Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/l5LQGTvBjQ4BDuOOHaKGPiqn58s.roa
File: l5LQGTvBjQ4BDuOOHaKGPiqn58s.roa (raw, json)
Hash identifier: ycQI36SxYgHtbfh9yGMyCH9QWkRzDbJHmFKk6NGwtW8=
Subject key identifier: 97:92:D0:19:3B:C1:8D:0E:01:0E:E3:8E:1D:A2:86:3E:2A:A7:E7:CB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01875B9AC4A282ECA979586C886702AE0D2F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/l5LQGTvBjQ4BDuOOHaKGPiqn58s.roa
Signing time: Fri 07 Apr 2023 12:04:42 +0000
ROA not before: Fri 07 Apr 2023 12:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 195.133.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5b:9a:c4:a2:82:ec:a9:79:58:6c:88:67:02:ae:0d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 7 12:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9792d0193bc18d0e010ee38e1da2863e2aa7e7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:2a:a1:c3:43:1b:86:59:94:22:5e:96:d3:
65:c8:47:b9:de:d4:50:b2:a6:1a:fc:94:6c:8b:4a:
2f:16:e7:ce:7f:e3:18:74:95:48:83:31:b8:aa:dc:
ac:35:1f:75:28:83:49:f9:45:a0:a9:48:cc:10:fe:
99:3c:79:4f:67:d9:44:20:06:83:cf:6a:a6:8e:b3:
3d:94:1d:8a:18:34:6d:68:56:4b:e2:9f:7d:97:0f:
1e:6e:6e:e9:89:b2:99:70:32:85:ff:ca:99:b9:2f:
59:07:a6:9c:14:2e:cd:84:a8:83:43:be:a0:fc:7d:
e2:4e:ce:ae:16:50:02:c0:4e:16:f2:28:f5:34:ab:
2b:3c:a9:50:13:04:36:42:a0:2f:a5:09:47:1e:1b:
b9:9d:fb:ed:ca:96:a9:7f:0f:b2:9a:0e:81:c4:84:
65:74:42:cc:50:dc:11:28:3f:2d:97:4d:12:85:e8:
60:60:ff:5f:a7:ed:7d:63:f6:54:ac:6e:d2:fb:72:
52:f7:0c:80:5c:8d:da:54:f7:4d:2e:33:84:d4:70:
73:67:36:83:d2:07:85:0e:95:10:6c:f6:5e:f8:e1:
e0:b7:1d:c3:d8:1d:cb:a5:f8:25:46:26:13:a7:65:
ca:11:0a:fe:c3:e8:2b:b2:8c:5e:b9:d4:9f:5f:ba:
7f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:92:D0:19:3B:C1:8D:0E:01:0E:E3:8E:1D:A2:86:3E:2A:A7:E7:CB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/l5LQGTvBjQ4BDuOOHaKGPiqn58s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.36.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:be:16:cc:09:93:fa:43:1c:4a:4f:52:5e:d3:9e:fd:63:ce:
4f:91:ce:60:30:06:fe:23:87:00:2e:ba:9b:55:78:ec:80:2c:
b8:15:04:94:86:91:5c:25:c4:34:36:84:a7:88:05:f6:98:60:
a0:68:51:37:dd:8f:7f:c1:b2:1f:0d:ef:30:a1:f9:71:e6:92:
39:8f:dd:a4:27:e4:73:0b:3d:17:64:bb:12:5a:1a:e3:4b:91:
8a:ea:39:38:aa:39:e7:2b:88:00:3f:9e:25:d5:78:92:af:ba:
7a:21:48:a4:bd:84:4e:56:d8:51:03:b6:d1:b3:4b:64:6a:64:
9e:10:e9:cf:3f:da:c6:97:04:c7:bf:8d:62:66:20:42:d8:40:
de:62:2c:73:86:60:ff:56:30:9f:fd:42:01:21:cd:fb:91:52:
27:a7:6f:a1:70:f2:32:fb:14:e8:30:3e:37:95:45:e6:a4:27:
31:71:14:24:97:b4:0e:2b:12:8f:14:b4:a8:7f:94:c6:fe:15:
80:64:c6:76:ed:fd:84:5b:b7:d0:d9:1c:61:1c:35:8f:54:31:
48:74:6d:d5:9c:23:5b:9b:31:e7:3d:44:af:6f:24:b3:26:50:
01:d8:59:8a:03:5e:a9:de:a8:94:1c:f5:4e:fc:2f:26:6a:ff:
b3:90:d6:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdbmsSiguypeVhsiGcCrg0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNDA3MTIwNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzkyZDAxOTNiYzE4ZDBlMDEwZWUzOGUxZGEyODYzZTJhYTdlN2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTYqocNDG4ZZlCJeltNlyEe53tRQ
sqYa/JRsi0ovFufOf+MYdJVIgzG4qtysNR91KINJ+UWgqUjMEP6ZPHlPZ9lEIAaD
z2qmjrM9lB2KGDRtaFZL4p99lw8ebm7pibKZcDKF/8qZuS9ZB6acFC7NhKiDQ76g
/H3iTs6uFlACwE4W8ij1NKsrPKlQEwQ2QqAvpQlHHhu5nfvtypapfw+ymg6BxIRl
dELMUNwRKD8tl00ShehgYP9fp+19Y/ZUrG7S+3JS9wyAXI3aVPdNLjOE1HBzZzaD
0geFDpUQbPZe+OHgtx3D2B3LpfglRiYTp2XKEQr+w+grsoxeudSfX7p/SwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJeS0Bk7wY0OAQ7jjh2ihj4qp+fLMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvbDVMUUdUdkJqUTRCRHVPT0hhS0dQaXFuNThzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4UkMA0G
CSqGSIb3DQEBCwUAA4IBAQBdvhbMCZP6QxxKT1Je0579Y85Pkc5gMAb+I4cALrqb
VXjsgCy4FQSUhpFcJcQ0NoSniAX2mGCgaFE33Y9/wbIfDe8woflx5pI5j92kJ+Rz
Cz0XZLsSWhrjS5GK6jk4qjnnK4gAP54l1XiSr7p6IUikvYROVthRA7bRs0tkamSe
EOnPP9rGlwTHv41iZiBC2EDeYixzhmD/VjCf/UIBIc37kVInp2+hcPIy+xToMD43
lUXmpCcxcRQkl7QOKxKPFLSof5TG/hWAZMZ27f2EW7fQ2RxhHDWPVDFIdG3VnCNb
mzHnPUSvbySzJlAB2FmKA16p3qiUHPVO/C8mav+zkNbj
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:44 2024 by rpki-client on console-ams.rpki-client.org