Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Lu8o0U-x5ffdO24Tq3hvd4sQpxA.roa
File: Lu8o0U-x5ffdO24Tq3hvd4sQpxA.roa (raw, json)
Hash identifier: AIVXnqp5BXBiYqlbFNluXcQghrGONflEWArkruiGBHM=
Subject key identifier: 2E:EF:28:D1:4F:B1:E5:F7:DD:3B:6E:13:AB:78:6F:77:8B:10:A7:10
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C39F5A67C02183FEB0AEB00F24F27
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Lu8o0U-x5ffdO24Tq3hvd4sQpxA.roa
Signing time: Mon 02 Jan 2023 05:55:04 +0000
ROA not before: Mon 02 Jan 2023 05:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207577
IP address blocks: 195.66.104.0/24 maxlen: 24
45.142.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:39:f5:a6:7c:02:18:3f:eb:0a:eb:00:f2:4f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2eef28d14fb1e5f7dd3b6e13ab786f778b10a710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c6:55:c6:b8:14:ee:17:6a:68:80:10:02:ed:
60:c8:d0:3e:bf:52:f2:ca:a6:8b:9f:0d:5b:4f:5d:
1f:e4:56:10:58:14:b5:76:e9:c1:60:5c:53:8f:95:
08:43:b3:29:ea:2c:31:9e:db:6e:39:3b:0d:25:02:
a2:a9:02:12:46:87:22:e8:5c:09:68:31:16:f2:ec:
ac:ca:a5:5a:df:b3:b6:2c:1d:15:d1:93:f3:76:7d:
47:0f:e4:8a:28:00:6b:b7:96:6f:68:e8:25:12:c6:
4a:e0:60:04:26:bb:33:09:77:f7:50:53:48:c0:ce:
33:c6:ae:2c:c2:e8:19:4c:6f:7c:45:8d:7e:56:c7:
4c:22:d0:3c:0c:f0:f5:c4:25:ea:c3:87:03:4d:de:
a5:4b:fe:0c:74:34:a9:e0:df:b4:97:19:4a:d9:5b:
80:81:5a:f7:c1:06:e4:ef:61:20:39:7b:ff:90:02:
c2:ff:80:30:2c:fe:57:43:d8:7d:44:4d:cc:15:5e:
7b:95:8b:08:7d:1b:e8:a3:c1:da:c1:78:3c:c4:16:
fc:b7:40:0a:09:2f:0b:41:1a:fb:e2:64:0b:be:9c:
7d:8b:0e:0f:7c:fc:85:02:80:ae:f5:2d:34:d9:56:
df:b6:cd:ca:eb:d1:11:c4:d7:e0:ed:6c:1c:d5:9f:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EF:28:D1:4F:B1:E5:F7:DD:3B:6E:13:AB:78:6F:77:8B:10:A7:10
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Lu8o0U-x5ffdO24Tq3hvd4sQpxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.123.0/24
195.66.104.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:eb:c1:b6:04:ed:3f:05:d8:14:c4:75:32:21:12:85:d9:f4:
55:ce:f8:bb:55:e0:47:78:fe:a4:25:b6:84:e3:65:71:6c:1d:
2a:fb:00:37:28:11:d8:6b:41:86:38:81:18:75:5d:b0:8c:eb:
3f:d6:ad:f6:3a:f5:f4:a1:4e:1f:1b:80:f5:ce:d1:54:18:59:
11:75:da:83:42:83:a0:f5:32:57:43:0f:5b:21:c5:d8:2e:86:
53:fb:69:89:70:c7:3a:3c:e5:c1:23:16:ed:05:3d:71:cd:47:
81:8d:9c:67:ed:38:ec:e4:e0:97:cd:76:12:fa:2d:9c:93:86:
44:73:1c:8b:a0:69:23:53:22:a3:06:53:6a:3b:08:2b:77:8d:
25:eb:57:e7:5b:97:93:3e:c4:49:c5:68:53:89:79:9e:74:3f:
8c:3b:63:0e:63:27:45:9e:1c:36:c4:8d:68:18:0d:ae:62:89:
62:2b:21:e2:23:7e:e6:6c:03:8d:b7:03:e8:ec:88:9e:02:f3:
5e:8e:a6:53:b2:16:68:32:28:b9:30:84:ae:cb:ad:88:8a:e2:
f6:47:d0:94:31:7b:ff:ee:c0:50:ce:c6:50:ad:85:91:94:07:
a1:85:76:5a:3c:2f:58:30:9a:8b:92:77:f4:49:08:e4:68:9f:
53:71:52:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org