Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/LzVja9mnLjivDFemlGPdbzlY1QQ.roa
File: LzVja9mnLjivDFemlGPdbzlY1QQ.roa (raw, json)
Hash identifier: 2FiabA9ClNHvziW5wxBGKzST32DBD/OInK6M32TOLPE=
Subject key identifier: 2F:35:63:6B:D9:A7:2E:38:AF:0C:57:A6:94:63:DD:6F:39:58:D5:04
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 018DD4B108FA42649FE2C26C1366DC7D28B4
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/LzVja9mnLjivDFemlGPdbzlY1QQ.roa
Signing time: Fri 23 Feb 2024 06:39:48 +0000
ROA not before: Fri 23 Feb 2024 06:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 146.0.0.0/24 maxlen: 24
146.0.1.0/24 maxlen: 24
146.0.2.0/24 maxlen: 24
146.0.5.0/24 maxlen: 24
146.0.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 08:55:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d4:b1:08:fa:42:64:9f:e2:c2:6c:13:66:dc:7d:28:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Feb 23 06:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f35636bd9a72e38af0c57a69463dd6f3958d504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:65:7e:ad:2b:04:cc:84:a8:70:34:ca:c5:
32:af:8e:c4:87:be:33:68:8a:81:37:98:72:ec:27:
2d:f5:04:3a:8b:39:d6:c3:50:99:7f:b2:bb:65:ba:
de:e1:07:9a:d4:b6:f6:db:73:01:83:2a:f6:75:dc:
9f:ee:56:94:26:68:59:61:e3:c0:38:7b:90:19:8a:
7b:da:30:65:30:14:ca:f9:3a:52:b1:9b:63:62:fb:
8c:46:d2:2c:1f:95:20:e5:8d:77:0f:c1:a8:f4:fd:
81:1f:40:e9:c2:f7:58:8e:91:1b:06:bf:1d:3e:93:
7f:e9:6f:de:6d:bd:05:5a:25:b1:65:98:f3:e6:aa:
07:5e:52:c6:fe:cb:c8:3b:ed:32:57:3a:e7:f8:f4:
e2:fe:7d:f2:68:e0:6c:68:8d:2d:ba:7e:38:63:6d:
8a:14:0d:53:d6:ec:94:a4:b3:7a:05:c5:10:e7:e4:
53:7f:d9:b9:c2:a0:e4:60:c7:50:b6:29:5b:bc:e4:
29:bc:64:c1:97:36:1d:99:28:91:8d:0d:77:37:e1:
0f:9b:ad:9e:01:0d:f1:4b:f3:c1:22:80:0c:96:2f:
58:76:0c:9f:bd:ac:67:7d:d9:9f:22:18:9a:8e:00:
77:6c:60:7d:4d:23:fd:15:cd:2f:c0:e9:d1:dd:69:
c8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:35:63:6B:D9:A7:2E:38:AF:0C:57:A6:94:63:DD:6F:39:58:D5:04
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/LzVja9mnLjivDFemlGPdbzlY1QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.0.0-146.0.2.255
146.0.5.0/24
146.0.15.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b7:a7:c3:f4:01:29:d6:98:0d:a4:4c:c1:50:06:c3:df:a0:
c2:0e:5b:b6:88:c0:59:4b:07:6a:8c:12:eb:fd:d1:82:2b:50:
6b:8d:c1:92:d0:37:7b:94:4f:f9:0d:36:4c:60:db:bc:b2:58:
2d:72:bf:6a:cd:58:97:74:cc:c5:ae:7f:d1:ea:ac:31:1b:b9:
d3:c8:eb:a2:13:fe:21:20:ac:ce:66:cf:3c:1a:52:3f:8c:8f:
e1:19:06:a8:fd:04:f3:18:3a:4f:bb:56:ce:35:cf:a3:88:9e:
d1:8a:e8:14:ab:fb:1a:d7:e0:40:5e:95:67:5e:e3:21:15:1f:
57:b7:44:54:c5:41:3b:07:06:6c:ef:fb:82:5d:a9:59:5f:21:
79:9d:44:86:85:0b:7f:38:86:f7:30:51:af:a2:59:51:57:78:
5d:c5:ce:ed:bd:04:e5:bc:33:e3:ef:4a:e3:db:33:08:e1:52:
21:b6:cc:5a:43:47:5d:2e:7b:9b:ca:5f:1c:03:90:d8:0f:5c:
80:ef:66:e7:f2:98:40:38:39:83:72:6e:65:26:a8:52:f4:f9:
8a:37:e6:b8:b2:07:00:1d:12:86:83:f7:4d:b3:83:f9:fd:da:
8b:85:b3:69:8d:d7:e9:5b:28:d8:27:57:32:33:3c:d3:50:fd:
d0:44:ff:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:25 2024 by rpki-client on console-ams.rpki-client.org