Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/LZYqUgJnszgOAZLDD5-V5QyAHjs.roa
File: LZYqUgJnszgOAZLDD5-V5QyAHjs.roa (raw, json)
Hash identifier: /vTdWWcZb3aH2yyvWdOV7SL9TmwqzVXFHlqeSn6F2Ew=
Subject key identifier: 2D:96:2A:52:02:67:B3:38:0E:01:92:C3:0F:9F:95:E5:0C:80:1E:3B
Certificate issuer: /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial: 0188AF5142FB5DCAC00EF9A75DF8530BB6FF
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/LZYqUgJnszgOAZLDD5-V5QyAHjs.roa
Signing time: Mon 12 Jun 2023 11:15:18 +0000
ROA not before: Mon 12 Jun 2023 11:15:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52215
IP address blocks: 91.225.16.0/22 maxlen: 22
194.11.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:51:42:fb:5d:ca:c0:0e:f9:a7:5d:f8:53:0b:b6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Validity
Not Before: Jun 12 11:15:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d962a520267b3380e0192c30f9f95e50c801e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5c:b9:48:49:b9:98:4c:5e:ac:6d:3d:9c:35:
bf:bb:fb:b1:53:8f:eb:9d:da:a7:83:92:7e:e2:79:
ab:83:b0:67:f1:ea:91:8c:d7:66:21:c2:18:d9:45:
e9:31:33:bd:b1:35:f4:54:83:4f:66:b9:5a:51:17:
18:0b:b7:00:cd:76:23:d6:59:34:1a:5c:76:3f:2a:
37:7a:4a:e2:41:5d:e7:a8:eb:e2:93:07:b8:9c:b8:
a2:44:34:2f:82:5d:76:8e:86:48:d2:86:fe:7e:3b:
a5:f4:38:11:84:cc:3b:8e:46:4d:e0:e8:58:0b:65:
00:a5:1c:b2:f7:68:f0:13:70:d8:1e:a4:38:43:23:
f8:54:4a:70:ff:0a:b9:0f:c0:59:55:7a:c4:6e:91:
15:be:91:97:ca:64:8b:17:38:c4:39:84:f1:f1:82:
12:12:d3:4e:1e:ac:b8:50:7b:97:90:27:83:0b:36:
ac:df:e2:85:79:b5:70:7e:eb:ca:79:4d:0c:2c:35:
3f:d0:7e:10:5e:af:55:64:9a:6d:70:bd:cb:45:13:
9d:ee:a0:1e:cd:a0:5c:f6:62:b1:eb:d2:89:15:96:
02:3a:9b:9f:50:93:00:fd:ad:9d:03:4f:d2:f5:33:
5f:fe:4a:8b:46:9a:2c:69:51:a7:44:78:69:3c:e1:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:96:2A:52:02:67:B3:38:0E:01:92:C3:0F:9F:95:E5:0C:80:1E:3B
X509v3 Authority Key Identifier:
keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/LZYqUgJnszgOAZLDD5-V5QyAHjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.16.0/22
194.11.18.0/24
Signature Algorithm: sha256WithRSAEncryption
00:83:47:a0:46:9d:13:ce:5b:80:4c:c4:cf:59:c6:28:57:3d:
a6:a7:35:64:50:65:d8:3b:a3:d0:23:c8:38:ad:ae:eb:9e:b2:
5e:b9:bc:d5:25:84:33:ad:75:1e:20:68:de:dc:3d:f7:10:b4:
0d:7f:4e:d2:b5:a5:75:c1:bc:fa:20:7d:b7:45:c8:3b:b1:83:
da:d6:d0:84:3a:2c:76:49:66:2f:7b:5f:e6:55:fb:f5:be:32:
6b:b2:6f:d6:21:07:15:ca:61:3b:98:92:88:2d:82:59:c7:a2:
c0:ff:14:ac:57:ea:43:9b:b3:9e:c1:f5:33:de:d6:45:d7:9c:
29:b5:c5:3c:64:f8:00:01:bf:a2:59:3d:63:45:88:5c:55:cf:
11:60:22:4f:59:73:2e:7c:5f:97:d9:a6:61:b7:89:d3:1f:00:
1b:ec:ea:31:ba:d7:f9:23:a8:4b:d6:92:6f:d9:e5:a6:3a:33:
51:fc:bb:3a:5a:ce:ca:b3:da:9e:32:9f:b2:7a:20:38:0a:ec:
62:be:88:a6:ea:a5:9a:bd:b7:e8:aa:37:87:eb:99:40:ce:eb:
b3:25:9c:e9:8e:d1:e1:d8:7b:d5:16:e6:95:d9:ce:03:20:5d:
18:b1:0e:78:d3:e9:58:c5:93:e9:dd:b6:32:cd:10:e7:2e:43:
c4:00:d5:ae
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYivUUL7XcrADvmnXfhTC7b/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZGRhZjIxMzI1N2QxNzZkZjUwYWE2ZTc3NjQ4YTBjYzcy
YTVmYTEwHhcNMjMwNjEyMTExNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDk2MmE1MjAyNjdiMzM4MGUwMTkyYzMwZjlmOTVlNTBjODAxZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVy5SEm5mExerG09nDW/u/uxU4/r
ndqng5J+4nmrg7Bn8eqRjNdmIcIY2UXpMTO9sTX0VINPZrlaURcYC7cAzXYj1lk0
Glx2Pyo3ekriQV3nqOvikwe4nLiiRDQvgl12joZI0ob+fjul9DgRhMw7jkZN4OhY
C2UApRyy92jwE3DYHqQ4QyP4VEpw/wq5D8BZVXrEbpEVvpGXymSLFzjEOYTx8YIS
EtNOHqy4UHuXkCeDCzas3+KFebVwfuvKeU0MLDU/0H4QXq9VZJptcL3LRROd7qAe
zaBc9mKx69KJFZYCOpufUJMA/a2dA0/S9TNf/kqLRposaVGnRHhpPOFcQwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC2WKlICZ7M4DgGSww+fleUMgB47MB8GA1UdIwQY
MBaAFJ/dryEyV9F231CqbndkigzHKl+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjkydklUSlgwWGJmVUtwdWQyU0tETWNxWDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81NGE1OGItN2EzMi00NmJjLTg1YzAt
MzBiNzY0ZWI0OTAwLzEvTFpZcVVnSm5zemdPQVpMREQ1LVY1UXlBSGpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81NGE1OGItN2EzMi00NmJjLTg1YzAtMzBiNzY0ZWI0OTAw
LzEvbjkydklUSlgwWGJmVUtwdWQyU0tETWNxWDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+EQAwQA
wgsSMA0GCSqGSIb3DQEBCwUAA4IBAQAAg0egRp0TzluATMTPWcYoVz2mpzVkUGXY
O6PQI8g4ra7rnrJeubzVJYQzrXUeIGje3D33ELQNf07StaV1wbz6IH23Rcg7sYPa
1tCEOix2SWYve1/mVfv1vjJrsm/WIQcVymE7mJKILYJZx6LA/xSsV+pDm7OewfUz
3tZF15wptcU8ZPgAAb+iWT1jRYhcVc8RYCJPWXMufF+X2aZht4nTHwAb7Ooxutf5
I6hL1pJv2eWmOjNR/Ls6Ws7Ks9qeMp+yeiA4Cuxivoim6qWavbfoqjeH65lAzuuz
JZzpjtHh2HvVFuaV2c4DIF0YsQ540+lYxZPp3bYyzRDnLkPEANWu
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:17 2023 by rpki-client on console-ams.rpki-client.org