Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/LVPJJkY3CDbEg5oR8NTdU5iPRlY.roa
File: LVPJJkY3CDbEg5oR8NTdU5iPRlY.roa (raw, json)
Hash identifier: 7RhdCKDefRK/xHHd9leNBzu0g2B7HCX9clJ5mOo6GCE=
Subject key identifier: 2D:53:C9:26:46:37:08:36:C4:83:9A:11:F0:D4:DD:53:98:8F:46:56
Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Certificate serial: 0185703996555A0DD5FA170402DB4C35DBA7
Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/LVPJJkY3CDbEg5oR8NTdU5iPRlY.roa
Signing time: Mon 02 Jan 2023 02:05:00 +0000
ROA not before: Mon 02 Jan 2023 02:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198725
IP address blocks: 185.21.196.0/22 maxlen: 22
91.220.201.0/24 maxlen: 24
2a02:c280::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:96:55:5a:0d:d5:fa:17:04:02:db:4c:35:db:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Validity
Not Before: Jan 2 02:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d53c92646370836c4839a11f0d4dd53988f4656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:d4:95:ca:49:aa:08:f5:41:58:29:7d:39:
94:61:96:e6:a7:07:4c:ec:e0:3f:30:ab:33:92:ca:
fe:46:a3:3b:95:e5:72:83:d6:4d:fa:01:6e:11:88:
48:e0:b7:bf:4c:ba:d5:33:23:b9:30:3f:57:a0:17:
af:36:39:78:be:62:b3:94:0f:c1:19:4e:54:56:da:
c5:43:97:5b:58:a1:9a:b1:06:ba:8e:0b:ab:ac:42:
b9:51:cc:fc:6b:1d:97:ca:63:6b:1f:03:7e:fa:37:
e5:2a:d7:15:15:d7:d9:1d:4d:a2:72:f7:a1:74:cd:
fe:21:b9:38:ab:99:db:80:42:75:d7:40:7e:05:6a:
70:49:85:99:69:c2:b4:bd:bf:01:bc:ad:cb:92:bb:
52:ac:5a:4d:74:69:b4:5d:01:c3:d6:40:bf:a7:cc:
7f:d8:c1:ee:ef:97:bd:dc:1b:a2:c4:46:f7:c2:29:
9a:e6:09:13:a7:3a:9e:8e:ba:60:50:da:55:a1:44:
46:e0:92:1b:df:3a:70:b8:bb:bc:b4:56:21:c3:2c:
51:4f:5d:da:a5:a4:ac:f4:0a:a4:48:d3:48:89:59:
91:62:65:b0:3f:1c:a8:40:b8:85:20:b2:9b:f8:66:
42:65:e8:dd:7b:46:ac:f6:ca:78:bb:00:24:62:3a:
a3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:53:C9:26:46:37:08:36:C4:83:9A:11:F0:D4:DD:53:98:8F:46:56
X509v3 Authority Key Identifier:
keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/LVPJJkY3CDbEg5oR8NTdU5iPRlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.201.0/24
185.21.196.0/22
IPv6:
2a02:c280::/29
Signature Algorithm: sha256WithRSAEncryption
46:8c:37:22:98:76:f4:41:47:0f:d7:24:3a:fa:78:0c:e6:91:
b2:b9:d9:c9:84:1c:39:85:0f:78:67:fd:cc:a4:55:04:cf:2d:
75:86:09:cf:db:6d:ae:a6:e2:95:24:54:8c:b8:7a:f5:b5:bf:
00:7d:0b:05:f9:bf:b3:e1:6d:8c:0a:72:05:87:cd:d4:a0:0c:
a5:65:1f:ab:29:e0:bc:64:35:be:c4:be:4d:6e:48:20:fc:ee:
c6:a8:57:f8:a5:54:dd:ca:65:e9:ac:3b:56:1a:5d:a0:3a:3c:
7b:42:53:d1:49:6e:98:89:eb:90:77:0a:05:f5:95:7c:ba:f8:
33:28:0b:01:19:7f:23:54:5c:22:88:0f:3a:4f:34:7a:53:11:
ab:8d:e5:4f:14:4e:6f:2f:01:21:2b:41:b9:f6:e4:de:03:39:
e2:41:e1:95:77:68:2d:4e:1f:b4:f7:5c:53:87:1b:ea:8a:ea:
f7:27:aa:2e:7c:a6:06:db:7d:18:f7:a7:2c:37:f4:bc:e2:89:
40:9d:9b:81:a2:0f:9f:16:43:2b:48:7f:55:7d:9d:93:36:d2:
38:9c:72:02:fa:c8:55:6b:2e:3a:f6:8f:ea:37:af:49:f5:ea:
fa:60:e0:9c:f6:fa:10:cf:8a:db:dd:4d:26:0c:3f:fe:e9:bf:
75:b1:1d:6b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVwOZZVWg3V+hcEAttMNdunMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGQ0MjI0MzE5Nzg2NGJiNDgxNjQ2MWQ0ZDA2NTNhYjBi
YTMyYmEwHhcNMjMwMTAyMDIwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDUzYzkyNjQ2MzcwODM2YzQ4MzlhMTFmMGQ0ZGQ1Mzk4OGY0NjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4fUlcpJqgj1QVgpfTmUYZbmpwdM
7OA/MKszksr+RqM7leVyg9ZN+gFuEYhI4Le/TLrVMyO5MD9XoBevNjl4vmKzlA/B
GU5UVtrFQ5dbWKGasQa6jgurrEK5Ucz8ax2XymNrHwN++jflKtcVFdfZHU2icveh
dM3+Ibk4q5nbgEJ110B+BWpwSYWZacK0vb8BvK3LkrtSrFpNdGm0XQHD1kC/p8x/
2MHu75e93BuixEb3wima5gkTpzqejrpgUNpVoURG4JIb3zpwuLu8tFYhwyxRT13a
paSs9AqkSNNIiVmRYmWwPxyoQLiFILKb+GZCZejde0as9sp4uwAkYjqj7wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFC1TySZGNwg2xIOaEfDU3VOYj0ZWMB8GA1UdIwQY
MBaAFMndQiQxl4ZLtIFkYdTQZTqwujK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZGExNWEtOTdhMC00YTc3LTliY2Et
NjRhNzE1YTVmNjliLzEvTFZQSkprWTNDRGJFZzVvUjhOVGRVNWlQUmxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81ZGExNWEtOTdhMC00YTc3LTliY2EtNjRhNzE1YTVmNjli
LzEveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9zJAwQC
uRXEMA0EAgACMAcDBQMqAsKAMA0GCSqGSIb3DQEBCwUAA4IBAQBGjDcimHb0QUcP
1yQ6+ngM5pGyudnJhBw5hQ94Z/3MpFUEzy11hgnP222upuKVJFSMuHr1tb8AfQsF
+b+z4W2MCnIFh83UoAylZR+rKeC8ZDW+xL5Nbkgg/O7GqFf4pVTdymXprDtWGl2g
Ojx7QlPRSW6YieuQdwoF9ZV8uvgzKAsBGX8jVFwiiA86TzR6UxGrjeVPFE5vLwEh
K0G59uTeAzniQeGVd2gtTh+091xThxvqiur3J6oufKYG230Y96csN/S84olAnZuB
og+fFkMrSH9VfZ2TNtI4nHIC+shVay469o/qN69J9er6YOCc9voQz4rb3U0mDD/+
6b91sR1r
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:59 2024 by rpki-client on console-ams.rpki-client.org