Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lwzbTHBKvwmzrnAdUponFQJoGRc.roa
File: lwzbTHBKvwmzrnAdUponFQJoGRc.roa (raw, json)
Hash identifier: eKgHiSyccyRyEGsXy8P/A1sJuZwBkTdfUV/MpJLnlgM=
Subject key identifier: 97:0C:DB:4C:70:4A:BF:09:B3:AE:70:1D:52:9A:27:15:02:68:19:17
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D11EA7458C20B8D3F8101FAD37B671749
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lwzbTHBKvwmzrnAdUponFQJoGRc.roa
Signing time: Tue 16 Jan 2024 10:56:34 +0000
ROA not before: Tue 16 Jan 2024 10:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216289
IP address blocks: 93.123.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 11:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:ea:74:58:c2:0b:8d:3f:81:01:fa:d3:7b:67:17:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 16 10:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=970cdb4c704abf09b3ae701d529a271502681917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:36:28:56:89:cc:ce:05:2d:18:09:68:0b:
1b:7d:a3:1f:c7:e3:76:2e:79:34:c5:ca:dd:41:b6:
9b:65:e4:21:dc:2d:55:fd:5c:0d:4d:40:28:00:34:
5d:5f:2d:f7:43:d6:9b:78:61:02:20:fe:44:4b:ad:
82:4a:29:93:4a:1b:bd:5a:21:f3:42:95:53:06:2a:
af:4d:5c:0d:59:55:bc:9d:12:9b:2b:be:50:b3:56:
b8:a4:19:cc:23:c4:5b:7c:ce:98:b6:17:22:87:10:
6f:4b:ba:fb:e3:bd:f5:b3:04:e5:4f:d9:57:27:d1:
44:5b:0b:17:53:bd:67:b4:3e:b2:2d:39:72:d1:97:
ee:b9:4e:1c:a6:d2:6d:35:f1:49:8f:16:ce:72:c6:
5c:cc:ff:44:89:e3:59:52:a6:57:71:da:5e:52:d3:
c4:81:96:38:9b:8d:4a:bc:f5:e3:47:1f:9d:f1:9a:
24:04:b2:86:5b:4b:19:2a:33:d9:91:0e:b8:ed:2a:
c9:62:bf:66:b1:91:75:dc:02:4b:7a:9b:95:16:cf:
2a:55:9d:ab:3b:d6:48:30:9b:9f:27:8b:b3:b3:b8:
a8:54:f2:6a:77:ad:33:e5:79:c0:2e:65:f1:01:4d:
6b:4a:5f:d5:dc:c9:c6:75:35:d6:32:34:6b:69:e6:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0C:DB:4C:70:4A:BF:09:B3:AE:70:1D:52:9A:27:15:02:68:19:17
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lwzbTHBKvwmzrnAdUponFQJoGRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a4:f1:45:6d:ba:ad:a8:e1:e3:ae:4c:f2:d7:bb:02:6f:67:
8c:9f:2c:28:7b:22:9a:72:c8:65:7d:7e:08:e4:14:35:e8:f4:
af:65:f7:cf:6b:f8:08:1d:a9:20:aa:a1:fb:3f:b3:45:d8:8c:
9a:d1:6f:ba:c7:d0:31:0c:b1:9e:53:c5:4d:e5:d8:d0:43:96:
c4:35:0b:10:bd:d1:9b:2c:70:b6:ac:dc:c3:80:17:d6:0d:a1:
92:b5:9f:1b:0a:1f:ae:97:bd:30:51:b4:6b:f1:c1:b1:45:b4:
bc:b2:31:4b:bf:32:07:c1:e1:0e:fe:eb:90:eb:d8:d6:52:37:
92:56:12:bc:67:b3:cb:56:60:d6:77:cd:59:f2:d8:bb:66:0b:
44:ef:46:ff:d3:e0:35:81:93:ab:3f:94:66:27:12:cb:f7:1f:
d2:9f:72:4b:9b:05:89:c7:a9:b9:97:80:2a:aa:1d:db:cf:58:
b9:67:73:3f:e8:3a:17:00:62:26:c8:67:e7:e9:a0:93:70:15:
3d:3e:3d:34:10:74:f4:f5:4c:5c:80:91:4c:b8:53:2c:d4:af:
46:fa:80:0e:b3:f3:dd:f2:d3:39:80:12:d0:15:69:66:79:ba:
8d:ad:a6:9d:1b:fe:a2:54:d3:ef:eb:55:d1:c2:b9:c9:4d:77:
4a:7b:f9:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0R6nRYwguNP4EB+tN7ZxdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTE2MTA1NjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzBjZGI0YzcwNGFiZjA5YjNhZTcwMWQ1MjlhMjcxNTAyNjgxOTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CE2KFaJzM4FLRgJaAsbfaMfx+N2
Lnk0xcrdQbabZeQh3C1V/VwNTUAoADRdXy33Q9abeGECIP5ES62CSimTShu9WiHz
QpVTBiqvTVwNWVW8nRKbK75Qs1a4pBnMI8RbfM6YthcihxBvS7r74731swTlT9lX
J9FEWwsXU71ntD6yLTly0ZfuuU4cptJtNfFJjxbOcsZczP9EieNZUqZXcdpeUtPE
gZY4m41KvPXjRx+d8ZokBLKGW0sZKjPZkQ647SrJYr9msZF13AJLepuVFs8qVZ2r
O9ZIMJufJ4uzs7ioVPJqd60z5XnALmXxAU1rSl/V3MnGdTXWMjRraeZBDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJcM20xwSr8Js65wHVKaJxUCaBkXMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvbHd6YlRIQkt2d216cm5BZFVwb25GUUpvR1JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXsnMA0G
CSqGSIb3DQEBCwUAA4IBAQCPpPFFbbqtqOHjrkzy17sCb2eMnywoeyKacshlfX4I
5BQ16PSvZffPa/gIHakgqqH7P7NF2Iya0W+6x9AxDLGeU8VN5djQQ5bENQsQvdGb
LHC2rNzDgBfWDaGStZ8bCh+ul70wUbRr8cGxRbS8sjFLvzIHweEO/uuQ69jWUjeS
VhK8Z7PLVmDWd81Z8ti7ZgtE70b/0+A1gZOrP5RmJxLL9x/Sn3JLmwWJx6m5l4Aq
qh3bz1i5Z3M/6DoXAGImyGfn6aCTcBU9Pj00EHT09UxcgJFMuFMs1K9G+oAOs/Pd
8tM5gBLQFWlmebqNraadG/6iVNPv61XRwrnJTXdKe/m5
-----END CERTIFICATE-----
Generated at Tue Jan 23 14:58:07 2024 by rpki-client on console-ams.rpki-client.org