c4:05:00:60:68:91:
7a:bb:4a:b8:4b:ef:8f:80:5a:27:5c:7c:bb:07:f3:
f2:18:4b:0b:33:54:2c:a3:3f:df:82:c4:4e:13:6e:
97:a0:bc:ae:55:3c:db:ba:f4:85:d8:8b:76:fd:6f:
43:b1:66:47:22:f5:91:f3:bc:91:8b:69:3f:a3:4d:
70:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7C:D0:FA:33:7B:5B:23:EB:AD:81:7F:5B:2B:63:71:4D:C4:60:B3
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/LXzQ-jN7WyPrrYF_WytjcU3EYLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.112.0/22
Signature Algorithm: sha256WithRSAEncryption
65:e8:5d:ef:3e:31:c7:99:a1:fb:c8:a6:8c:9e:70:75:03:93:
80:8e:a5:ab:2c:ca:d9:04:e3:aa:1c:cb:61:bb:e9:0d:7c:30:
2b:e1:bb:15:f4:7b:41:6a:43:82:1c:17:34:4b:01:5d:4e:ec:
b6:35:a7:68:b8:5b:15:bb:23:1b:ea:ea:92:f5:04:97:1b:40:
de:76:5a:f4:cf:93:fc:1a:27:28:91:cf:96:6f:1b:01:3a:b1:
82:4a:af:1d:fc:23:76:fb:f4:64:bc:7a:ff:f9:f1:84:01:c0:
5e:ef:0f:c1:b9:8a:3a:40:a4:b0:ad:d6:e6:46:6e:34:c6:61:
e2:4a:05:20:c1:e3:17:2f:99:ea:d4:fe:35:f9:15:cc:6d:6a:
9e:31:a7:5d:e8:1a:fa:7e:d2:23:4d:1f:c4:24:dc:e5:a8:eb:
80:25:db:76:44:c2:3c:c3:34:1b:84:3d:62:65:4b:6c:22:b9:
1d:e0:81:ee:a7:bc:12:dd:bf:01:0a:f0:79:63:e4:55:66:90:
70:b9:d0:a9:1f:fd:14:31:04:ef:e8:09:c7:0d:f1:cb:c6:d1:
a3:1c:20:c2:be:09:db:c7:8e:bc:22:d5:75:5d:7b:9e:43:8b:
88:9d:47:9c:9d:ac:54:3b:23:28:f4:54:3c:17:ca:51:02:5b:
69:49:10:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYivWOLXR37RLyX7TUQJLkveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj
MGYyNGMwHhcNMjMwNjEyMTEyMzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDdjZDBmYTMzN2I1YjIzZWJhZDgxN2Y1YjJiNjM3MTRkYzQ2MGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS7mdui8o9yeDKQJUo8FytE19sdF
KcCjQMMfTfqcXMVvYvphcEd0iduVssYgtHfCdCNR5IoO7bvlRyEVtB68OJUOdbhu
cc3LHVy9QW7NMIuwHT1TA5HCHMoGadRJaw65lOYarKyz4r/8HEw66zZQ5TLuaKIV
9PlStqNjSuWF5WhxYRKLfQY98HR14avilF5sHP0sI5gSW7x/sBf3CSRe8LrKnjLM
Cwq/NhZviXzGOQOEHrolw8mkgKQgBHfEBQBgaJF6u0q4S++PgFonXHy7B/PyGEsL
M1Qsoz/fgsROE26XoLyuVTzbuvSF2It2/W9DsWZHIvWR87yRi2k/o01wKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC180Poze1sj662Bf1srY3FNxGCzMB8GA1UdIwQY
MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt
ZTNmY2IyM2UzNDM4LzEvTFh6US1qTjdXeVBycllGX1d5dGpjVTNFWUxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4
LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVRwMA0G
CSqGSIb3DQEBCwUAA4IBAQBl6F3vPjHHmaH7yKaMnnB1A5OAjqWrLMrZBOOqHMth
u+kNfDAr4bsV9HtBakOCHBc0SwFdTuy2NadouFsVuyMb6uqS9QSXG0Dedlr0z5P8
Gicokc+WbxsBOrGCSq8d/CN2+/RkvHr/+fGEAcBe7w/BuYo6QKSwrdbmRm40xmHi
SgUgweMXL5nq1P41+RXMbWqeMadd6Br6ftIjTR/EJNzlqOuAJdt2RMI8wzQbhD1i
ZUtsIrkd4IHup7wS3b8BCvB5Y+RVZpBwudCpH/0UMQTv6AnHDfHLxtGjHCDCvgnb
x468ItV1XXueQ4uInUecnaxUOyMo9FQ8F8pRAltpSRBA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:37 2024 by rpki-client on console-fra.rpki-client.org