Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lbx9kPPa1CstJJKMOePazGKMKkI.roa
File: lbx9kPPa1CstJJKMOePazGKMKkI.roa (raw, json)
Hash identifier: ak3bhrvsuSD/kuuBiYVcpHf/lA994gO4S9K5Kxg/z9o=
Subject key identifier: 95:BC:7D:90:F3:DA:D4:2B:2D:24:92:8C:39:E3:DA:CC:62:8C:2A:42
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C5416E3D4FAE30AA12AF9E172DBCA63
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lbx9kPPa1CstJJKMOePazGKMKkI.roa
Signing time: Sun 01 Jan 2023 07:55:28 +0000
ROA not before: Sun 01 Jan 2023 07:55:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212396
IP address blocks: 45.85.194.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:16:e3:d4:fa:e3:0a:a1:2a:f9:e1:72:db:ca:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95bc7d90f3dad42b2d24928c39e3dacc628c2a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ff:0b:f0:35:2d:d1:f0:40:b6:27:bd:b5:34:
b3:64:7c:1d:ad:08:4c:bc:17:9a:c6:b7:a3:2c:f9:
16:0a:46:c1:a4:46:91:65:57:3c:b4:83:c3:c3:03:
d5:f9:6c:81:6f:05:bd:73:25:74:dd:7f:28:90:44:
01:f0:39:9e:58:37:b3:34:3f:58:6e:2e:eb:42:a5:
91:a6:35:6d:bc:54:50:11:54:19:88:b5:24:26:bc:
df:f1:ef:39:66:dd:01:29:a3:29:3e:69:74:3f:4e:
31:ae:5f:ca:a6:9f:d7:9a:7b:31:f6:92:98:42:5a:
1d:80:c0:8f:88:4a:78:27:76:bf:92:6d:5b:38:41:
a0:8b:a8:da:e1:4b:19:ca:a5:09:84:92:bc:bb:56:
b4:12:38:b7:65:ef:05:94:e3:f6:75:6f:3f:9b:d1:
83:7b:eb:2a:d6:67:d6:0e:f0:83:8f:fb:40:b7:32:
d8:db:49:48:58:6f:84:df:8e:87:a9:37:64:b2:54:
e7:51:c7:5f:54:d9:7b:e8:53:1f:41:ca:de:17:0c:
b8:66:79:8d:f4:0a:16:6e:b0:b9:c5:49:e0:d8:e2:
bb:b1:0a:c5:9d:13:35:cf:8b:d6:7c:1c:89:b4:c4:
aa:94:40:eb:5e:f2:41:eb:f3:10:c5:f9:fc:43:bf:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BC:7D:90:F3:DA:D4:2B:2D:24:92:8C:39:E3:DA:CC:62:8C:2A:42
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lbx9kPPa1CstJJKMOePazGKMKkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.194.0/24
Signature Algorithm: sha256WithRSAEncryption
78:7b:e5:c2:65:cf:4b:21:6f:94:77:98:bd:bf:fa:9f:b8:66:
0c:db:ab:64:e4:54:82:52:be:aa:a6:1b:03:ea:9c:f3:d5:dc:
01:79:0e:29:c7:d7:a1:2c:4a:40:6d:e6:ee:f5:46:03:6a:ef:
9f:b1:1e:7b:5f:59:17:ec:14:22:42:4b:6e:8c:e0:31:ad:d7:
c8:31:c9:2d:80:ed:b2:32:d1:68:77:d5:d7:75:df:08:a3:47:
6b:ff:bd:7d:f5:7d:11:ee:04:2a:a7:3a:4b:e2:af:0b:e3:16:
9b:92:33:da:f4:71:91:23:28:0d:72:53:4b:7b:1c:60:e4:02:
fb:5f:45:91:34:9d:de:6e:14:30:cc:1d:2b:d6:5f:b7:9b:dd:
22:ba:0b:78:7e:a0:b0:9d:0f:63:22:d2:6c:15:88:da:91:63:
f1:b7:0c:9e:ce:8e:a7:80:23:4f:61:22:22:de:71:35:e9:89:
83:f1:be:84:6d:2e:d6:1b:08:ba:09:7d:44:dd:c6:99:96:a0:
d7:a3:c1:19:cd:6b:f4:ec:99:87:7d:f6:9c:12:c5:53:ac:c8:
41:d3:b0:b9:53:ac:4c:39:fc:70:36:3f:c0:59:cd:42:65:a5:
c9:cd:56:c7:cb:ff:60:7e:ac:cb:12:55:db:89:9c:a6:9c:52:
38:1a:6f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:00 2024 by rpki-client on console-ams.rpki-client.org