Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/Lvyl_VHlwndNSOxgkNHWhUOtWxY.roa
File: Lvyl_VHlwndNSOxgkNHWhUOtWxY.roa (raw, json)
Hash identifier: TjB7cWql1+oNYdAvBGpiga672fPXIQRMvwmCxRqTxsI=
Subject key identifier: 2E:FC:A5:FD:51:E5:C2:77:4D:48:EC:60:90:D1:D6:85:43:AD:5B:16
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 018A193BD1E766A871CBABBA8BA8CC43E113
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/Lvyl_VHlwndNSOxgkNHWhUOtWxY.roa
Signing time: Mon 21 Aug 2023 17:54:25 +0000
ROA not before: Mon 21 Aug 2023 17:54:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 81.31.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:19:3b:d1:e7:66:a8:71:cb:ab:ba:8b:a8:cc:43:e1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Aug 21 17:54:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2efca5fd51e5c2774d48ec6090d1d68543ad5b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:b4:cb:1c:cd:f9:eb:0d:82:52:34:0a:e7:
5d:a3:d0:1b:e4:13:73:b6:63:aa:b9:d2:ad:7e:17:
62:69:e9:4f:9e:d8:e0:22:8a:00:c4:bc:8f:70:0a:
98:9e:4c:a5:87:52:d0:94:6a:3a:ee:8f:91:c6:dd:
d7:36:f3:a9:e4:a8:6d:74:54:12:a2:5f:8e:f7:b4:
37:13:0b:0c:43:d1:bb:63:28:99:3d:fb:e5:c2:bf:
b8:f7:70:a3:90:6b:33:43:70:f9:62:72:a6:89:69:
bc:46:6f:fd:63:f4:50:8e:6c:2f:b9:fb:6d:1e:61:
4d:45:1c:46:5f:b7:9a:e2:51:b1:d7:08:dc:27:42:
24:b6:00:ab:21:8c:19:ba:e4:8c:02:57:8f:a9:8f:
7c:08:38:2d:d9:0d:0a:d1:d2:8c:7f:52:bd:11:d3:
4e:d8:27:53:4a:09:b2:50:9f:f3:db:8b:72:b6:a2:
51:8b:b0:31:80:f3:46:b1:3f:d8:6b:16:99:44:10:
dd:7e:93:f3:64:4f:b0:98:ee:89:87:26:17:76:e8:
97:6b:30:44:17:b7:84:40:c8:fc:a3:fd:64:c0:63:
86:d1:b9:e0:ae:a8:53:e1:4c:5e:8b:4a:a0:70:66:
9f:71:71:44:84:b1:fb:8a:fd:33:8d:28:18:6a:3c:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FC:A5:FD:51:E5:C2:77:4D:48:EC:60:90:D1:D6:85:43:AD:5B:16
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/Lvyl_VHlwndNSOxgkNHWhUOtWxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.199.0/24
Signature Algorithm: sha256WithRSAEncryption
52:30:f9:02:21:79:f4:af:b7:d3:4e:bb:8f:68:8c:ec:21:3a:
80:6e:a0:0e:77:fa:7b:0c:1c:39:c7:3f:dd:b2:84:d7:ee:8d:
43:19:6e:cd:c0:d2:ea:a6:0d:3e:d6:2e:9e:93:a9:f2:e2:d7:
aa:86:71:b8:18:26:de:56:a0:31:75:e0:a8:b5:00:6c:cc:eb:
9f:5c:34:a0:53:bb:5c:65:0c:cd:ec:40:b0:64:75:c1:20:9d:
ff:8e:d2:24:e8:ba:1b:04:3b:80:04:c3:63:5f:90:5f:30:3c:
a5:0b:a6:0f:63:62:14:cc:f4:da:77:86:56:60:1f:6c:fd:52:
70:5d:43:cf:a5:70:f8:50:c8:51:45:66:bc:32:f1:93:4d:7a:
fe:da:d2:c1:f6:c4:32:e4:b4:99:a4:48:03:44:f6:76:fa:4a:
33:cc:72:f0:7a:0f:10:e7:b4:fb:9c:73:11:7d:6c:31:03:f5:
a7:b6:b4:ac:05:25:5b:8f:91:94:fa:2b:dc:92:44:2e:a3:b3:
66:50:2b:84:34:d6:cd:11:6a:d8:d9:93:76:d3:41:23:ba:4d:
bc:78:c9:d5:e8:49:31:59:6d:ac:0a:a4:61:90:82:03:f8:fd:
d8:c1:dd:f1:90:8a:32:29:57:e9:49:90:d5:b5:66:9d:db:1a:
9b:1c:b6:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYoZO9HnZqhxy6u6i6jMQ+ETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGIxMDI0ZWEwNTZlNWVkNDk4ZjZlOWRkYzIwNjMyYmRm
NmM5YzUwHhcNMjMwODIxMTc1NDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWZjYTVmZDUxZTVjMjc3NGQ0OGVjNjA5MGQxZDY4NTQzYWQ1YjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwua0yxzN+esNglI0Cuddo9Ab5BNz
tmOqudKtfhdiaelPntjgIooAxLyPcAqYnkylh1LQlGo67o+Rxt3XNvOp5KhtdFQS
ol+O97Q3EwsMQ9G7YyiZPfvlwr+493CjkGszQ3D5YnKmiWm8Rm/9Y/RQjmwvuftt
HmFNRRxGX7ea4lGx1wjcJ0IktgCrIYwZuuSMAlePqY98CDgt2Q0K0dKMf1K9EdNO
2CdTSgmyUJ/z24tytqJRi7AxgPNGsT/YaxaZRBDdfpPzZE+wmO6JhyYXduiXazBE
F7eEQMj8o/1kwGOG0bngrqhT4Uxei0qgcGafcXFEhLH7iv0zjSgYajwgvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC78pf1R5cJ3TUjsYJDR1oVDrVsWMB8GA1UdIwQY
MBaAFFiLECTqBW5e1Jj26d3CBjK99snFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2Qt
NTY2MjhhNDZkZjQwLzEvTHZ5bF9WSGx3bmROU094Z2tOSFdoVU90V3hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2QtNTY2MjhhNDZkZjQw
LzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR/HMA0G
CSqGSIb3DQEBCwUAA4IBAQBSMPkCIXn0r7fTTruPaIzsITqAbqAOd/p7DBw5xz/d
soTX7o1DGW7NwNLqpg0+1i6ek6ny4teqhnG4GCbeVqAxdeCotQBszOufXDSgU7tc
ZQzN7ECwZHXBIJ3/jtIk6LobBDuABMNjX5BfMDylC6YPY2IUzPTad4ZWYB9s/VJw
XUPPpXD4UMhRRWa8MvGTTXr+2tLB9sQy5LSZpEgDRPZ2+kozzHLweg8Q57T7nHMR
fWwxA/WntrSsBSVbj5GU+ivckkQuo7NmUCuENNbNEWrY2ZN200Ejuk28eMnV6Ekx
WW2sCqRhkIID+P3Ywd3xkIoyKVfpSZDVtWad2xqbHLZj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:57 2024 by rpki-client on console-fra.rpki-client.org