Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/LB6DMmeXkJiaPlXZk_lzJfYo1Ys.roa
File: LB6DMmeXkJiaPlXZk_lzJfYo1Ys.roa (raw, json)
Hash identifier: RjSYLOr5WdcLB45I21+gfYOcveL25x5We5LT43yCKXA=
Subject key identifier: 2C:1E:83:32:67:97:90:98:9A:3E:55:D9:93:F9:73:25:F6:28:D5:8B
Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial: 01857015299C8EA9A8EF8DFB2FF0346D3431
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/LB6DMmeXkJiaPlXZk_lzJfYo1Ys.roa
Signing time: Mon 02 Jan 2023 01:25:13 +0000
ROA not before: Mon 02 Jan 2023 01:25:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25180
IP address blocks: 37.17.184.0/24 maxlen: 24
37.17.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:29:9c:8e:a9:a8:ef:8d:fb:2f:f0:34:6d:34:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Validity
Not Before: Jan 2 01:25:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c1e8332679790989a3e55d993f97325f628d58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8d:02:df:25:ad:ad:25:00:db:c9:13:6b:00:
39:79:2c:4c:8a:9a:08:c6:3f:63:b0:b2:13:23:64:
87:2c:4f:47:db:48:89:e3:82:d7:aa:b6:ee:61:60:
32:07:a0:9a:47:55:f0:24:47:ac:46:ea:a6:47:de:
7c:ec:f0:29:80:49:9f:03:da:34:d4:77:df:dd:39:
da:03:de:76:ca:91:2f:df:95:be:74:fc:87:3e:21:
4b:5d:9f:dd:60:76:59:4b:ee:a5:af:33:ca:c3:76:
13:8a:ef:9c:47:ab:db:ff:2b:77:a9:11:0b:f2:69:
a0:36:17:b0:a4:3b:aa:03:4e:6f:d2:7e:1f:86:76:
81:ea:9e:11:bb:94:91:35:d0:d6:81:c2:52:82:c5:
39:93:e7:71:c6:71:0a:0a:13:87:ad:21:8d:9a:55:
03:48:f6:2e:08:5f:c8:10:5c:65:dc:22:ea:b7:14:
ec:b1:44:da:9a:4b:49:41:cc:20:21:09:2f:da:b9:
6c:54:2f:2d:e3:61:85:3e:bf:15:a6:98:af:4e:a9:
9a:a8:0c:ee:fe:21:61:c7:a2:db:e4:f7:8e:7a:32:
02:2f:61:8c:5a:ba:d6:df:ac:9f:e6:2f:d4:69:d5:
8d:be:e2:e6:b5:a6:9f:14:af:a3:09:42:bc:e7:2f:
1b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1E:83:32:67:97:90:98:9A:3E:55:D9:93:F9:73:25:F6:28:D5:8B
X509v3 Authority Key Identifier:
keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/LB6DMmeXkJiaPlXZk_lzJfYo1Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.184.0/24
37.17.187.0/24
Signature Algorithm: sha256WithRSAEncryption
19:13:4b:9a:40:17:44:d4:41:86:00:a0:5f:48:51:26:45:a4:
1d:ed:72:aa:a9:f6:db:34:e2:bd:4f:38:02:d4:3b:ac:79:72:
16:66:17:c3:28:d6:09:9d:8b:93:e2:8f:f8:d2:f6:4c:b8:c4:
56:11:50:ec:bd:8c:cb:de:ad:3c:23:8b:b4:85:26:e7:db:32:
64:f9:eb:ec:57:30:c7:2b:35:3d:82:a8:72:40:c8:f8:9b:ac:
64:de:49:7d:22:3e:9f:ea:3b:7e:1c:2a:9d:f8:42:e7:13:d8:
78:44:65:c0:e3:07:bd:5c:40:f5:0b:14:10:61:8b:c6:fa:51:
b1:01:26:34:a8:fb:27:84:07:26:59:88:d7:8a:5d:c8:92:d3:
33:26:57:b5:bd:63:cf:1b:5a:dc:a7:67:9d:35:99:24:41:92:
03:90:04:75:56:fc:56:98:71:4b:ec:11:23:3d:c6:ab:32:09:
91:25:28:29:b8:26:c0:90:31:94:08:62:58:09:56:93:7a:c6:
cd:55:0a:e0:03:a3:57:4c:17:15:3a:7e:b5:99:f3:bd:a3:95:
d7:79:0c:6a:f4:1d:6a:78:ee:d9:b5:62:81:4d:e0:0e:eb:2b:
81:e2:b8:f9:25:6b:03:f6:c8:a0:e2:89:77:8a:92:7d:43:8a:
0b:b6:b8:90
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwFSmcjqmo7437L/A0bTQxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDZmMDI2YjFmZTYzNmM5YTVkYTAxMWRjN2ZkNjljNTgx
ZDAyYjgwHhcNMjMwMTAyMDEyNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzFlODMzMjY3OTc5MDk4OWEzZTU1ZDk5M2Y5NzMyNWY2MjhkNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY0C3yWtrSUA28kTawA5eSxMipoI
xj9jsLITI2SHLE9H20iJ44LXqrbuYWAyB6CaR1XwJEesRuqmR9587PApgEmfA9o0
1Hff3TnaA952ypEv35W+dPyHPiFLXZ/dYHZZS+6lrzPKw3YTiu+cR6vb/yt3qREL
8mmgNhewpDuqA05v0n4fhnaB6p4Ru5SRNdDWgcJSgsU5k+dxxnEKChOHrSGNmlUD
SPYuCF/IEFxl3CLqtxTssUTamktJQcwgIQkv2rlsVC8t42GFPr8VppivTqmaqAzu
/iFhx6Lb5PeOejICL2GMWrrW36yf5i/UadWNvuLmtaafFK+jCUK85y8bdwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCwegzJnl5CYmj5V2ZP5cyX2KNWLMB8GA1UdIwQY
MBaAFCkG8Cax/mNsml2gEdx/1pxYHQK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82N2EzMmQtN2JmOC00YjA0LWFhMDUt
ODBhOTFiZTgzZTRiLzEvTEI2RE1tZVhrSmlhUGxYWmtfbHpKZllvMVlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82N2EzMmQtN2JmOC00YjA0LWFhMDUtODBhOTFiZTgzZTRi
LzEvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJRG4AwQA
JRG7MA0GCSqGSIb3DQEBCwUAA4IBAQAZE0uaQBdE1EGGAKBfSFEmRaQd7XKqqfbb
NOK9TzgC1DuseXIWZhfDKNYJnYuT4o/40vZMuMRWEVDsvYzL3q08I4u0hSbn2zJk
+evsVzDHKzU9gqhyQMj4m6xk3kl9Ij6f6jt+HCqd+ELnE9h4RGXA4we9XED1CxQQ
YYvG+lGxASY0qPsnhAcmWYjXil3IktMzJle1vWPPG1rcp2edNZkkQZIDkAR1VvxW
mHFL7BEjPcarMgmRJSgpuCbAkDGUCGJYCVaTesbNVQrgA6NXTBcVOn61mfO9o5XX
eQxq9B1qeO7ZtWKBTeAO6yuB4rj5JWsD9sig4ol3ipJ9Q4oLtriQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:14 2024 by rpki-client on console-fra.rpki-client.org