Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/LQ97-Kr1CZkVJIv9tX4OXX24ShI.roa
File: LQ97-Kr1CZkVJIv9tX4OXX24ShI.roa (raw, json)
Hash identifier: 3qLgXQ9tmBZ+G9KXDrv6H9/ub6nl3gZGlBwEgijYoDM=
Subject key identifier: 2D:0F:7B:F8:AA:F5:09:99:15:24:8B:FD:B5:7E:0E:5D:7D:B8:4A:12
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0187D69FFC1F92E59D272B57F54900B49363
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/LQ97-Kr1CZkVJIv9tX4OXX24ShI.roa
Signing time: Mon 01 May 2023 09:23:41 +0000
ROA not before: Mon 01 May 2023 09:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 80.93.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Jun 2023 08:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d6:9f:fc:1f:92:e5:9d:27:2b:57:f5:49:00:b4:93:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: May 1 09:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d0f7bf8aaf5099915248bfdb57e0e5d7db84a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:02:03:0a:71:05:7d:da:0f:43:c3:e8:64:
f3:04:61:64:6f:ae:0a:f7:77:90:d2:67:d3:0f:39:
7a:ab:59:89:20:48:2c:a5:44:d7:a8:50:6e:f0:31:
c8:4b:45:08:1a:a3:7e:d1:0f:20:6f:81:71:df:f4:
bb:ff:81:c4:cd:16:62:2d:d0:d2:59:f4:74:ec:3f:
59:95:94:fa:33:aa:45:2a:94:2c:8f:1e:f7:99:37:
f8:b0:d4:3b:02:a8:9b:14:57:f5:90:b1:15:8f:04:
5b:34:63:58:6c:22:b7:83:d6:37:7a:5f:00:ff:0a:
d1:ca:ce:b8:a6:b4:51:2b:f7:4a:90:65:c9:78:c0:
84:06:41:37:f5:74:27:6c:f9:9e:ef:d6:f5:a5:d1:
a5:31:6b:12:a0:b4:2e:1a:97:d6:16:40:30:8e:ac:
44:44:90:65:07:ff:e1:8e:02:fa:db:33:17:25:11:
b4:99:21:5a:53:6a:32:be:f7:49:6f:f4:92:86:da:
6e:b0:ab:5d:b7:f6:ec:ba:0d:75:4a:10:43:15:1a:
8d:91:7e:b9:a7:7d:1b:8d:ea:32:0c:1e:de:29:0b:
59:56:6f:6c:8b:a8:11:f5:51:6c:7f:ed:97:d2:8e:
f1:f8:ab:65:4b:72:e2:03:32:b5:12:6d:02:7a:68:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0F:7B:F8:AA:F5:09:99:15:24:8B:FD:B5:7E:0E:5D:7D:B8:4A:12
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/LQ97-Kr1CZkVJIv9tX4OXX24ShI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:13:54:de:16:28:dd:af:48:51:5b:08:a4:0a:46:6b:a7:0d:
94:8a:da:d7:93:e8:02:37:6e:12:d4:74:a4:51:7c:f1:8c:14:
df:e8:e6:f2:c6:12:45:04:f1:7b:08:83:50:b4:18:40:f4:0f:
27:fc:17:cb:ee:68:24:c6:f8:3b:e2:ae:76:da:2a:ef:c9:a0:
75:14:7c:bd:80:07:ee:65:df:b4:44:a9:4e:e4:77:0a:d9:ae:
10:5b:9a:c5:ef:9d:2e:05:b6:4a:2d:cf:2e:c0:81:cb:d5:ed:
a3:82:06:92:90:8d:13:a6:1d:3b:7d:d8:3a:32:32:fb:96:a1:
20:46:d4:86:e3:08:82:a4:3c:00:e1:36:c9:fa:dd:e5:31:9b:
3d:7d:b8:df:80:cb:37:94:9f:34:e8:91:7d:1d:54:22:e1:2e:
6b:8f:58:72:f5:c4:10:9a:e2:a2:35:06:97:86:84:95:d6:32:
f9:59:dd:63:f1:52:02:b4:e7:72:4b:d6:d7:cd:e6:2d:e0:8b:
b3:1b:72:1b:dd:5f:af:db:6b:2e:28:45:c2:0b:7d:f1:0b:08:
34:d0:b5:71:e2:5d:de:2b:e5:f3:40:1e:14:c5:d5:19:7c:01:
b6:b5:9d:53:c6:6c:44:8a:f5:30:c1:84:d5:0e:29:c6:6f:48:
6a:64:71:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfWn/wfkuWdJytX9UkAtJNjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjMwNTAxMDkyMzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDBmN2JmOGFhZjUwOTk5MTUyNDhiZmRiNTdlMGU1ZDdkYjg0YTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+ECAwpxBX3aD0PD6GTzBGFkb64K
93eQ0mfTDzl6q1mJIEgspUTXqFBu8DHIS0UIGqN+0Q8gb4Fx3/S7/4HEzRZiLdDS
WfR07D9ZlZT6M6pFKpQsjx73mTf4sNQ7AqibFFf1kLEVjwRbNGNYbCK3g9Y3el8A
/wrRys64prRRK/dKkGXJeMCEBkE39XQnbPme79b1pdGlMWsSoLQuGpfWFkAwjqxE
RJBlB//hjgL62zMXJRG0mSFaU2oyvvdJb/SShtpusKtdt/bsug11ShBDFRqNkX65
p30bjeoyDB7eKQtZVm9si6gR9VFsf+2X0o7x+KtlS3LiAzK1Em0CemjDZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC0Pe/iq9QmZFSSL/bV+Dl19uEoSMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvTFE5Ny1LcjFDWmtWSkl2OXRYNE9YWDI0U2hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF3LMA0G
CSqGSIb3DQEBCwUAA4IBAQAuE1TeFijdr0hRWwikCkZrpw2UitrXk+gCN24S1HSk
UXzxjBTf6ObyxhJFBPF7CINQtBhA9A8n/BfL7mgkxvg74q522irvyaB1FHy9gAfu
Zd+0RKlO5HcK2a4QW5rF750uBbZKLc8uwIHL1e2jggaSkI0Tph07fdg6MjL7lqEg
RtSG4wiCpDwA4TbJ+t3lMZs9fbjfgMs3lJ806JF9HVQi4S5rj1hy9cQQmuKiNQaX
hoSV1jL5Wd1j8VICtOdyS9bXzeYt4IuzG3Ib3V+v22suKEXCC33xCwg00LVx4l3e
K+XzQB4UxdUZfAG2tZ1TxmxEivUwwYTVDinGb0hqZHHF
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org