Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LdjLhpVzq12fiPoLMU53e7rYiCs.roa
File: LdjLhpVzq12fiPoLMU53e7rYiCs.roa (raw, json)
Hash identifier: nmVAaW0d4QR7qaGbA2OCRwEy8Qos/nAbonXwrcv43CU=
Subject key identifier: 2D:D8:CB:86:95:73:AB:5D:9F:88:FA:0B:31:4E:77:7B:BA:D8:88:2B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193B02436B7975D663E5510A2F951B54616
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LdjLhpVzq12fiPoLMU53e7rYiCs.roa
Signing time: Tue 10 Dec 2024 10:36:23 +0000
ROA not before: Tue 10 Dec 2024 10:36:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 5.253.56.0/23 maxlen: 24
45.139.123.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
93.123.76.0/22 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
94.156.180.0/23 maxlen: 24
94.156.237.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Dec 2024 12:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:24:36:b7:97:5d:66:3e:55:10:a2:f9:51:b5:46:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 10 10:36:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dd8cb869573ab5d9f88fa0b314e777bbad8882b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:7c:a5:77:bc:e2:f4:6f:91:fe:7c:26:7e:
3a:6d:ac:ef:0a:81:a2:69:43:ee:20:7f:d2:08:6c:
c0:a8:22:cd:65:e9:cb:62:84:bb:8b:93:77:54:e2:
d7:1e:18:92:2b:66:b8:17:e7:04:8f:16:67:4d:ae:
e2:dd:f7:55:ea:d7:d2:b4:3f:c9:11:7a:08:7f:fc:
73:96:1c:6a:88:30:36:ae:7e:3b:ed:72:5c:4e:48:
1f:bf:43:bd:3d:69:86:d4:77:7d:89:02:ca:b7:68:
5f:7a:be:0f:17:18:88:51:b1:e3:5e:88:c8:7a:93:
11:af:b0:b1:ac:cc:cc:b9:d5:23:23:1d:47:6a:62:
22:d2:40:5f:78:ca:ff:60:06:3a:16:32:e8:f0:82:
e2:a5:c2:14:af:d0:ee:cc:5d:57:71:b1:af:0f:7c:
97:2b:9b:0c:78:9e:13:72:0a:c7:19:b7:7b:12:cc:
84:19:74:5d:36:df:d9:10:95:c1:c5:6b:ad:68:11:
07:9d:a9:cd:bc:65:60:1d:69:07:32:46:a6:7d:9f:
68:f9:6d:ee:7f:fe:b3:29:cf:89:a2:ca:1b:15:4f:
cf:0e:85:38:76:0a:4f:af:d1:16:bf:71:ab:ac:26:
e9:dd:c8:08:08:58:4b:a4:08:96:66:6b:a7:40:fe:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D8:CB:86:95:73:AB:5D:9F:88:FA:0B:31:4E:77:7B:BA:D8:88:2B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LdjLhpVzq12fiPoLMU53e7rYiCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/23
45.139.123.0/24
91.92.67.0/24
93.123.76.0/22
94.156.152.0/24
94.156.154.0/23
94.156.180.0/23
94.156.237.0/24
185.252.177.0/24
193.47.62.0/24
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:6f:59:90:1e:80:01:9a:ed:12:1c:9b:36:17:c8:22:88:8d:
e6:3b:c0:6f:c6:63:94:32:02:6c:d0:ba:d1:6b:b3:f4:28:ff:
7d:0e:24:9d:59:df:97:d2:c0:5a:6a:ff:00:e7:01:e6:0c:76:
50:15:b9:46:d3:10:52:8a:cc:a3:27:4d:e7:c3:d1:7a:14:65:
5d:85:d8:67:78:5c:b4:65:31:e1:b5:27:57:03:65:c1:9c:1f:
19:1a:66:1d:9b:c4:77:5b:52:1c:f1:25:b5:11:e0:1b:9b:1c:
b6:00:26:87:15:d2:4e:1a:43:83:67:87:53:b0:66:8f:76:9f:
4a:89:25:15:8a:ba:f0:cf:c6:2a:d8:66:ff:4a:85:ba:cb:3a:
cd:b9:78:77:63:b2:a2:7f:00:66:d9:04:30:d0:d4:f9:b4:e4:
59:ec:37:e3:10:d3:f6:00:05:5d:15:5f:fb:70:44:14:f0:60:
ff:67:54:b0:61:87:5a:62:5a:71:e3:6d:cd:cf:49:d1:40:37:
65:fd:f9:6b:0c:7f:1f:25:14:76:28:93:f6:4d:c8:be:4d:cb:
e3:e6:af:5b:85:9c:ae:53:f5:ca:3f:19:f1:94:4d:f1:1c:a8:
ea:5d:a9:2b:2c:f6:70:a6:df:7b:5d:d0:4b:d8:52:ec:1f:53:
ea:91:44:a7
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZOwJDa3l11mPlUQovlRtUYWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMjEwMTAzNjIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGQ4Y2I4Njk1NzNhYjVkOWY4OGZhMGIzMTRlNzc3YmJhZDg4ODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy58pXe84vRvkf58Jn46bazvCoGi
aUPuIH/SCGzAqCLNZenLYoS7i5N3VOLXHhiSK2a4F+cEjxZnTa7i3fdV6tfStD/J
EXoIf/xzlhxqiDA2rn477XJcTkgfv0O9PWmG1Hd9iQLKt2hfer4PFxiIUbHjXojI
epMRr7CxrMzMudUjIx1HamIi0kBfeMr/YAY6FjLo8ILipcIUr9DuzF1XcbGvD3yX
K5sMeJ4TcgrHGbd7EsyEGXRdNt/ZEJXBxWutaBEHnanNvGVgHWkHMkamfZ9o+W3u
f/6zKc+JosobFU/PDoU4dgpPr9EWv3GrrCbp3cgICFhLpAiWZmunQP6WYQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFC3Yy4aVc6tdn4j6CzFOd3u62IgrMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvTGRqTGhwVnpxMTJmaVBvTE1VNTNlN3JZaUNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQBBf04AwQA
LYt7AwQAW1xDAwQCXXtMAwQAXpyYAwQBXpyaAwQBXpy0AwQAXpztAwQAufyxAwQA
wS8+AwQAwTp7MA0GCSqGSIb3DQEBCwUAA4IBAQCkb1mQHoABmu0SHJs2F8giiI3m
O8BvxmOUMgJs0LrRa7P0KP99DiSdWd+X0sBaav8A5wHmDHZQFblG0xBSisyjJ03n
w9F6FGVdhdhneFy0ZTHhtSdXA2XBnB8ZGmYdm8R3W1Ic8SW1EeAbmxy2ACaHFdJO
GkODZ4dTsGaPdp9KiSUVirrwz8Yq2Gb/SoW6yzrNuXh3Y7KifwBm2QQw0NT5tORZ
7DfjENP2AAVdFV/7cEQU8GD/Z1SwYYdaYlpx423Nz0nRQDdl/flrDH8fJRR2KJP2
Tci+Tcvj5q9bhZyuU/XKPxnxlE3xHKjqXakrLPZwpt97XdBL2FLsH1PqkUSn
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:22:48 2025 by rpki-client