Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/lljm3EVCRdQqpmT4ubwM-r6PbtQ.roa
File: lljm3EVCRdQqpmT4ubwM-r6PbtQ.roa (raw, json)
Hash identifier: 7AkCkQMerD3wmgAoZTSqJ87oG1dEw+G7EMq/QaN7fQc=
Subject key identifier: 96:58:E6:DC:45:42:45:D4:2A:A6:64:F8:B9:BC:0C:FA:BE:8F:6E:D4
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 01856F9DE634E39DE5B6C11374D6498E0894
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/lljm3EVCRdQqpmT4ubwM-r6PbtQ.roa
Signing time: Sun 01 Jan 2023 23:14:57 +0000
ROA not before: Sun 01 Jan 2023 23:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35393
IP address blocks: 185.88.68.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:e6:34:e3:9d:e5:b6:c1:13:74:d6:49:8e:08:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Jan 1 23:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9658e6dc454245d42aa664f8b9bc0cfabe8f6ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:68:4f:8b:6e:74:ed:f7:e5:39:f8:18:6b:
d5:6b:6d:6a:d4:fa:3c:cb:66:72:d3:4a:c8:83:5d:
6e:00:72:8a:61:51:2e:03:85:4f:36:7d:1a:af:fb:
59:c1:a7:c5:14:ef:32:93:cc:24:57:28:2b:9c:d3:
f3:fe:eb:93:4c:4d:83:df:20:bf:f4:96:cc:f0:23:
5a:62:13:ef:b2:94:3a:14:24:81:51:db:df:dd:a6:
bb:17:67:f5:bb:ed:c0:6a:95:d3:5c:43:8f:b8:d2:
68:2c:64:63:e8:b8:9a:0b:4a:d7:50:a7:d3:e8:44:
d2:8a:47:b6:1e:87:b5:1f:ad:e5:75:1a:30:89:cd:
37:87:89:3d:6a:a0:73:ab:31:b1:f6:9c:f4:ad:de:
40:5a:01:90:0f:8a:2f:45:5f:8f:52:d7:96:5d:2c:
9a:b4:52:16:cc:ef:c2:cc:b7:9e:d7:76:74:9a:eb:
45:d7:00:45:39:41:05:82:fe:35:94:09:e3:d5:a1:
82:50:f7:42:99:b5:e1:83:84:a9:93:68:2f:3d:a9:
21:4f:21:bd:47:63:0c:c5:ee:33:6c:5d:84:36:96:
83:b8:8b:59:b6:80:f1:83:c0:15:cd:84:1f:27:14:
6b:7d:58:af:38:63:5e:2d:2e:19:e2:32:25:54:92:
ea:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:58:E6:DC:45:42:45:D4:2A:A6:64:F8:B9:BC:0C:FA:BE:8F:6E:D4
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/lljm3EVCRdQqpmT4ubwM-r6PbtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.68.0/22
Signature Algorithm: sha256WithRSAEncryption
20:ad:c6:d8:17:60:1e:64:40:5f:e3:24:65:c7:f6:19:c7:03:
bd:34:30:40:dc:42:e1:47:45:1a:e6:54:5a:5d:8d:dd:c9:2c:
7b:dd:e9:b0:01:02:a5:72:ff:03:fb:f3:9e:d5:00:67:f6:76:
2f:4f:1c:18:03:68:d1:8a:19:c0:d1:fc:dd:c2:cb:85:e9:b1:
0f:a9:66:4b:da:49:22:e3:ad:da:6a:a3:e8:31:0c:19:82:4c:
18:81:18:e0:ae:bd:f4:71:c6:5d:3d:ba:6a:ad:27:c2:fc:cd:
e2:0f:e2:29:89:0c:1b:04:0c:2b:bf:75:40:ac:1b:2f:99:db:
b2:d9:d6:b9:c2:11:49:a1:dd:fd:16:89:9c:20:7e:4a:28:e5:
ea:b7:e7:b4:00:42:fb:59:91:13:80:ac:b0:50:45:6a:80:c7:
51:60:41:32:22:c6:06:36:b2:84:9a:e1:b1:90:fe:dc:6a:ae:
ed:76:9d:42:3c:72:da:ea:33:91:41:d5:d0:ab:e2:94:92:80:
ac:d0:45:60:f9:d9:12:99:73:28:10:83:96:f6:50:35:42:c4:
a4:20:99:26:fe:1b:6a:60:0f:a5:40:46:76:b7:be:9a:c4:05:
8b:dc:82:9c:c4:b0:90:e6:10:ad:cf:60:e1:69:e0:38:b3:e8:
fb:71:9d:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvneY0453ltsETdNZJjgiUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2E1ZjA0ODZiMThhMjQ0OGYyMzU4YTI3NDZjMWFiZDlm
YjJlNWUwHhcNMjMwMTAxMjMxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjU4ZTZkYzQ1NDI0NWQ0MmFhNjY0ZjhiOWJjMGNmYWJlOGY2ZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWNoT4tudO335Tn4GGvVa21q1Po8
y2Zy00rIg11uAHKKYVEuA4VPNn0ar/tZwafFFO8yk8wkVygrnNPz/uuTTE2D3yC/
9JbM8CNaYhPvspQ6FCSBUdvf3aa7F2f1u+3AapXTXEOPuNJoLGRj6LiaC0rXUKfT
6ETSike2Hoe1H63ldRowic03h4k9aqBzqzGx9pz0rd5AWgGQD4ovRV+PUteWXSya
tFIWzO/CzLee13Z0mutF1wBFOUEFgv41lAnj1aGCUPdCmbXhg4Spk2gvPakhTyG9
R2MMxe4zbF2ENpaDuItZtoDxg8AVzYQfJxRrfVivOGNeLS4Z4jIlVJLqTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJZY5txFQkXUKqZk+Lm8DPq+j27UMB8GA1UdIwQY
MBaAFIh6XwSGsYokSPI1iidGwavZ+y5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjct
MzNhYmM1M2MwZTc5LzEvbGxqbTNFVkNSZFFxcG1UNHVid00tcjZQYnRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjctMzNhYmM1M2MwZTc5
LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVhEMA0G
CSqGSIb3DQEBCwUAA4IBAQAgrcbYF2AeZEBf4yRlx/YZxwO9NDBA3ELhR0Ua5lRa
XY3dySx73emwAQKlcv8D+/Oe1QBn9nYvTxwYA2jRihnA0fzdwsuF6bEPqWZL2kki
463aaqPoMQwZgkwYgRjgrr30ccZdPbpqrSfC/M3iD+IpiQwbBAwrv3VArBsvmduy
2da5whFJod39FomcIH5KKOXqt+e0AEL7WZETgKywUEVqgMdRYEEyIsYGNrKEmuGx
kP7caq7tdp1CPHLa6jORQdXQq+KUkoCs0EVg+dkSmXMoEIOW9lA1QsSkIJkm/htq
YA+lQEZ2t76axAWL3IKcxLCQ5hCtz2DhaeA4s+j7cZ0v
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:54 2024 by rpki-client on console-ams.rpki-client.org