Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/lUFpJgS_HiR127UA2QBJbBMv624.roa
File: lUFpJgS_HiR127UA2QBJbBMv624.roa (raw, json)
Hash identifier: DOnnupo1wge8aN2xf+hKDWbiu00OCjk3JdNqR13wtUk=
Subject key identifier: 95:41:69:26:04:BF:1E:24:75:DB:B5:00:D9:00:49:6C:13:2F:EB:6E
Certificate issuer: /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial: 01856BB7DA36740CEB0D241CC71307148B31
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/lUFpJgS_HiR127UA2QBJbBMv624.roa
Signing time: Sun 01 Jan 2023 05:04:49 +0000
ROA not before: Sun 01 Jan 2023 05:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47866
IP address blocks: 93.158.36.0/23 maxlen: 23
93.158.32.0/19 maxlen: 19
93.158.32.0/21 maxlen: 21
185.28.28.0/22 maxlen: 22
93.158.0.0/18 maxlen: 18
93.158.16.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b7:da:36:74:0c:eb:0d:24:1c:c7:13:07:14:8b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Validity
Not Before: Jan 1 05:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9541692604bf1e2475dbb500d900496c132feb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7c:01:16:ee:29:cc:66:14:c3:80:e0:dd:17:
6a:a7:94:1b:03:f2:6d:f0:8e:1b:8e:b4:c9:87:81:
0d:0e:2e:d7:5b:23:74:41:06:8c:cb:4d:88:39:78:
5a:82:d9:0e:f3:5a:4b:63:e2:6b:8d:d3:1d:fb:0d:
43:77:ec:fa:0c:d4:25:20:75:fa:e8:ed:84:d2:f0:
80:db:b2:01:3d:f4:3f:6e:11:12:c6:c6:6b:23:1e:
07:73:79:9a:ca:d1:8d:3b:e6:37:53:f4:3a:72:cf:
4d:2d:a6:d3:cc:30:6f:b0:20:25:d0:93:4c:5a:15:
88:1f:65:16:dd:83:6d:63:74:86:ab:0a:9d:c3:77:
6d:c0:90:53:6f:cd:36:d2:e4:a1:58:3f:c9:ba:55:
1b:e1:21:42:c4:e7:ae:06:d3:34:ba:4b:93:eb:ec:
1d:17:d3:a5:60:20:45:c6:89:95:98:75:a2:a1:01:
22:c4:40:f9:5f:e3:fa:ad:db:b6:d9:db:0b:3b:73:
61:2c:1c:82:80:70:3f:51:fd:32:64:4d:06:37:4b:
6a:26:23:de:91:c7:9f:b3:0c:55:da:30:ac:05:2e:
b4:16:44:a0:6f:b3:3c:f1:9b:48:ac:43:d8:b4:96:
90:2c:53:50:c8:a8:d0:c7:a3:36:08:8d:f2:f0:4f:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:41:69:26:04:BF:1E:24:75:DB:B5:00:D9:00:49:6C:13:2F:EB:6E
X509v3 Authority Key Identifier:
keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/lUFpJgS_HiR127UA2QBJbBMv624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.158.0.0/18
185.28.28.0/22
Signature Algorithm: sha256WithRSAEncryption
43:43:cb:f5:8e:04:f1:7b:62:d8:07:9e:9f:ec:62:cb:8c:ea:
7a:45:2b:69:fa:45:0c:bd:f6:fa:e3:47:9f:bf:e4:1d:d4:56:
c1:4b:6b:6b:a2:af:70:22:fc:72:3b:a9:84:a5:ab:91:2d:25:
57:91:08:23:33:4f:d7:f0:fe:7b:7b:df:9d:25:95:43:71:7c:
30:f7:03:fd:e4:79:61:97:05:9e:80:1b:05:41:1b:4e:71:b6:
a0:55:c8:c5:b3:71:56:73:76:7a:55:5d:44:b6:34:3e:2c:83:
2c:d5:cd:ca:a1:3b:36:94:17:6a:ae:0a:94:a2:b3:70:fe:7f:
44:30:18:e0:f6:3f:76:95:ba:03:fd:4c:70:15:60:b0:4b:c8:
eb:28:b8:db:dc:2c:be:f1:44:b9:7b:cb:a6:0d:95:9c:59:06:
56:72:91:d2:a9:d1:b2:14:0c:8e:56:9c:78:da:33:88:20:08:
63:58:c6:46:62:9d:90:58:53:8f:2d:e5:0b:8b:1b:c7:ba:34:
8e:f7:72:48:ce:c9:bd:cf:be:d1:78:44:4f:5a:7c:6d:83:11:
35:61:89:09:a3:35:b4:b0:b4:d8:82:e4:44:ba:9e:69:fa:c3:
23:4a:e1:20:72:cc:f4:16:1f:5c:80:9a:14:d4:0a:b1:70:36:
a6:81:b6:2b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVrt9o2dAzrDSQcxxMHFIsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzQwN2QyZTdiMmZmNGJjZWU2ZWExMGQ0MDg1MmVjZGNi
YzY5YjgwHhcNMjMwMTAxMDUwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTQxNjkyNjA0YmYxZTI0NzVkYmI1MDBkOTAwNDk2YzEzMmZlYjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXwBFu4pzGYUw4Dg3Rdqp5QbA/Jt
8I4bjrTJh4ENDi7XWyN0QQaMy02IOXhagtkO81pLY+JrjdMd+w1Dd+z6DNQlIHX6
6O2E0vCA27IBPfQ/bhESxsZrIx4Hc3maytGNO+Y3U/Q6cs9NLabTzDBvsCAl0JNM
WhWIH2UW3YNtY3SGqwqdw3dtwJBTb8020uShWD/JulUb4SFCxOeuBtM0ukuT6+wd
F9OlYCBFxomVmHWioQEixED5X+P6rdu22dsLO3NhLByCgHA/Uf0yZE0GN0tqJiPe
kcefswxV2jCsBS60FkSgb7M88ZtIrEPYtJaQLFNQyKjQx6M2CI3y8E+gwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJVBaSYEvx4kddu1ANkASWwTL+tuMB8GA1UdIwQY
MBaAFAV0B9Lnsv9LzubqENQIUuzcvGm4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhRSDB1ZXlfMHZPNXVvUTFBaFM3Tnk4YWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85MjlmMWItYjA0Ny00OGJmLWE4ZjEt
MWJlZDJlZTA2NWYwLzEvbFVGcEpnU19IaVIxMjdVQTJRQkpiQk12NjI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85MjlmMWItYjA0Ny00OGJmLWE4ZjEtMWJlZDJlZTA2NWYw
LzEvQlhRSDB1ZXlfMHZPNXVvUTFBaFM3Tnk4YWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGXZ4AAwQC
uRwcMA0GCSqGSIb3DQEBCwUAA4IBAQBDQ8v1jgTxe2LYB56f7GLLjOp6RStp+kUM
vfb640efv+Qd1FbBS2troq9wIvxyO6mEpauRLSVXkQgjM0/X8P57e9+dJZVDcXww
9wP95HlhlwWegBsFQRtOcbagVcjFs3FWc3Z6VV1EtjQ+LIMs1c3KoTs2lBdqrgqU
orNw/n9EMBjg9j92lboD/UxwFWCwS8jrKLjb3Cy+8US5e8umDZWcWQZWcpHSqdGy
FAyOVpx42jOIIAhjWMZGYp2QWFOPLeULixvHujSO93JIzsm9z77ReERPWnxtgxE1
YYkJozW0sLTYguREup5p+sMjSuEgcsz0Fh9cgJoU1AqxcDamgbYr
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:38 2024 by rpki-client on console-ams.rpki-client.org