Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LQ4BsDiAtQ7-EhQKOGf38hgM22Q.roa
File: LQ4BsDiAtQ7-EhQKOGf38hgM22Q.roa (raw, json)
Hash identifier: kUduOENA62VIQz4YpqoXKLdmw8JFpjlWaagYKbEIuwE=
Subject key identifier: 2D:0E:01:B0:38:80:B5:0E:FE:12:14:0A:38:67:F7:F2:18:0C:DB:64
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BEC3DE6363B4A819F91CB437FCFF4F025
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LQ4BsDiAtQ7-EhQKOGf38hgM22Q.roa
Signing time: Mon 20 Nov 2023 10:19:21 +0000
ROA not before: Mon 20 Nov 2023 10:19:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 193.124.36.0/24 maxlen: 24
194.87.133.0/24 maxlen: 24
195.133.2.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.133.31.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ec:3d:e6:36:3b:4a:81:9f:91:cb:43:7f:cf:f4:f0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 20 10:19:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d0e01b03880b50efe12140a3867f7f2180cdb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:ea:61:40:b6:4f:c4:1b:db:58:4e:42:99:
7d:7c:34:e9:49:8e:69:bf:be:70:b1:d0:4e:a9:26:
13:1d:df:ff:5c:1c:85:56:ef:4b:09:9c:f5:13:00:
ae:00:b4:f5:a0:c0:d2:54:f2:52:51:69:74:7b:b4:
e9:5f:7a:b9:9c:f4:bd:cb:d9:a1:3b:0c:7f:b4:3c:
a4:20:59:8d:60:b8:1a:c2:3c:1e:f3:c1:5a:f6:d7:
05:24:3d:4e:7b:7d:33:59:cc:a9:c2:33:0a:48:19:
6c:11:2e:3c:f8:70:f1:ba:ba:e1:d1:6a:61:b6:c2:
59:29:fc:4a:bd:c9:66:99:8c:f3:b0:b0:8b:ac:0f:
a6:35:58:2c:d1:7c:2f:60:61:03:d4:d1:f1:45:e0:
37:df:06:87:dc:7c:15:44:5c:3f:7d:bc:43:03:2a:
ca:04:a2:d4:6a:f0:50:71:78:1c:1f:77:d0:d1:51:
b3:a5:ad:9b:a5:bc:58:63:26:f6:eb:31:0a:39:e7:
99:5b:2b:a9:03:0a:57:c3:82:91:89:01:47:db:7b:
29:7b:e6:b6:2d:f7:61:5a:01:20:01:79:ca:bb:50:
a7:90:f3:ed:58:84:63:b0:6b:04:c3:4f:c9:c4:13:
2d:74:f9:27:da:2c:77:a1:09:7e:ff:57:82:22:91:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0E:01:B0:38:80:B5:0E:FE:12:14:0A:38:67:F7:F2:18:0C:DB:64
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LQ4BsDiAtQ7-EhQKOGf38hgM22Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.36.0/24
194.87.73.0/24
194.87.133.0/24
195.58.36.0/24
195.133.2.0/24
195.133.31.0/24
212.192.242.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:22:00:49:40:46:ce:3c:f1:12:bc:72:8c:99:f5:ca:c7:34:
04:50:78:d5:9d:2d:53:51:8f:fb:d8:36:a5:24:a0:16:6c:0d:
4f:93:c4:c1:66:87:ed:76:db:9c:b1:84:59:03:2c:b0:5c:a9:
99:85:f9:bf:eb:d4:98:48:fc:7e:16:ac:c3:be:33:06:52:2c:
da:b4:2d:c7:0b:8a:d6:37:f7:2a:13:4b:e5:5c:43:c4:db:ab:
12:c2:eb:09:07:d7:f0:13:c2:4c:fe:5a:dd:7f:fd:3d:e6:15:
76:4f:9f:56:3b:c0:3d:7c:52:30:a7:03:49:31:15:59:e6:eb:
79:74:22:d4:7b:dc:48:20:f0:9d:cf:79:42:63:70:32:27:f9:
4a:12:e6:45:bc:c1:b0:a6:de:45:63:8b:ad:96:f8:de:9a:90:
e3:7f:89:39:eb:45:a3:79:4a:82:5d:75:bb:72:a7:66:1f:c9:
6c:e5:58:c0:68:40:dc:e3:ca:33:84:49:5d:95:30:95:84:6b:
12:d0:88:61:ab:98:01:7b:57:e8:72:7f:3d:b9:26:15:3d:96:
f3:cc:c8:e8:79:25:15:cd:96:f2:5c:38:46:0b:75:d8:14:2a:
ad:69:9a:a4:41:bf:65:3c:2e:96:46:0e:28:f1:d3:ce:2e:4e:
21:ef:c1:eb
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYvsPeY2O0qBn5HLQ3/P9PAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMTIwMTAxOTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDBlMDFiMDM4ODBiNTBlZmUxMjE0MGEzODY3ZjdmMjE4MGNkYjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbLqYUC2T8Qb21hOQpl9fDTpSY5p
v75wsdBOqSYTHd//XByFVu9LCZz1EwCuALT1oMDSVPJSUWl0e7TpX3q5nPS9y9mh
Owx/tDykIFmNYLgawjwe88Fa9tcFJD1Oe30zWcypwjMKSBlsES48+HDxurrh0Wph
tsJZKfxKvclmmYzzsLCLrA+mNVgs0XwvYGED1NHxReA33waH3HwVRFw/fbxDAyrK
BKLUavBQcXgcH3fQ0VGzpa2bpbxYYyb26zEKOeeZWyupAwpXw4KRiQFH23spe+a2
LfdhWgEgAXnKu1CnkPPtWIRjsGsEw0/JxBMtdPkn2ix3oQl+/1eCIpE+HwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFC0OAbA4gLUO/hIUCjhn9/IYDNtkMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvTFE0QnNEaUF0UTctRWhRS09HZjM4aGdNMjJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAwXwkAwQA
wldJAwQAwleFAwQAwzokAwQAw4UCAwQAw4UfAwQA1MDyMA0GCSqGSIb3DQEBCwUA
A4IBAQB6IgBJQEbOPPESvHKMmfXKxzQEUHjVnS1TUY/72DalJKAWbA1Pk8TBZoft
dtucsYRZAyywXKmZhfm/69SYSPx+FqzDvjMGUizatC3HC4rWN/cqE0vlXEPE26sS
wusJB9fwE8JM/lrdf/095hV2T59WO8A9fFIwpwNJMRVZ5ut5dCLUe9xIIPCdz3lC
Y3AyJ/lKEuZFvMGwpt5FY4utlvjempDjf4k560WjeUqCXXW7cqdmH8ls5VjAaEDc
48ozhEldlTCVhGsS0Ihhq5gBe1focn89uSYVPZbzzMjoeSUVzZbyXDhGC3XYFCqt
aZqkQb9lPC6WRg4o8dPOLk4h78Hr
-----END CERTIFICATE-----
Generated at Sun Nov 26 00:29:16 2023 by rpki-client on console-ams.rpki-client.org