Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LZAfUCmJBsGX_eIXJh9lvPDEJJM.roa
File: LZAfUCmJBsGX_eIXJh9lvPDEJJM.roa (raw, json)
Hash identifier: AYy45v89pY1g7ZIUzN5N4ahYY4g+xFabLLiqeNvx+qk=
Subject key identifier: 2D:90:1F:50:29:89:06:C1:97:FD:E2:17:26:1F:65:BC:F0:C4:24:93
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018AAC3775E640F1A8F7677D5E8C55CD07F6
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LZAfUCmJBsGX_eIXJh9lvPDEJJM.roa
Signing time: Tue 19 Sep 2023 06:53:50 +0000
ROA not before: Tue 19 Sep 2023 06:53:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 77.242.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:37:75:e6:40:f1:a8:f7:67:7d:5e:8c:55:cd:07:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 19 06:53:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d901f50298906c197fde217261f65bcf0c42493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:b1:0c:83:53:c4:66:62:bb:d1:1c:4e:bd:
07:63:5e:b2:e8:90:ef:b3:68:cf:75:1c:8d:8f:fd:
fc:c2:fe:87:56:0e:2e:e8:c3:79:b6:64:e8:91:e2:
c7:37:62:d5:81:75:b4:21:18:2a:da:95:a7:3c:e0:
73:a0:58:25:ef:88:80:a2:ad:9a:a9:4f:ac:bf:9f:
45:0d:09:52:c8:88:92:61:ee:3e:ef:11:1a:af:0b:
75:d0:c4:6d:57:d2:28:ba:d7:87:e8:dd:bc:d7:46:
5b:4a:a8:19:57:a6:dc:18:11:79:55:e9:88:c3:71:
7e:bf:9b:90:6d:8f:88:68:17:a2:fe:3f:fd:db:f1:
ef:b7:77:58:5f:d3:c3:2d:d8:a6:39:ab:1f:76:58:
eb:76:10:16:d4:be:29:92:bc:7c:30:f4:ae:ca:f2:
05:69:d0:d2:cb:b7:b6:1c:b3:aa:fe:e6:85:5c:65:
2c:34:83:6c:fd:51:4a:d0:4c:3b:31:da:cb:8c:1c:
a3:03:a1:3b:0c:af:48:05:e9:b0:11:fb:27:4d:e3:
41:62:0e:72:89:e8:41:25:dd:93:d5:99:63:3f:ac:
2f:05:ca:a3:7a:f2:9b:77:9e:5d:7f:61:18:d5:14:
a9:df:55:21:cf:a0:a8:7e:6a:5c:47:23:b9:9b:4f:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:90:1F:50:29:89:06:C1:97:FD:E2:17:26:1F:65:BC:F0:C4:24:93
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LZAfUCmJBsGX_eIXJh9lvPDEJJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.157.0/24
Signature Algorithm: sha256WithRSAEncryption
52:28:9c:bf:dd:b4:41:63:39:a0:af:b8:e0:6d:82:91:1e:17:
d2:42:bd:af:18:e8:41:f5:93:2a:e2:6c:36:b9:b4:3d:f1:a6:
45:d4:51:3c:36:d8:2f:49:98:3e:cc:01:8a:a7:56:ab:cc:14:
9a:d1:9e:cc:6e:3e:f7:c6:0f:e0:78:f3:16:d6:cc:9d:7a:7f:
19:4e:fe:e7:a3:01:da:f2:1d:68:57:34:ea:71:3e:f5:ac:b6:
71:75:9a:c2:1e:14:cf:4f:a6:2a:3e:32:24:b7:03:4b:63:a5:
0d:ad:52:fc:f4:02:b0:95:05:65:88:34:37:ba:83:f2:d9:59:
eb:81:bb:ce:4f:39:41:06:ed:32:c5:22:89:4f:6b:7b:b6:b5:
d1:4b:23:fc:b9:69:9f:13:0c:26:27:99:58:3c:dc:ab:8c:97:
72:5a:f6:d4:06:b8:cf:ea:64:cb:72:85:79:d9:85:53:28:e1:
09:65:2c:ea:25:73:25:5a:0c:1a:5b:31:a2:0c:e6:83:9e:ba:
f2:69:4e:1a:77:c2:8d:62:69:ce:0d:60:77:ef:b4:4b:3f:e2:
8b:61:86:70:d2:60:84:6f:6c:12:bf:e2:e8:37:35:a6:e3:38:
3b:46:74:4a:0f:d3:3a:70:38:da:b5:74:f3:96:59:54:94:36:
4e:b6:eb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 07:51:41 2023 by rpki-client on console-ams.rpki-client.org