Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/lEOVQ_klbf3mZ_67vnEFvNuM9g0.roa
File: lEOVQ_klbf3mZ_67vnEFvNuM9g0.roa (raw, json)
Hash identifier: 9xAVqZO88Ofbuby779mC45BzA5GDekd1bQJr87Ve5m4=
Subject key identifier: 94:43:95:43:F9:25:6D:FD:E6:67:FE:BB:BE:71:05:BC:DB:8C:F6:0D
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018ACB84DFDE1465F8E3C65841F9FF9F2DFF
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/lEOVQ_klbf3mZ_67vnEFvNuM9g0.roa
Signing time: Mon 25 Sep 2023 08:46:37 +0000
ROA not before: Mon 25 Sep 2023 08:46:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213220
IP address blocks: 45.8.209.0/24 maxlen: 24
213.108.196.0/24 maxlen: 24
2a0d:2dc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 03 Oct 2023 23:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cb:84:df:de:14:65:f8:e3:c6:58:41:f9:ff:9f:2d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 25 08:46:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94439543f9256dfde667febbbe7105bcdb8cf60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:11:e8:ef:a3:90:ac:a1:8a:dd:a4:b2:a8:4a:
c3:7a:ad:b6:1a:02:eb:ec:a9:3a:3f:ab:b9:51:71:
62:68:51:83:87:38:a5:46:01:b0:75:4f:43:99:f7:
d3:ef:15:20:42:b4:0f:e6:0d:e4:7d:b3:76:0d:b8:
76:f8:e6:13:24:a3:6d:3a:dc:35:6f:57:86:a5:88:
86:c1:20:51:ca:d4:a1:0a:63:e6:a4:b0:47:a7:89:
51:3a:cb:68:7e:f6:37:97:ad:9d:ad:2c:09:4a:77:
f0:40:9b:7e:78:e1:b3:eb:b8:04:9f:c8:0b:0c:43:
6d:ef:b4:4a:15:fd:67:50:91:9d:66:90:7c:24:23:
1d:2c:e9:6a:6f:98:7c:1b:0f:5c:7c:45:4a:09:f7:
44:9d:8b:c5:0b:bc:ab:f3:80:be:f9:fc:0b:97:31:
70:42:7c:55:e2:c8:c5:dd:3e:51:23:33:f9:98:19:
5c:c7:4e:71:c2:5f:71:3e:b5:f2:5e:7b:3c:d1:4b:
ee:e0:1e:09:f8:f7:bb:cf:b4:9d:07:6f:76:a8:0a:
5a:e5:b9:22:4b:79:3f:77:00:36:90:2d:b2:0b:7d:
c7:52:7c:b1:b2:24:2f:ef:19:8c:dd:73:95:a9:ab:
92:3b:75:7d:84:f4:4a:8a:28:7f:7d:0d:4b:95:81:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:43:95:43:F9:25:6D:FD:E6:67:FE:BB:BE:71:05:BC:DB:8C:F6:0D
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/lEOVQ_klbf3mZ_67vnEFvNuM9g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.209.0/24
213.108.196.0/24
IPv6:
2a0d:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:e1:19:12:0e:fb:bd:f8:4d:36:43:2f:a0:54:9d:82:bb:82:
bc:c1:b8:af:73:46:73:72:56:06:46:ea:cc:d0:a9:1d:9b:02:
07:fc:68:87:50:46:5d:3c:19:61:73:24:33:bb:55:58:c1:0f:
17:bf:11:1d:2b:2b:95:60:b7:0c:11:79:e0:63:1c:cf:96:d6:
2f:b2:fd:cb:e1:f4:19:ae:14:20:24:7a:89:cd:ab:ed:00:2b:
03:70:f3:9d:48:55:38:6a:3f:70:69:c2:67:41:5c:2b:38:bb:
19:af:74:95:03:6d:92:fd:fa:3b:c8:44:ee:e2:24:2f:37:6b:
d8:57:3c:f7:ff:6c:bc:c4:15:3f:a6:94:87:2f:d7:c9:cf:c4:
00:bb:79:f2:8c:bc:61:ba:71:ce:dc:a1:39:60:0d:cc:6c:96:
45:48:94:e5:13:06:d9:ca:58:ac:1e:15:59:e4:f5:74:c0:5c:
88:c2:18:f1:7e:a5:fc:81:11:74:eb:73:b4:9a:2e:c6:8b:4f:
2d:1b:8e:34:59:a1:f2:01:0d:72:ca:fd:1a:9c:f2:b7:73:b2:
f5:32:c0:cb:1b:02:59:22:a0:54:70:74:5d:81:6d:7d:59:60:
f2:ce:3a:9b:74:85:60:3d:e5:3a:e0:80:c3:cf:bf:75:ca:2a:
f2:7d:54:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org