Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/LVJIwDr7scG87dA3vOF2I2baW8Q.roa
File: LVJIwDr7scG87dA3vOF2I2baW8Q.roa (raw, json)
Hash identifier: +gFvJcvG/CddR7iVt6qlx4dPVvIE/BEmIZerB5xYaio=
Subject key identifier: 2D:52:48:C0:3A:FB:B1:C1:BC:ED:D0:37:BC:E1:76:23:66:DA:5B:C4
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0185C49CAA108376D2D930BCEEBFA0D5F02B
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/LVJIwDr7scG87dA3vOF2I2baW8Q.roa
Signing time: Wed 18 Jan 2023 11:21:19 +0000
ROA not before: Wed 18 Jan 2023 11:21:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 91.243.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Jan 2023 09:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c4:9c:aa:10:83:76:d2:d9:30:bc:ee:bf:a0:d5:f0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 18 11:21:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d5248c03afbb1c1bcedd037bce1762366da5bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:10:ce:9f:0c:95:d8:97:e5:af:05:b2:8d:1f:
0c:10:04:a4:93:0c:9b:5e:e8:50:ba:7d:59:b2:da:
9c:7d:1f:55:c9:40:0c:59:40:b3:5d:84:97:d7:fe:
31:f4:58:0f:cc:d8:d4:0e:27:f2:41:cd:c3:a3:ad:
67:d4:93:48:cd:7a:89:68:e6:e4:da:02:c4:e2:bc:
68:62:dd:ee:98:d9:6f:60:18:c0:32:62:8c:dc:e5:
59:28:5d:14:95:cb:1e:f8:41:3f:0c:ea:37:a7:09:
e0:cb:eb:70:a8:32:10:b4:38:d3:6a:a9:e3:10:a1:
16:75:68:ac:62:18:17:2d:e1:2e:df:88:66:36:65:
4d:7c:fe:9f:39:e1:af:1e:81:2c:d1:1b:5e:9c:1b:
e1:ae:38:05:fe:17:6f:ff:cc:dc:c8:51:28:86:3f:
0f:02:7d:bd:61:1d:9f:ba:ba:ba:2f:c3:09:ef:df:
47:1d:03:3b:97:a6:04:b3:6a:e6:60:87:33:99:6e:
71:51:3d:d8:f3:f2:69:ff:1c:b2:c9:55:68:33:3c:
30:07:b4:7a:34:22:a3:e8:b0:67:30:cd:64:07:42:
86:1b:10:f8:b4:32:d0:da:7a:43:16:24:72:17:05:
8b:49:db:ac:5d:9a:68:90:5e:4d:1f:d5:cb:c3:c2:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:52:48:C0:3A:FB:B1:C1:BC:ED:D0:37:BC:E1:76:23:66:DA:5B:C4
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/LVJIwDr7scG87dA3vOF2I2baW8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.179.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c4:6f:be:e2:e9:12:bc:56:2e:54:1a:36:67:27:3a:7d:44:
8d:b8:ed:02:68:73:95:96:9b:00:40:34:1e:a1:99:0f:83:80:
bc:1b:b2:57:0d:64:2e:f9:07:9c:aa:9b:b7:f8:4c:6e:25:e0:
e1:d9:95:3b:d3:4f:71:15:6c:ca:34:19:a7:99:ba:ea:dc:75:
c9:97:0f:e7:e1:05:e1:7e:79:ef:2d:cf:c4:72:94:18:6f:e5:
e7:78:c4:35:4a:13:55:a5:8e:81:5e:ba:76:57:70:3b:5c:6c:
43:fd:02:02:d0:54:63:5f:90:67:0d:97:09:33:31:23:57:84:
47:ef:8d:aa:95:2f:d6:e3:eb:db:2f:86:46:e6:de:94:fe:ce:
d7:45:a0:f1:83:35:14:0f:87:a2:34:f8:f1:00:80:51:e8:f6:
e8:36:6d:95:57:b9:ed:44:9d:a5:5e:cb:54:22:51:f3:d6:3e:
97:2d:9f:81:d3:d6:d3:10:5e:88:7c:61:eb:2f:f4:53:2a:4d:
d9:9e:84:52:62:2d:39:82:d9:b9:f1:44:aa:65:f2:09:4d:ea:
25:3c:eb:ce:96:79:b7:ff:a3:b4:58:b0:33:84:c5:5d:97:d5:
fd:b6:2d:2f:e4:4d:6b:32:bb:a5:b1:a2:1e:65:19:84:62:ca:
c2:f1:29:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXEnKoQg3bS2TC87r+g1fArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjMwMTE4MTEyMTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDUyNDhjMDNhZmJiMWMxYmNlZGQwMzdiY2UxNzYyMzY2ZGE1YmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxDOnwyV2JflrwWyjR8MEASkkwyb
XuhQun1ZstqcfR9VyUAMWUCzXYSX1/4x9FgPzNjUDifyQc3Do61n1JNIzXqJaObk
2gLE4rxoYt3umNlvYBjAMmKM3OVZKF0Ulcse+EE/DOo3pwngy+twqDIQtDjTaqnj
EKEWdWisYhgXLeEu34hmNmVNfP6fOeGvHoEs0RtenBvhrjgF/hdv/8zcyFEohj8P
An29YR2furq6L8MJ799HHQM7l6YEs2rmYIczmW5xUT3Y8/Jp/xyyyVVoMzwwB7R6
NCKj6LBnMM1kB0KGGxD4tDLQ2npDFiRyFwWLSdusXZpokF5NH9XLw8J68wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC1SSMA6+7HBvO3QN7zhdiNm2lvEMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvTFZKSXdEcjdzY0c4N2RBM3ZPRjJJMmJhVzhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/OzMA0G
CSqGSIb3DQEBCwUAA4IBAQAwxG++4ukSvFYuVBo2Zyc6fUSNuO0CaHOVlpsAQDQe
oZkPg4C8G7JXDWQu+Qecqpu3+ExuJeDh2ZU7009xFWzKNBmnmbrq3HXJlw/n4QXh
fnnvLc/EcpQYb+XneMQ1ShNVpY6BXrp2V3A7XGxD/QIC0FRjX5BnDZcJMzEjV4RH
742qlS/W4+vbL4ZG5t6U/s7XRaDxgzUUD4eiNPjxAIBR6PboNm2VV7ntRJ2lXstU
IlHz1j6XLZ+B09bTEF6IfGHrL/RTKk3ZnoRSYi05gtm58USqZfIJTeolPOvOlnm3
/6O0WLAzhMVdl9X9ti0v5E1rMrulsaIeZRmEYsrC8SlD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:55 2024 by rpki-client on console-fra.rpki-client.org