Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/LdWsDzz33N9U4jcwNOuw5XihPZ0.roa
File: LdWsDzz33N9U4jcwNOuw5XihPZ0.roa (raw, json)
Hash identifier: L/JORiVec18gWpaOywwurDomnGjbTrpZjBymRCAAVE0=
Subject key identifier: 2D:D5:AC:0F:3C:F7:DC:DF:54:E2:37:30:34:EB:B0:E5:78:A1:3D:9D
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018E26D2740D17A9BF55873527C6B5F2C621
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/LdWsDzz33N9U4jcwNOuw5XihPZ0.roa
Signing time: Sun 10 Mar 2024 05:25:10 +0000
ROA not before: Sun 10 Mar 2024 05:25:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 194.15.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 06:59:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:26:d2:74:0d:17:a9:bf:55:87:35:27:c6:b5:f2:c6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Mar 10 05:25:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dd5ac0f3cf7dcdf54e2373034ebb0e578a13d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3b:99:13:e4:93:1b:82:eb:41:d9:6c:2b:e8:
08:1f:18:0c:b6:00:71:f7:fd:25:b1:70:fa:a7:0d:
fb:9e:34:fa:83:c9:4b:11:b2:23:91:20:40:8c:7b:
80:93:3a:90:5e:7f:d1:c0:b2:fa:7c:5e:61:86:8b:
2a:68:d6:8c:c6:49:a2:7c:88:e8:09:2a:60:83:7f:
a3:83:0c:ed:ba:97:76:78:12:bb:fa:18:fb:8f:4f:
4c:d6:4e:af:27:6d:3f:61:cd:f0:b1:93:ea:28:af:
9c:3f:29:a0:5d:2f:27:55:bf:77:6c:41:56:dc:b2:
49:76:81:f5:8c:41:2d:a4:48:e3:71:06:3b:94:a3:
a5:dd:47:51:ca:47:9f:3f:83:30:af:dd:0c:d3:e8:
1c:d0:e6:b3:c5:8b:6a:e1:df:f0:82:da:16:ae:a0:
22:8d:e4:95:ef:9a:93:d5:37:04:d2:32:65:24:32:
dd:4c:77:14:05:51:96:90:b8:81:e4:fe:6e:be:16:
34:55:13:82:b5:a5:b7:43:56:16:27:36:6e:c2:2a:
cb:3d:4a:0c:3a:e9:16:ed:da:33:c2:d0:24:0e:f8:
f7:a5:26:a5:ee:6b:e5:a3:47:af:b1:a1:8d:63:28:
c8:ef:c1:88:fc:79:72:0b:9c:2f:99:6c:35:e1:3e:
b9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D5:AC:0F:3C:F7:DC:DF:54:E2:37:30:34:EB:B0:E5:78:A1:3D:9D
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/LdWsDzz33N9U4jcwNOuw5XihPZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.98.0/24
Signature Algorithm: sha256WithRSAEncryption
44:57:8c:6d:a7:65:f6:8b:af:19:f8:2a:56:97:3d:0d:e9:55:
ad:22:61:a2:24:29:b4:96:c9:a4:fa:85:4d:77:fc:74:a5:59:
97:d4:43:05:86:24:4b:59:c1:15:3a:dc:d9:12:5b:72:35:40:
0a:0e:23:0b:70:e1:60:8a:1a:e2:48:17:68:4c:fa:d6:08:2a:
4c:6f:c9:47:a7:00:f0:23:20:20:0f:16:ae:ce:b0:33:b7:34:
ae:6a:ed:ae:4f:c6:b6:9f:ba:ef:d6:d7:50:1e:ae:b1:d9:54:
7d:a9:cf:a2:6c:c7:4d:b4:b8:9f:dd:b7:54:cb:11:a0:c3:99:
11:a6:b3:54:3e:9f:52:e4:39:83:69:89:e5:9f:66:d0:8b:de:
49:c8:a7:7d:0f:c9:ef:4e:8b:48:b3:01:a4:ad:e8:3c:bb:21:
6b:e4:16:e1:b0:dd:32:fb:1e:a7:5c:82:1e:d0:21:74:13:92:
7f:e5:d5:25:1a:0f:e9:f8:c0:a8:28:4c:2c:49:5e:d9:53:11:
a8:47:44:c9:89:8f:e5:dc:af:23:1b:ea:ab:b6:59:0e:23:7a:
9c:5a:21:4f:0a:f2:1b:48:01:b5:83:f6:2c:32:3c:6c:6f:ad:
25:3d:5d:f2:d1:6a:ac:3e:1a:f8:f3:e1:2b:4b:8f:68:55:1c:
c8:9e:8f:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4m0nQNF6m/VYc1J8a18sYhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjQwMzEwMDUyNTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGQ1YWMwZjNjZjdkY2RmNTRlMjM3MzAzNGViYjBlNTc4YTEzZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzuZE+STG4LrQdlsK+gIHxgMtgBx
9/0lsXD6pw37njT6g8lLEbIjkSBAjHuAkzqQXn/RwLL6fF5hhosqaNaMxkmifIjo
CSpgg3+jgwztupd2eBK7+hj7j09M1k6vJ20/Yc3wsZPqKK+cPymgXS8nVb93bEFW
3LJJdoH1jEEtpEjjcQY7lKOl3UdRykefP4Mwr90M0+gc0OazxYtq4d/wgtoWrqAi
jeSV75qT1TcE0jJlJDLdTHcUBVGWkLiB5P5uvhY0VROCtaW3Q1YWJzZuwirLPUoM
OukW7dozwtAkDvj3pSal7mvlo0evsaGNYyjI78GI/HlyC5wvmWw14T65ZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC3VrA8899zfVOI3MDTrsOV4oT2dMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvTGRXc0R6ejMzTjlVNGpjd05PdXc1WGloUFowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg9iMA0G
CSqGSIb3DQEBCwUAA4IBAQBEV4xtp2X2i68Z+CpWlz0N6VWtImGiJCm0lsmk+oVN
d/x0pVmX1EMFhiRLWcEVOtzZEltyNUAKDiMLcOFgihriSBdoTPrWCCpMb8lHpwDw
IyAgDxauzrAztzSuau2uT8a2n7rv1tdQHq6x2VR9qc+ibMdNtLif3bdUyxGgw5kR
prNUPp9S5DmDaYnln2bQi95JyKd9D8nvTotIswGkreg8uyFr5BbhsN0y+x6nXIIe
0CF0E5J/5dUlGg/p+MCoKEwsSV7ZUxGoR0TJiY/l3K8jG+qrtlkOI3qcWiFPCvIb
SAG1g/YsMjxsb60lPV3y0WqsPhr48+ErS49oVRzIno9E
-----END CERTIFICATE-----
Generated at Tue Apr 9 11:49:18 2024 by rpki-client on console-fra.rpki-client.org