Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LA-qfAe7sgCE0759tHvQmg2lFt4.roa
File: LA-qfAe7sgCE0759tHvQmg2lFt4.roa (raw, json)
Hash identifier: 2JQoR5x9WRmgHfU6BLgWdSo8KCplx63+cBpkv5oZQ0o=
Subject key identifier: 2C:0F:AA:7C:07:BB:B2:00:84:D3:BE:7D:B4:7B:D0:9A:0D:A5:16:DE
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CDF44D53CA8A58DC35E16835F29CC
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LA-qfAe7sgCE0759tHvQmg2lFt4.roa
Signing time: Mon 02 Jan 2023 03:35:58 +0000
ROA not before: Mon 02 Jan 2023 03:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38985
IP address blocks: 87.103.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:df:44:d5:3c:a8:a5:8d:c3:5e:16:83:5f:29:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c0faa7c07bbb20084d3be7db47bd09a0da516de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a4:71:b3:8c:97:44:8f:d8:bd:15:2e:ef:df:
32:6e:e0:b9:2e:32:bc:31:f8:f7:b2:c0:5d:f0:72:
3d:31:d6:97:ad:30:f5:fe:e3:b0:72:e2:c7:4d:1a:
95:6d:fa:81:1e:4a:9d:0d:92:a3:02:29:a6:2d:69:
82:28:6a:46:e6:cf:4c:8c:d6:7b:fc:1b:45:3a:6b:
f9:d5:c5:22:dd:ca:66:ac:62:e8:0d:a0:2b:34:96:
60:b4:81:88:c0:7b:d0:d8:d1:1b:9a:94:ac:60:29:
2c:2f:f8:a5:65:92:88:cc:92:c1:65:4f:9f:91:8c:
4c:19:e6:15:e0:76:3a:06:08:70:2b:22:94:48:67:
db:26:a9:aa:90:ab:95:6e:e8:55:32:fc:3f:b5:ec:
6d:70:f0:28:cb:f3:70:d2:b1:39:36:55:36:6b:dd:
eb:27:f7:55:03:08:d2:5f:0b:fe:49:fd:0c:66:87:
aa:07:8e:00:73:1d:a2:fc:5b:27:9c:99:c8:ee:7d:
10:34:c8:a1:35:4f:9b:70:cd:0f:b1:94:15:10:0c:
1f:57:fc:e0:6a:d7:f4:19:f7:f7:a8:ce:a4:f0:b4:
15:b4:c6:94:5f:8d:bd:fd:d7:43:7b:a3:27:a9:1f:
67:23:86:d1:46:9a:59:7d:d3:da:08:0e:10:94:70:
a1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0F:AA:7C:07:BB:B2:00:84:D3:BE:7D:B4:7B:D0:9A:0D:A5:16:DE
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/LA-qfAe7sgCE0759tHvQmg2lFt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.103.168.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:35:b6:1e:ad:25:73:98:aa:d3:5e:19:38:22:18:8d:bc:54:
fb:1a:f3:5d:db:17:c5:91:33:eb:21:b3:bc:ee:7f:b2:f9:dc:
f8:14:cb:ec:bb:ab:0b:a5:d7:36:bc:39:bd:50:a6:ae:6f:99:
0e:ff:16:27:56:94:57:e7:bd:12:d5:eb:ae:ae:20:08:17:5b:
f8:0d:91:6b:61:92:f3:30:24:10:4f:dd:cd:ac:49:83:0a:83:
e7:3f:2d:b2:d0:d3:d4:8a:47:b5:65:54:5c:4e:8f:d6:43:b6:
19:c4:b1:d5:a3:b3:e3:49:66:99:12:b1:69:5a:6b:cf:0b:b4:
4f:eb:8b:95:f8:1a:ae:3e:01:6d:a5:35:6e:32:5a:f2:03:73:
00:6a:e4:94:fd:b9:29:c7:df:1c:90:d8:92:0d:c1:a8:91:fd:
3e:08:71:d6:e6:57:64:fb:71:76:67:b4:58:7b:b0:9b:40:bc:
b2:92:54:c5:da:d0:61:88:52:b8:55:e8:1a:2e:8d:cc:20:33:
4f:47:31:de:a1:10:79:fa:79:aa:9d:c1:8c:c8:fa:0d:63:29:
75:83:6e:c7:90:ff:d5:dc:ac:1c:a2:a1:64:24:95:b4:f6:4a:
5e:bf:e4:00:85:1e:c8:c9:c5:6f:05:20:4d:58:60:54:7e:f9:
f5:3e:79:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjN9E1TyopY3DXhaDXynMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjMwMTAyMDMzNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzBmYWE3YzA3YmJiMjAwODRkM2JlN2RiNDdiZDA5YTBkYTUxNmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKRxs4yXRI/YvRUu798ybuC5LjK8
Mfj3ssBd8HI9MdaXrTD1/uOwcuLHTRqVbfqBHkqdDZKjAimmLWmCKGpG5s9MjNZ7
/BtFOmv51cUi3cpmrGLoDaArNJZgtIGIwHvQ2NEbmpSsYCksL/ilZZKIzJLBZU+f
kYxMGeYV4HY6BghwKyKUSGfbJqmqkKuVbuhVMvw/textcPAoy/Nw0rE5NlU2a93r
J/dVAwjSXwv+Sf0MZoeqB44Acx2i/FsnnJnI7n0QNMihNU+bcM0PsZQVEAwfV/zg
atf0Gff3qM6k8LQVtMaUX429/ddDe6MnqR9nI4bRRppZfdPaCA4QlHCh0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCwPqnwHu7IAhNO+fbR70JoNpRbeMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvTEEtcWZBZTdzZ0NFMDc1OXRIdlFtZzJsRnQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV2eoMA0G
CSqGSIb3DQEBCwUAA4IBAQAvNbYerSVzmKrTXhk4IhiNvFT7GvNd2xfFkTPrIbO8
7n+y+dz4FMvsu6sLpdc2vDm9UKaub5kO/xYnVpRX570S1euuriAIF1v4DZFrYZLz
MCQQT93NrEmDCoPnPy2y0NPUike1ZVRcTo/WQ7YZxLHVo7PjSWaZErFpWmvPC7RP
64uV+BquPgFtpTVuMlryA3MAauSU/bkpx98ckNiSDcGokf0+CHHW5ldk+3F2Z7RY
e7CbQLyyklTF2tBhiFK4VegaLo3MIDNPRzHeoRB5+nmqncGMyPoNYyl1g27HkP/V
3KwcoqFkJJW09kpev+QAhR7IycVvBSBNWGBUfvn1Pnn+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:24 2024 by rpki-client on console-ams.rpki-client.org