Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LRmSR1WDTEmtR2sgvy4iAD5wqwk.roa
File: LRmSR1WDTEmtR2sgvy4iAD5wqwk.roa (raw, json)
Hash identifier: Ht+ti8E04QIWmnOmKFpqr2ITAsyunW5X6Na80rs8q24=
Subject key identifier: 2D:19:92:47:55:83:4C:49:AD:47:6B:20:BF:2E:22:00:3E:70:AB:09
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81D486AC5D9C212E0F7C8BBF960724
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LRmSR1WDTEmtR2sgvy4iAD5wqwk.roa
Signing time: Sun 01 Jan 2023 13:25:03 +0000
ROA not before: Sun 01 Jan 2023 13:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8866
IP address blocks: 94.156.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:d4:86:ac:5d:9c:21:2e:0f:7c:8b:bf:96:07:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d19924755834c49ad476b20bf2e22003e70ab09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:db:ad:08:46:86:ee:ec:54:b5:12:19:a6:
5b:6e:08:13:d8:70:e5:1d:18:c4:7d:2f:95:72:39:
cd:b1:86:b5:b4:e5:b4:d3:45:4c:01:6a:72:33:d5:
17:52:1c:4d:1e:c3:7a:6f:f4:b6:54:a7:a2:8d:80:
35:3d:14:0d:05:a8:ae:d3:b7:ae:a3:ab:8a:6f:81:
fd:ff:0b:24:48:33:b7:d0:e9:3f:30:0c:85:2f:88:
74:a8:3d:94:c8:1e:18:be:e3:f1:db:79:36:58:1f:
09:40:06:2a:75:16:5e:37:c6:30:c3:92:cb:7c:f0:
6b:27:7d:8a:37:65:c1:fc:14:9e:07:4d:28:87:d7:
10:ee:23:95:bc:ec:50:7d:a0:1d:64:b5:6e:88:b8:
bc:fa:41:a5:c6:35:0e:9a:18:2c:f3:0b:d5:82:1a:
1f:d9:0b:c2:36:5b:4b:6b:1a:43:b5:32:81:18:4e:
e5:34:c0:a1:33:32:17:ba:e3:10:2d:68:b2:8b:d3:
52:6e:98:c6:29:27:66:e5:10:98:20:fc:7f:a4:7f:
45:3d:6a:ff:7d:6a:22:a0:dc:41:ae:4c:fb:9b:ec:
bf:6d:32:24:fe:f8:7e:61:ff:5a:b7:b0:c9:99:7a:
81:84:2e:c4:77:49:19:ac:41:aa:a9:ac:ce:ff:77:
85:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:19:92:47:55:83:4C:49:AD:47:6B:20:BF:2E:22:00:3E:70:AB:09
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LRmSR1WDTEmtR2sgvy4iAD5wqwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.236.0/22
Signature Algorithm: sha256WithRSAEncryption
38:dc:3e:78:80:d1:2f:a5:43:79:42:2b:89:75:6c:95:be:f4:
22:98:fa:97:55:1e:4e:e9:3b:7b:24:c5:bf:b4:51:13:68:cc:
44:a0:b2:99:80:3e:4e:85:67:83:ed:59:a8:4d:da:b9:bd:c6:
c5:9d:2d:7b:87:05:15:aa:12:70:79:7f:67:b1:15:28:ec:f0:
d8:af:69:84:8e:16:30:ff:cc:9f:8b:71:55:74:69:72:28:3c:
8b:10:33:00:e8:3c:e4:c4:1b:d8:29:6f:7e:70:23:c3:a0:47:
a5:92:a0:f4:da:d3:78:cf:e7:81:53:ec:08:f8:f5:b8:e2:e1:
b4:dd:67:fc:fa:dc:d4:11:6f:8c:79:b6:8f:a4:9a:40:ce:c5:
1f:78:45:33:9d:96:16:eb:d4:25:b9:2e:9f:88:1e:3b:bd:e4:
9e:c4:db:77:ca:41:f1:1b:92:8b:9e:a1:99:7a:06:ab:59:81:
de:6c:b2:6b:04:cf:e9:ac:76:ea:97:de:6f:e8:96:65:b5:14:
62:40:04:c3:62:c5:37:94:ff:a0:b1:cd:ba:02:f3:df:a4:43:
d0:7f:23:95:27:d1:b3:6b:30:db:fa:1f:01:a7:14:0d:bd:f5:
bd:9f:0c:fe:36:96:cf:cf:b0:18:26:9e:50:b4:7f:2c:e6:73:
c0:07:5e:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtgdSGrF2cIS4PfIu/lgckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDE5OTI0NzU1ODM0YzQ5YWQ0NzZiMjBiZjJlMjIwMDNlNzBhYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhHbrQhGhu7sVLUSGaZbbggT2HDl
HRjEfS+VcjnNsYa1tOW000VMAWpyM9UXUhxNHsN6b/S2VKeijYA1PRQNBaiu07eu
o6uKb4H9/wskSDO30Ok/MAyFL4h0qD2UyB4YvuPx23k2WB8JQAYqdRZeN8Yww5LL
fPBrJ32KN2XB/BSeB00oh9cQ7iOVvOxQfaAdZLVuiLi8+kGlxjUOmhgs8wvVghof
2QvCNltLaxpDtTKBGE7lNMChMzIXuuMQLWiyi9NSbpjGKSdm5RCYIPx/pH9FPWr/
fWoioNxBrkz7m+y/bTIk/vh+Yf9at7DJmXqBhC7Ed0kZrEGqqazO/3eFSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC0ZkkdVg0xJrUdrIL8uIgA+cKsJMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvTFJtU1IxV0RURW10UjJzZ3Z5NGlBRDV3cXdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXpzsMA0G
CSqGSIb3DQEBCwUAA4IBAQA43D54gNEvpUN5QiuJdWyVvvQimPqXVR5O6Tt7JMW/
tFETaMxEoLKZgD5OhWeD7VmoTdq5vcbFnS17hwUVqhJweX9nsRUo7PDYr2mEjhYw
/8yfi3FVdGlyKDyLEDMA6DzkxBvYKW9+cCPDoEelkqD02tN4z+eBU+wI+PW44uG0
3Wf8+tzUEW+MebaPpJpAzsUfeEUznZYW69QluS6fiB47veSexNt3ykHxG5KLnqGZ
egarWYHebLJrBM/prHbql95v6JZltRRiQATDYsU3lP+gsc26AvPfpEPQfyOVJ9Gz
azDb+h8BpxQNvfW9nwz+NpbPz7AYJp5QtH8s5nPAB17y
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org