Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/LZmORmdcSlCJr4aQcyyvX-9QHIc.roa
File: LZmORmdcSlCJr4aQcyyvX-9QHIc.roa (raw, json)
Hash identifier: +HH5TWgXN31cB0xH5BvsrxVpalOauY4e+NsQkBmI3k8=
Subject key identifier: 2D:99:8E:46:67:5C:4A:50:89:AF:86:90:73:2C:AF:5F:EF:50:1C:87
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018AB7A45F76E5BFCA75D54018CC4CAB9BE1
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/LZmORmdcSlCJr4aQcyyvX-9QHIc.roa
Signing time: Thu 21 Sep 2023 12:08:37 +0000
ROA not before: Thu 21 Sep 2023 12:08:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 91.228.119.0/24 maxlen: 24
91.236.237.0/24 maxlen: 24
46.151.32.0/24 maxlen: 24
46.151.34.0/24 maxlen: 24
46.151.35.0/24 maxlen: 24
46.151.33.0/24 maxlen: 24
77.36.55.0/24 maxlen: 24
77.36.57.0/24 maxlen: 24
77.36.54.0/24 maxlen: 24
77.36.60.0/24 maxlen: 24
77.36.65.0/24 maxlen: 24
93.120.120.0/22 maxlen: 22
77.36.68.0/22 maxlen: 22
91.229.6.0/24 maxlen: 24
188.191.252.0/22 maxlen: 22
178.159.147.0/24 maxlen: 24
91.223.158.0/24 maxlen: 24
91.237.48.0/24 maxlen: 24
176.96.93.0/24 maxlen: 24
176.96.48.0/22 maxlen: 22
77.36.2.0/23 maxlen: 24
77.36.4.0/22 maxlen: 22
91.239.222.0/23 maxlen: 23
93.120.12.0/22 maxlen: 22
91.236.77.0/24 maxlen: 24
93.120.38.0/24 maxlen: 24
93.120.36.0/24 maxlen: 24
93.120.37.0/24 maxlen: 24
91.232.254.0/24 maxlen: 24
93.120.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:a4:5f:76:e5:bf:ca:75:d5:40:18:cc:4c:ab:9b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Sep 21 12:08:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d998e46675c4a5089af8690732caf5fef501c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:19:e9:59:32:a7:4d:cd:91:d4:09:ed:da:
8e:28:02:17:2b:9c:39:e3:8d:2c:3b:db:58:c2:75:
19:46:03:8d:f0:62:34:bc:cf:61:a5:08:41:b3:c7:
fe:0e:fa:b1:0c:dc:ed:ad:0b:f6:20:d6:7a:39:1c:
05:a5:cf:0c:51:fe:a4:a6:03:41:c2:8a:8b:5e:47:
ac:de:b2:14:fb:19:a5:ae:8e:56:46:a9:e0:d2:87:
da:7c:f5:cb:9a:49:2c:df:7c:d8:18:ef:c1:c5:d1:
36:e6:d1:35:fc:09:ae:aa:22:ef:06:d8:99:fa:fd:
3f:de:80:7e:8c:db:bd:eb:82:b7:d5:bc:d6:cc:85:
5a:54:e1:19:a9:30:f3:f3:2b:08:dc:68:3f:72:f3:
46:6e:19:62:20:76:ec:3b:b8:96:d2:10:05:8c:de:
e4:91:f3:ab:85:98:f7:15:d1:13:d6:36:54:fc:ed:
34:59:00:1a:5f:46:86:16:7f:2a:b9:04:46:f9:9d:
8d:b9:16:14:e4:b7:e0:eb:11:72:9b:ef:45:af:5d:
72:e1:92:46:67:5f:d9:22:f5:c1:be:20:a4:9e:83:
3a:da:be:a2:4d:7e:4c:45:a1:4d:f3:f0:2c:dd:61:
5a:0d:73:b7:66:e4:e7:d2:f6:e2:c7:39:bb:ee:2c:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:99:8E:46:67:5C:4A:50:89:AF:86:90:73:2C:AF:5F:EF:50:1C:87
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/LZmORmdcSlCJr4aQcyyvX-9QHIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.32.0/22
77.36.2.0-77.36.7.255
77.36.54.0/23
77.36.57.0/24
77.36.60.0/24
77.36.65.0/24
77.36.68.0/22
91.223.158.0/24
91.228.119.0/24
91.229.6.0/24
91.232.254.0/24
91.236.77.0/24
91.236.237.0/24
91.237.48.0/24
91.239.222.0/23
93.120.12.0/22
93.120.36.0-93.120.38.255
93.120.46.0/24
93.120.120.0/22
176.96.48.0/22
176.96.93.0/24
178.159.147.0/24
188.191.252.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:21:db:a5:09:67:15:1d:4c:14:ac:52:15:90:93:90:82:f8:
f8:84:4e:dc:bf:fc:a6:61:ef:b1:fa:bd:57:d0:e6:94:41:77:
ce:48:0b:6f:e9:e5:c3:9e:91:45:5d:b5:2d:69:1f:45:db:3b:
02:c4:7f:e8:6c:1a:ed:9b:cc:0e:82:65:e2:e5:f6:91:a6:91:
b7:5e:ee:92:8e:41:b7:eb:d7:a2:d9:27:20:aa:11:ea:20:6c:
6d:0c:15:cb:f0:c6:bc:4d:6e:4f:55:dc:aa:a5:0a:a7:9d:81:
e0:d0:cd:d6:3a:88:98:91:9a:2e:b5:1f:55:8c:40:c3:f5:28:
02:08:64:93:0a:cf:22:f3:92:c4:5e:94:6f:76:1b:23:ff:2c:
be:0e:52:d4:b2:2b:02:78:71:65:d4:7b:41:f4:89:cf:c8:cd:
52:e1:6b:1b:09:2c:ea:37:a7:c3:ca:fe:e5:f4:0b:95:9d:5e:
09:5c:ab:77:7d:15:c1:24:94:d8:ed:66:c1:69:df:23:5f:82:
44:f2:75:df:b8:24:05:1f:25:f1:dd:38:39:40:ef:85:a0:f7:
35:6f:db:57:fb:04:99:2b:b8:76:4c:c4:70:21:45:fe:37:ca:
25:ca:10:86:5a:76:75:60:52:4a:9d:94:ad:70:ce:a0:15:13:
33:3f:c5:5d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgISAYq3pF925b/KddVAGMxMq5vhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjMwOTIxMTIwODM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDk5OGU0NjY3NWM0YTUwODlhZjg2OTA3MzJjYWY1ZmVmNTAxYzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6MZ6Vkyp03NkdQJ7dqOKAIXK5w5
440sO9tYwnUZRgON8GI0vM9hpQhBs8f+DvqxDNztrQv2INZ6ORwFpc8MUf6kpgNB
woqLXkes3rIU+xmlro5WRqng0ofafPXLmkks33zYGO/BxdE25tE1/AmuqiLvBtiZ
+v0/3oB+jNu964K31bzWzIVaVOEZqTDz8ysI3Gg/cvNGbhliIHbsO7iW0hAFjN7k
kfOrhZj3FdET1jZU/O00WQAaX0aGFn8quQRG+Z2NuRYU5Lfg6xFym+9Fr11y4ZJG
Z1/ZIvXBviCknoM62r6iTX5MRaFN8/As3WFaDXO3ZuTn0vbixzm77izKHQIDAQAB
o4ICojCCAp4wHQYDVR0OBBYEFC2ZjkZnXEpQia+GkHMsr1/vUByHMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvTFptT1JtZGNTbENKcjRhUWN5eXZYLTlRSEljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBoQQCAAEwgZoDBAIu
lyAwDAMEAU0kAgMEA00kAAMEAU0kNgMEAE0kOQMEAE0kPAMEAE0kQQMEAk0kRAME
AFvfngMEAFvkdwMEAFvlBgMEAFvo/gMEAFvsTQMEAFvs7QMEAFvtMAMEAVvv3gME
Al14DDAMAwQCXXgkAwQAXXgmAwQAXXguAwQCXXh4AwQCsGAwAwQAsGBdAwQAsp+T
AwQCvL/8MA0GCSqGSIb3DQEBCwUAA4IBAQCLIdulCWcVHUwUrFIVkJOQgvj4hE7c
v/ymYe+x+r1X0OaUQXfOSAtv6eXDnpFFXbUtaR9F2zsCxH/obBrtm8wOgmXi5faR
ppG3Xu6SjkG369ei2ScgqhHqIGxtDBXL8Ma8TW5PVdyqpQqnnYHg0M3WOoiYkZou
tR9VjEDD9SgCCGSTCs8i85LEXpRvdhsj/yy+DlLUsisCeHFl1HtB9InPyM1S4Wsb
CSzqN6fDyv7l9AuVnV4JXKt3fRXBJJTY7WbBad8jX4JE8nXfuCQFHyXx3Tg5QO+F
oPc1b9tX+wSZK7h2TMRwIUX+N8olyhCGWnZ1YFJKnZStcM6gFRMzP8Vd
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:10 2024 by rpki-client on console-fra.rpki-client.org