Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/LZg8tzvuYV7u3Y4mLbFesqQkPcc.roa
File: LZg8tzvuYV7u3Y4mLbFesqQkPcc.roa (raw, json)
Hash identifier: yEUQ8yIlt7bDBGab4kmImYF6CGYxQ1rXK3MrYVilPMs=
Subject key identifier: 2D:98:3C:B7:3B:EE:61:5E:EE:DD:8E:26:2D:B1:5E:B2:A4:24:3D:C7
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 0185723103E33C8B37ECA5BF7E191D956E0E
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/LZg8tzvuYV7u3Y4mLbFesqQkPcc.roa
Signing time: Mon 02 Jan 2023 11:14:52 +0000
ROA not before: Mon 02 Jan 2023 11:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60397
IP address blocks: 37.152.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:03:e3:3c:8b:37:ec:a5:bf:7e:19:1d:95:6e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Jan 2 11:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d983cb73bee615eeedd8e262db15eb2a4243dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:73:26:b8:cf:09:b4:cf:45:44:88:aa:7a:c9:
cf:33:fb:26:8e:bd:29:f6:a3:ff:dc:e5:96:9c:71:
0d:b8:53:54:7d:46:c1:ae:0f:18:ca:7d:56:4c:a6:
db:3f:7e:e4:3f:0a:1e:f1:24:9d:24:d6:dd:af:98:
1b:87:7c:ac:40:ff:ec:e4:ed:ca:76:13:38:8c:7f:
db:41:67:04:fa:f7:c5:92:78:76:2d:95:c4:7e:79:
09:74:a7:d3:24:f5:5e:e8:b9:a8:96:cd:bb:23:68:
de:ad:fc:5b:af:cb:8c:57:b9:45:d5:7c:12:8e:fb:
c3:fe:3c:2d:d3:d8:63:64:1a:30:00:52:47:81:f7:
fa:63:77:f4:25:d2:dd:02:0d:6c:49:26:8b:8f:f8:
b3:b9:8b:b2:03:01:6e:bc:8d:3e:8d:d0:41:47:ca:
99:60:05:16:b0:a3:d4:e0:ef:2f:fd:13:3f:a4:20:
8e:0a:0a:19:34:9a:7c:98:1c:f7:5e:76:fa:be:b6:
62:9b:c9:f4:8f:16:8b:ea:b8:0c:8c:86:ba:bd:39:
3a:8e:98:d2:f8:d5:be:59:d1:fc:47:6f:06:38:ce:
7c:27:d1:c4:d3:b8:21:5e:2e:f0:95:2b:83:8f:e1:
c2:97:31:8e:21:cb:99:5f:ff:26:0e:1e:0a:8e:cc:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:98:3C:B7:3B:EE:61:5E:EE:DD:8E:26:2D:B1:5E:B2:A4:24:3D:C7
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/LZg8tzvuYV7u3Y4mLbFesqQkPcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.134.0/24
Signature Algorithm: sha256WithRSAEncryption
07:fc:fe:c5:a2:23:d3:b1:f3:37:f8:4c:2a:9f:bb:fe:44:c3:
8a:48:91:4f:6e:72:bc:dc:a1:4f:74:f3:8f:17:d4:ce:51:2a:
60:e0:f2:94:c4:f0:8e:36:80:0a:34:ae:52:42:03:7b:94:93:
09:67:58:67:2e:f9:b9:00:b3:6d:df:ab:bf:a4:10:fb:3c:71:
e2:a3:b5:c2:95:0a:c3:3a:cc:6a:7a:c5:13:90:e4:06:21:26:
31:c1:2c:12:ff:bc:86:f4:84:cb:90:ce:fb:aa:78:d9:73:83:
1e:a4:3a:87:04:67:97:d9:fa:3e:d2:15:22:d2:88:c9:a2:dd:
ce:51:ab:20:1d:06:bd:58:cb:32:cd:17:37:32:16:a3:d4:a4:
7e:9a:52:a2:78:f5:da:b2:c4:38:a5:11:bd:7d:74:96:3c:65:
77:1a:20:bb:e4:99:57:3a:fe:9d:f5:b7:8f:96:a2:7b:9a:32:
e3:42:54:5d:0d:94:36:a6:06:03:a5:53:c2:13:c1:fe:d8:4a:
dd:98:37:a1:69:b9:73:7c:74:76:52:71:02:dc:7c:e3:e1:a7:
7c:7b:c6:b4:2f:52:81:3e:35:05:c4:1f:88:a8:e7:bb:1a:68:
f2:45:a9:c7:a5:51:d8:dd:d7:2e:99:99:18:68:72:90:df:f0:
01:83:e4:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyMQPjPIs37KW/fhkdlW4OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1M2UzZjI4ZTY0N2U5MmFjOGE3MTBjMzA1YzJlMjFiNjIz
ZWRjMWMwHhcNMjMwMTAyMTExNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDk4M2NiNzNiZWU2MTVlZWVkZDhlMjYyZGIxNWViMmE0MjQzZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXMmuM8JtM9FRIiqesnPM/smjr0p
9qP/3OWWnHENuFNUfUbBrg8Yyn1WTKbbP37kPwoe8SSdJNbdr5gbh3ysQP/s5O3K
dhM4jH/bQWcE+vfFknh2LZXEfnkJdKfTJPVe6Lmols27I2jerfxbr8uMV7lF1XwS
jvvD/jwt09hjZBowAFJHgff6Y3f0JdLdAg1sSSaLj/izuYuyAwFuvI0+jdBBR8qZ
YAUWsKPU4O8v/RM/pCCOCgoZNJp8mBz3Xnb6vrZim8n0jxaL6rgMjIa6vTk6jpjS
+NW+WdH8R28GOM58J9HE07ghXi7wlSuDj+HClzGOIcuZX/8mDh4KjsxIDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC2YPLc77mFe7t2OJi2xXrKkJD3HMB8GA1UdIwQY
MBaAFDU+PyjmR+kqyKcQwwXC4htiPtwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQt
ZGFjYTI2ZGU2ZjdiLzEvTFpnOHR6dnVZVjd1M1k0bUxiRmVzcVFrUGNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQtZGFjYTI2ZGU2Zjdi
LzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJZiGMA0G
CSqGSIb3DQEBCwUAA4IBAQAH/P7FoiPTsfM3+Ewqn7v+RMOKSJFPbnK83KFPdPOP
F9TOUSpg4PKUxPCONoAKNK5SQgN7lJMJZ1hnLvm5ALNt36u/pBD7PHHio7XClQrD
OsxqesUTkOQGISYxwSwS/7yG9ITLkM77qnjZc4MepDqHBGeX2fo+0hUi0ojJot3O
UasgHQa9WMsyzRc3Mhaj1KR+mlKiePXassQ4pRG9fXSWPGV3GiC75JlXOv6d9beP
lqJ7mjLjQlRdDZQ2pgYDpVPCE8H+2ErdmDehablzfHR2UnEC3Hzj4ad8e8a0L1KB
PjUFxB+IqOe7GmjyRanHpVHY3dcumZkYaHKQ3/ABg+Tv
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:07 2024 by rpki-client on console-ams.rpki-client.org