Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/LJ5Du8bH_YJN7pLoXlgWuy4wMhs.roa
File: LJ5Du8bH_YJN7pLoXlgWuy4wMhs.roa (raw, json)
Hash identifier: MuQ9ooTZZ99is0YfRxm0dL7gya9I3ixBMHVEZH0MR+k=
Subject key identifier: 2C:9E:43:BB:C6:C7:FD:82:4D:EE:92:E8:5E:58:16:BB:2E:30:32:1B
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 0186919261BA7E32CC1209FDCABAFD094E9C
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/LJ5Du8bH_YJN7pLoXlgWuy4wMhs.roa
Signing time: Mon 27 Feb 2023 06:32:14 +0000
ROA not before: Mon 27 Feb 2023 06:32:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 45.139.56.0/22 maxlen: 24
45.139.64.0/22 maxlen: 24
45.83.124.0/22 maxlen: 24
45.139.36.0/22 maxlen: 24
45.83.144.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:91:92:61:ba:7e:32:cc:12:09:fd:ca:ba:fd:09:4e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Feb 27 06:32:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c9e43bbc6c7fd824dee92e85e5816bb2e30321b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:90:51:c5:59:23:41:dd:01:e0:ce:2e:2d:
bd:06:b9:cf:34:dc:6c:7f:52:21:a7:dc:41:1d:3f:
5b:97:4c:68:39:15:89:1a:b6:04:f4:76:7e:33:29:
cd:1e:4a:b4:a1:2a:b7:55:13:a5:e5:9b:e7:a5:da:
ff:06:bc:3e:95:68:80:d8:b7:c1:b4:cf:ef:e5:16:
ea:56:af:32:30:8e:eb:e3:ac:53:61:eb:db:27:e9:
97:1d:a3:31:1e:55:c6:6b:59:a6:54:a3:88:22:71:
ad:fc:c1:e0:71:82:3c:4e:c0:2b:44:09:9e:73:ea:
a1:a1:c4:86:ec:6e:3e:b3:56:60:d5:e2:0c:57:fd:
4a:05:c7:30:75:06:13:b5:50:e3:df:bb:33:07:38:
f0:e9:a5:07:ea:30:f1:30:5f:45:15:06:4a:21:d5:
fe:01:68:34:4a:3c:e0:1b:f9:2b:d0:4a:bc:94:c5:
a7:65:fa:3f:70:da:09:4e:c8:d5:f6:a0:9a:10:97:
82:6a:44:7c:5b:a0:5a:81:91:84:9d:e0:20:9f:c9:
b1:36:b0:3d:78:00:89:07:8c:bb:d1:b3:ef:08:4b:
fb:08:69:ab:3a:13:c4:89:d7:c0:1b:a8:24:4e:88:
3c:7b:8f:7c:3b:91:77:42:c3:97:44:59:0d:0f:6b:
cf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9E:43:BB:C6:C7:FD:82:4D:EE:92:E8:5E:58:16:BB:2E:30:32:1B
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/LJ5Du8bH_YJN7pLoXlgWuy4wMhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.124.0/22
45.83.144.0/22
45.139.36.0/22
45.139.56.0/22
45.139.64.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:ad:b3:7b:e0:6d:61:4c:18:15:30:2c:08:55:52:a7:3b:e2:
a2:fe:ad:88:ca:9e:bc:38:4f:ec:45:b4:37:fe:0e:14:7e:f9:
25:91:1f:c3:b4:87:fc:c7:3f:22:06:c7:cd:22:14:38:36:cc:
25:f8:60:73:30:10:45:0a:e9:ae:e2:72:c2:bf:f5:40:ae:cc:
45:16:28:22:69:19:dd:25:5a:6f:59:51:aa:13:92:62:14:d3:
7c:41:87:d8:56:25:20:7e:99:56:ac:30:ea:27:30:93:ae:d9:
a5:68:a2:57:d6:66:7e:97:cb:0d:8b:5d:78:41:71:a0:49:a4:
7f:6f:d6:43:29:35:66:01:95:39:9e:68:33:d0:a3:56:67:08:
a0:19:48:a2:e1:0e:52:21:c3:61:f5:14:f8:ab:7e:32:8e:9d:
0b:5e:47:ec:3c:ec:91:f2:7e:00:73:b3:28:51:73:0b:72:a9:
d5:de:c1:96:be:11:0e:d6:ba:a3:76:54:9e:eb:13:38:67:21:
40:5e:c1:4e:aa:6b:1a:0e:28:ea:90:9d:f0:e1:9e:76:5e:bf:
33:71:20:ad:0a:41:36:f4:b5:93:5b:d4:7c:37:15:79:e0:20:
00:61:8a:20:a2:31:5b:a4:95:73:7c:98:1a:59:d0:10:97:95:
0a:f6:56:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 12:58:57 2023 by rpki-client on console-ams.rpki-client.org