Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LsiaSF2dBe20QNZlgL9tiT9Iygk.roa
File: LsiaSF2dBe20QNZlgL9tiT9Iygk.roa (raw, json)
Hash identifier: py4o5ZjayghACl1Fa/6V7uGGcSLHbMHwbKvaabcA55U=
Subject key identifier: 2E:C8:9A:48:5D:9D:05:ED:B4:40:D6:65:80:BF:6D:89:3F:48:CA:09
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0192E2C3E512B9146D2F98096602A56F9E4D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LsiaSF2dBe20QNZlgL9tiT9Iygk.roa
Signing time: Thu 31 Oct 2024 13:29:01 +0000
ROA not before: Thu 31 Oct 2024 13:29:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205463
IP address blocks: 2.56.108.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
195.211.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Nov 2024 23:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:c3:e5:12:b9:14:6d:2f:98:09:66:02:a5:6f:9e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 31 13:29:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ec89a485d9d05edb440d66580bf6d893f48ca09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:88:5b:29:5b:3c:a2:42:35:16:d2:80:2d:70:
00:27:c2:1a:3b:b1:af:cd:f4:e8:4f:0a:63:0a:5f:
48:f1:02:57:bc:3c:f7:2c:34:aa:fe:00:97:ba:e4:
ee:5f:29:80:d0:e2:4e:a2:cd:36:74:47:4c:44:9e:
23:ae:fd:6b:6d:55:85:98:db:10:24:af:48:d4:16:
9e:a3:cd:9f:c0:16:93:ae:75:71:56:29:98:8e:56:
e6:05:7d:d2:22:d0:cb:63:2f:18:71:7c:f6:3f:61:
12:e4:a2:31:c3:e7:28:a3:cb:53:f9:8a:9c:b9:70:
ab:3c:49:29:80:75:13:c0:aa:23:e8:8a:ff:55:99:
00:03:7f:9e:20:7a:44:8d:ad:6a:55:31:81:34:99:
05:d7:87:24:05:a2:5c:30:e1:f8:00:6d:77:a6:6a:
93:14:d9:e4:81:d2:1a:57:4f:04:f1:a4:c3:e9:73:
c7:ff:ba:16:fa:6e:ce:d5:14:21:1e:3c:ce:e6:d2:
65:07:1b:a5:12:67:fc:94:46:23:a6:4a:02:69:be:
db:d8:bd:d3:c0:3c:7c:51:dd:f5:d2:0c:65:35:7a:
dc:b8:b5:f9:60:43:5c:98:b0:aa:75:ff:46:49:6f:
7c:4a:83:91:a9:8e:51:c6:0e:15:0c:a0:29:fb:85:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C8:9A:48:5D:9D:05:ED:B4:40:D6:65:80:BF:6D:89:3F:48:CA:09
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LsiaSF2dBe20QNZlgL9tiT9Iygk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/23
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.132.181.0/24
45.151.3.0/24
85.209.120.0/24
194.15.52.0/24
195.211.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:7f:dd:34:86:84:6a:d9:a1:23:1b:8a:23:68:66:8c:14:1d:
94:3c:0c:61:99:2d:e7:00:64:4f:d6:ba:31:1c:76:0d:38:2d:
ee:81:81:e5:2b:e2:be:58:35:6a:fc:d6:f2:a2:c5:34:f9:4f:
89:45:b7:7a:2b:f9:e6:44:ce:26:21:7e:24:c7:98:4c:a3:2c:
2b:47:96:1f:6f:25:dd:f7:1c:c6:64:66:0e:ea:46:42:85:0d:
13:f8:a1:69:77:83:a9:5d:23:bf:3e:6a:12:95:85:07:46:77:
76:d5:fb:51:60:24:ed:98:bb:31:70:76:4b:83:0c:49:31:87:
6c:77:87:cf:3a:fa:33:1c:84:3b:9e:ff:ab:69:f0:e7:2f:03:
40:9c:ad:3f:7b:ea:f6:a6:c1:e5:7d:69:73:59:e1:c1:d4:ed:
f7:f0:86:9e:58:c9:08:a3:fa:48:95:0f:19:46:a4:6d:e1:5e:
97:40:c9:28:35:15:2e:1c:31:4f:a2:d1:cc:96:3f:66:c2:20:
7c:27:3a:a8:6f:d5:93:1a:67:fd:2d:83:0d:8f:c7:7a:48:e5:
7b:47:5c:b1:db:70:14:3d:c0:f4:58:3b:eb:81:49:c2:c3:d7:
de:99:2e:24:ac:bf:c4:81:9f:c6:10:47:ee:b3:8d:f4:5f:8f:
7b:c9:e7:d7
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZLiw+USuRRtL5gJZgKlb55NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQxMDMxMTMyOTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWM4OWE0ODVkOWQwNWVkYjQ0MGQ2NjU4MGJmNmQ4OTNmNDhjYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYhbKVs8okI1FtKALXAAJ8IaO7Gv
zfToTwpjCl9I8QJXvDz3LDSq/gCXuuTuXymA0OJOos02dEdMRJ4jrv1rbVWFmNsQ
JK9I1Baeo82fwBaTrnVxVimYjlbmBX3SItDLYy8YcXz2P2ES5KIxw+coo8tT+Yqc
uXCrPEkpgHUTwKoj6Ir/VZkAA3+eIHpEja1qVTGBNJkF14ckBaJcMOH4AG13pmqT
FNnkgdIaV08E8aTD6XPH/7oW+m7O1RQhHjzO5tJlBxulEmf8lEYjpkoCab7b2L3T
wDx8Ud310gxlNXrcuLX5YENcmLCqdf9GSW98SoORqY5Rxg4VDKAp+4V3WQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFC7ImkhdnQXttEDWZYC/bYk/SMoJMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvTHNpYVNGMmRCZTIwUU5abGdMOXRpVDlJeWdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBAjhsAwQA
LVFxAwQALVFzAwQALViLAwQALYS1AwQALZcDAwQAVdF4AwQAwg80AwQAw9O/MA0G
CSqGSIb3DQEBCwUAA4IBAQBbf900hoRq2aEjG4ojaGaMFB2UPAxhmS3nAGRP1rox
HHYNOC3ugYHlK+K+WDVq/NbyosU0+U+JRbd6K/nmRM4mIX4kx5hMoywrR5YfbyXd
9xzGZGYO6kZChQ0T+KFpd4OpXSO/PmoSlYUHRnd21ftRYCTtmLsxcHZLgwxJMYds
d4fPOvozHIQ7nv+rafDnLwNAnK0/e+r2psHlfWlzWeHB1O338IaeWMkIo/pIlQ8Z
RqRt4V6XQMkoNRUuHDFPotHMlj9mwiB8Jzqob9WTGmf9LYMNj8d6SOV7R1yx23AU
PcD0WDvrgUnCw9femS4krL/EgZ/GEEfus430X497yefX
-----END CERTIFICATE-----
Generated at Sun Nov 24 01:29:44 2024 by rpki-client on console-fra.rpki-client.org