Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/LXJgHrJsbCMNxlQjxu6MLfdPjYk.roa
File: LXJgHrJsbCMNxlQjxu6MLfdPjYk.roa (raw, json)
Hash identifier: b8ifw80lmi3/eQKddUtTRmO8NMMCXoHiytcE9D+WOHw=
Subject key identifier: 2D:72:60:1E:B2:6C:6C:23:0D:C6:54:23:C6:EE:8C:2D:F7:4F:8D:89
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 018982895C89A16F185169AEE526983F8F86
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/LXJgHrJsbCMNxlQjxu6MLfdPjYk.roa
Signing time: Sun 23 Jul 2023 11:36:27 +0000
ROA not before: Sun 23 Jul 2023 11:36:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 37.1.230.0/24 maxlen: 24
77.75.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:82:89:5c:89:a1:6f:18:51:69:ae:e5:26:98:3f:8f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Jul 23 11:36:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d72601eb26c6c230dc65423c6ee8c2df74f8d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:7a:0e:f2:e1:83:41:12:e7:da:a2:05:b8:
68:f0:8e:4e:f1:5e:bf:b6:db:40:8e:ae:cf:ba:a4:
a5:eb:a5:23:cf:34:d6:72:68:32:84:21:ee:bf:27:
94:c7:9f:a4:55:14:e0:3e:df:b1:2b:4e:d5:00:43:
07:6a:28:bf:12:be:ed:84:3d:08:93:98:be:80:19:
27:04:a5:3c:a6:e0:bf:45:a4:18:aa:69:69:a7:e8:
d8:89:7b:9d:f0:34:8e:88:f6:97:f6:ae:0c:02:8d:
45:d1:99:b1:79:ab:2b:49:ea:2b:44:9b:0b:7c:57:
48:fc:f2:c5:14:8d:ec:9e:85:9e:ca:a1:cb:9f:f7:
2e:fc:ff:eb:4a:e8:14:39:65:87:f0:af:99:58:4c:
56:14:e7:22:1c:36:b8:58:e7:10:35:1f:eb:21:95:
a7:f7:ce:78:57:7c:95:de:ba:e7:6b:74:52:ac:8e:
6b:46:19:17:8b:5b:d2:73:11:62:5b:34:b9:86:d8:
72:b3:17:5e:0d:00:8a:83:41:64:57:0f:c8:3e:8f:
91:4f:ac:3f:57:93:d1:e7:b3:70:7f:60:12:d7:21:
8d:25:5c:64:a6:c6:62:39:58:87:b6:54:62:fd:64:
ad:c7:8c:ef:5d:bf:84:2c:89:4a:4e:5d:db:58:a4:
3e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:72:60:1E:B2:6C:6C:23:0D:C6:54:23:C6:EE:8C:2D:F7:4F:8D:89
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/LXJgHrJsbCMNxlQjxu6MLfdPjYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.230.0/24
77.75.198.0/24
Signature Algorithm: sha256WithRSAEncryption
64:44:64:a0:ea:2e:4d:f3:a7:80:35:42:91:73:8e:5e:9d:ab:
bb:bc:d4:8d:11:8c:fb:3a:5f:ce:c5:33:85:e4:48:ad:8f:39:
21:f8:74:8e:83:55:ba:4e:59:71:b4:b7:30:f1:f4:97:e3:3d:
14:8d:42:f7:d2:cf:c9:6b:36:11:9b:f8:15:4d:0f:3e:60:4f:
fa:72:91:8f:29:9a:d5:2b:8a:a2:a4:01:36:4a:91:b6:ed:59:
24:83:e7:a6:b6:33:e1:db:dc:0b:88:d8:67:08:db:67:c2:12:
a5:1d:9f:04:26:e6:28:1a:74:fa:6b:74:fa:55:ca:01:52:b6:
8e:1c:84:1c:6e:e2:b0:24:a7:fc:df:db:e5:69:2d:e8:c9:e8:
5b:3f:30:75:28:59:ce:9e:a7:7a:d0:dd:8e:68:1b:f8:c7:aa:
5e:c8:e1:db:63:ab:18:5c:ef:0b:b1:7e:a4:18:3e:9a:34:ac:
09:2f:5a:93:34:ae:a5:89:37:c9:cd:e1:fd:71:d7:3c:58:17:
f1:e6:76:66:25:e3:3d:2a:c5:4a:ec:15:bb:a7:7e:4f:4a:71:
19:6d:11:99:82:d2:22:90:f2:6e:f4:8d:27:90:ad:3a:9d:93:
1c:44:a5:aa:f5:a5:02:c3:13:83:40:ab:37:dc:9b:7b:d6:cc:
87:f6:9f:5b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYmCiVyJoW8YUWmu5SaYP4+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NGUzZTFiZWNmMzBiNDRhNDY5ODE1ZmQwZjhjMDY5YzU2
MmY5OTYwHhcNMjMwNzIzMTEzNjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDcyNjAxZWIyNmM2YzIzMGRjNjU0MjNjNmVlOGMyZGY3NGY4ZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnB6DvLhg0ES59qiBbho8I5O8V6/
tttAjq7PuqSl66UjzzTWcmgyhCHuvyeUx5+kVRTgPt+xK07VAEMHaii/Er7thD0I
k5i+gBknBKU8puC/RaQYqmlpp+jYiXud8DSOiPaX9q4MAo1F0ZmxeasrSeorRJsL
fFdI/PLFFI3snoWeyqHLn/cu/P/rSugUOWWH8K+ZWExWFOciHDa4WOcQNR/rIZWn
9854V3yV3rrna3RSrI5rRhkXi1vScxFiWzS5hthysxdeDQCKg0FkVw/IPo+RT6w/
V5PR57Nwf2AS1yGNJVxkpsZiOViHtlRi/WStx4zvXb+ELIlKTl3bWKQ+swIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC1yYB6ybGwjDcZUI8bujC33T42JMB8GA1UdIwQY
MBaAFKhOPhvs8wtEpGmBX9D4wGnFYvmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUU0LUctenpDMFNrYVlGZjBQakFhY1ZpLVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85ZGRlYmUtMzcyZi00MjU4LWJhMGYt
Y2M0ZmU2MzIzZmVjLzEvTFhKZ0hySnNiQ01OeGxRanh1Nk1MZmRQallrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS85ZGRlYmUtMzcyZi00MjU4LWJhMGYtY2M0ZmU2MzIzZmVj
LzEvcUU0LUctenpDMFNrYVlGZjBQakFhY1ZpLVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJQHmAwQA
TUvGMA0GCSqGSIb3DQEBCwUAA4IBAQBkRGSg6i5N86eANUKRc45enau7vNSNEYz7
Ol/OxTOF5Eitjzkh+HSOg1W6TllxtLcw8fSX4z0UjUL30s/JazYRm/gVTQ8+YE/6
cpGPKZrVK4qipAE2SpG27Vkkg+emtjPh29wLiNhnCNtnwhKlHZ8EJuYoGnT6a3T6
VcoBUraOHIQcbuKwJKf839vlaS3oyehbPzB1KFnOnqd60N2OaBv4x6peyOHbY6sY
XO8LsX6kGD6aNKwJL1qTNK6liTfJzeH9cdc8WBfx5nZmJeM9KsVK7BW7p35PSnEZ
bRGZgtIikPJu9I0nkK06nZMcRKWq9aUCwxODQKs33Jt71syH9p9b
-----END CERTIFICATE-----
Generated at Sun Aug 20 08:19:00 2023 by rpki-client on console-fra.rpki-client.org