Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ltdsSuUG6QQ_BgWTnnZIc8iWfJI.roa
File: ltdsSuUG6QQ_BgWTnnZIc8iWfJI.roa (raw, json)
Hash identifier: +i4PnROGBzUACCb6jxXUfLACcvgywwZx1EK3SqSxbAo=
Subject key identifier: 96:D7:6C:4A:E5:06:E9:04:3F:06:05:93:9E:76:48:73:C8:96:7C:92
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 018B764466210E7C382959104FDB974709CD
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ltdsSuUG6QQ_BgWTnnZIc8iWfJI.roa
Signing time: Sat 28 Oct 2023 12:31:15 +0000
ROA not before: Sat 28 Oct 2023 12:31:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202972
IP address blocks: 185.148.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Dec 2023 12:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:76:44:66:21:0e:7c:38:29:59:10:4f:db:97:47:09:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Oct 28 12:31:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96d76c4ae506e9043f0605939e764873c8967c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ef:90:59:57:74:4e:78:34:01:16:c7:9b:4c:
0f:8c:6b:82:21:50:22:a2:f7:cd:ae:fb:4d:1b:84:
06:3a:d3:e0:86:0d:63:be:11:38:32:f5:d5:d0:d6:
58:85:b3:10:18:15:be:00:d5:08:f3:4f:72:c1:e2:
02:78:27:f1:8f:16:ef:a7:fd:20:d8:f7:72:17:7f:
16:ef:eb:4d:26:b8:af:f6:75:ce:d4:64:a9:f7:43:
f2:d0:10:5e:cd:13:76:cb:5b:ff:55:82:7d:8c:1b:
ba:41:d1:c8:d7:fd:a7:21:08:a4:f7:21:06:a9:cc:
f8:09:d1:c2:c6:44:96:4e:d6:4e:9b:fe:9f:16:06:
b2:59:cd:81:37:63:aa:9c:26:10:b3:58:f6:ac:2f:
ca:c3:00:07:4f:4b:f7:35:ad:bb:86:fb:46:2f:0e:
67:79:82:05:a6:bd:ca:83:09:d8:62:9b:ee:a2:9d:
5d:8a:ae:13:5a:be:4d:20:57:a5:b9:91:24:30:55:
98:a9:6c:94:9e:70:82:5b:5a:06:cf:13:2c:ec:33:
14:2c:0a:5a:53:6f:82:43:76:a1:f7:28:1c:1c:99:
ec:85:3c:b6:1f:00:c1:31:37:94:88:00:c3:7f:45:
f8:d3:20:b1:59:4b:af:b2:40:3c:5c:a6:1f:5e:f4:
a2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D7:6C:4A:E5:06:E9:04:3F:06:05:93:9E:76:48:73:C8:96:7C:92
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ltdsSuUG6QQ_BgWTnnZIc8iWfJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c2:8e:1a:e7:75:c2:cc:f0:da:21:ed:6c:27:91:13:b6:7c:
4e:ee:68:f2:55:18:f9:a8:1f:fd:f5:86:44:e2:8b:87:ab:d3:
6b:c9:d1:ac:6a:50:0e:55:d0:4a:e4:e2:3c:42:62:e8:76:6d:
9d:6a:4a:26:04:19:32:4e:76:6d:44:40:a0:e9:3a:7c:f6:d1:
96:bb:35:d8:41:e3:aa:8d:78:f1:09:17:3b:88:0f:6a:a7:a9:
f7:6f:d6:89:e1:0e:bc:8e:49:41:2c:7e:60:a4:f9:40:47:71:
f6:90:f0:17:1d:87:49:de:96:f2:50:33:38:d3:54:cc:8c:1c:
38:ca:b6:b6:03:cb:43:21:d5:d8:26:d4:c6:82:fe:d9:d3:b6:
b2:12:86:ee:11:50:85:04:e2:49:3c:41:c9:cf:5f:22:43:ea:
22:fa:6f:de:b9:91:d7:3e:fe:33:c7:01:d4:9d:98:bc:43:e1:
54:f5:ae:76:28:94:91:2d:fd:0d:c9:c7:94:e2:7b:2b:49:a7:
ae:04:1b:c9:d7:08:91:07:d0:22:53:d4:1a:fc:8f:94:c1:8d:
21:d2:e6:ff:5f:a5:20:c7:4a:94:5a:bb:6f:03:95:c7:63:e4:
1f:f2:99:06:34:86:13:63:fa:cf:9e:ed:3e:bf:0e:0e:ba:41:
1e:30:a3:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYt2RGYhDnw4KVkQT9uXRwnNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3
MjAyZDUwHhcNMjMxMDI4MTIzMTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmQ3NmM0YWU1MDZlOTA0M2YwNjA1OTM5ZTc2NDg3M2M4OTY3YzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke+QWVd0Tng0ARbHm0wPjGuCIVAi
ovfNrvtNG4QGOtPghg1jvhE4MvXV0NZYhbMQGBW+ANUI809yweICeCfxjxbvp/0g
2PdyF38W7+tNJriv9nXO1GSp90Py0BBezRN2y1v/VYJ9jBu6QdHI1/2nIQik9yEG
qcz4CdHCxkSWTtZOm/6fFgayWc2BN2OqnCYQs1j2rC/KwwAHT0v3Na27hvtGLw5n
eYIFpr3KgwnYYpvuop1diq4TWr5NIFeluZEkMFWYqWyUnnCCW1oGzxMs7DMULApa
U2+CQ3ah9ygcHJnshTy2HwDBMTeUiADDf0X40yCxWUuvskA8XKYfXvSiUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJbXbErlBukEPwYFk552SHPIlnySMB8GA1UdIwQY
MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct
YzUxNWYzNTRjYzVhLzEvbHRkc1N1VUc2UVFfQmdXVG5uWkljOGlXZkpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh
LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZTxMA0G
CSqGSIb3DQEBCwUAA4IBAQCKwo4a53XCzPDaIe1sJ5ETtnxO7mjyVRj5qB/99YZE
4ouHq9NrydGsalAOVdBK5OI8QmLodm2dakomBBkyTnZtRECg6Tp89tGWuzXYQeOq
jXjxCRc7iA9qp6n3b9aJ4Q68jklBLH5gpPlAR3H2kPAXHYdJ3pbyUDM401TMjBw4
yra2A8tDIdXYJtTGgv7Z07ayEobuEVCFBOJJPEHJz18iQ+oi+m/euZHXPv4zxwHU
nZi8Q+FU9a52KJSRLf0NyceU4nsrSaeuBBvJ1wiRB9AiU9Qa/I+UwY0h0ub/X6Ug
x0qUWrtvA5XHY+Qf8pkGNIYTY/rPnu0+vw4OukEeMKNV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org