Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-LSD_cdyW8e2XrTE_v-czf8onTk.roa
File: 1-LSD_cdyW8e2XrTE_v-czf8onTk.roa (raw, json)
Hash identifier: hw8M4Mn5M6ogfETbUCfuLkjLsgV5XtbFozOf/tbXCRs=
Subject key identifier: F8:B4:83:FD:C7:72:5B:C7:B6:5E:B4:C4:FE:FF:9C:CD:FF:28:9D:39
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188BE5E7ECDC7E92A9AD2B4BE2B663DA291
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-LSD_cdyW8e2XrTE_v-czf8onTk.roa
Signing time: Thu 15 Jun 2023 09:24:03 +0000
ROA not before: Thu 15 Jun 2023 09:24:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 45.147.227.0/24 maxlen: 24
185.251.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jul 2023 15:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:5e:7e:cd:c7:e9:2a:9a:d2:b4:be:2b:66:3d:a2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 15 09:24:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8b483fdc7725bc7b65eb4c4feff9ccdff289d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bc:55:3b:58:ea:22:d7:6b:fe:15:b9:bb:dc:
14:c5:08:7d:45:f8:27:85:1c:43:10:1b:85:74:47:
0d:f5:79:89:b2:e2:20:10:f4:9c:76:77:e2:38:b6:
ae:b8:a0:c7:d4:1c:fa:9d:13:86:cb:cd:e1:47:cd:
ac:00:4f:fd:a2:16:aa:12:78:1c:d1:39:01:1c:e9:
cf:7d:67:e5:e8:d6:6c:cb:ff:94:5c:89:ee:e1:ed:
5f:3e:fa:16:55:9d:de:a6:86:40:82:9d:14:f7:0a:
d9:e4:e9:65:a1:1b:75:1f:7e:44:0e:b1:08:0a:05:
ca:63:91:c0:73:42:05:71:f6:de:80:16:29:a7:f0:
81:e9:8f:91:22:7a:11:f4:b4:31:e1:16:12:09:b8:
28:4a:70:bc:10:47:bf:b9:b3:84:f2:c8:66:b8:ad:
04:6d:d1:21:71:a2:f8:87:91:3d:9a:db:f0:76:d0:
ba:02:ee:07:52:76:df:10:c3:b5:3b:14:a0:eb:a4:
50:52:65:05:56:67:3f:0a:89:56:a0:2c:ab:f1:48:
4e:8b:f1:8e:e8:d3:f7:2b:fd:d7:21:75:82:98:41:
86:67:e4:64:e3:32:54:b5:d9:d4:2d:1e:b8:28:51:
34:c9:49:a4:10:f2:94:7b:19:b8:4b:33:2a:ed:19:
90:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B4:83:FD:C7:72:5B:C7:B6:5E:B4:C4:FE:FF:9C:CD:FF:28:9D:39
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-LSD_cdyW8e2XrTE_v-czf8onTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.227.0/24
185.251.228.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d6:94:db:9c:80:f2:5c:b8:87:93:8d:db:cb:30:a2:ec:96:
a8:76:51:8d:96:fb:31:b1:2f:08:99:b2:ee:00:e5:21:03:1a:
17:91:ba:5e:ef:a7:e3:00:d7:3d:2d:3e:c2:af:bf:3a:cb:8e:
35:a2:94:ff:b0:dc:af:90:73:ed:2e:42:be:5c:cf:38:67:ba:
66:1f:43:6f:78:ed:06:66:1b:ca:d6:dc:f8:9f:59:16:11:54:
91:6f:75:40:56:dd:ed:e5:49:0f:b3:e6:91:a8:2e:26:68:cc:
a5:3d:ed:a1:30:13:1a:fc:d3:68:a6:11:cd:3b:c5:32:74:be:
58:a9:34:b9:cd:cb:8e:7b:ef:e5:e1:38:51:1a:c6:73:38:42:
d7:0f:59:cf:02:e3:96:6a:79:25:fa:3c:83:ef:fd:43:11:f3:
47:21:1e:ac:15:00:44:d9:32:48:da:9a:b3:e7:95:20:d9:2e:
e1:e7:18:90:31:0a:a8:6d:2b:07:d2:b3:06:97:99:4b:64:ae:
ec:4d:f5:16:f3:4e:eb:6d:67:d3:da:af:4f:c7:27:10:cf:fc:
4b:65:e4:82:b2:5c:85:40:8f:8e:4a:bc:96:e0:24:14:d4:1c:
8a:18:bc:31:22:10:bc:90:ce:6d:ff:62:d4:40:96:56:79:23:
f1:c1:21:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org