Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/l1yuXsu7hkg_LfxAPhslj6B_F-U.roa
File: l1yuXsu7hkg_LfxAPhslj6B_F-U.roa (raw, json)
Hash identifier: BLkJ4BAmTyN4TNbOk6sZYunRNSUifq6t1tzEAkPnz/4=
Subject key identifier: 97:5C:AE:5E:CB:BB:86:48:3F:2D:FC:40:3E:1B:25:8F:A0:7F:17:E5
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 01890231ADE254A60B3E2ED039A735E3EA92
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/l1yuXsu7hkg_LfxAPhslj6B_F-U.roa
Signing time: Wed 28 Jun 2023 13:29:17 +0000
ROA not before: Wed 28 Jun 2023 13:29:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31727
IP address blocks: 185.113.188.0/24 maxlen: 24
185.113.191.0/24 maxlen: 24
185.113.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 12:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:31:ad:e2:54:a6:0b:3e:2e:d0:39:a7:35:e3:ea:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Jun 28 13:29:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=975cae5ecbbb86483f2dfc403e1b258fa07f17e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d0:6d:c9:f3:56:53:97:b1:2b:77:3e:9b:d2:
14:5f:43:02:41:6d:2f:91:fd:eb:65:b4:e6:d4:a7:
fc:a3:7b:b6:19:25:20:5e:a9:55:4c:41:00:11:ba:
dd:e0:23:66:1a:89:f0:32:31:cd:32:ae:c6:16:4a:
6c:e2:94:88:ba:78:b8:0c:a9:66:d7:f0:65:50:f3:
c2:7d:58:c3:65:c3:d1:95:73:5e:c6:7a:ec:68:38:
f2:6d:2e:46:ed:95:66:d3:18:9c:83:43:d7:74:85:
0a:d5:35:0b:72:71:2c:04:fa:8b:f2:43:74:a1:e0:
b6:1d:2a:69:cc:95:e1:c1:13:37:37:d7:1a:cd:f6:
30:ad:f2:31:97:32:c4:c4:fb:17:b0:2f:aa:b2:24:
24:80:b0:3a:e0:fc:d2:d1:9a:d8:f0:0a:73:2b:f0:
ef:19:8c:c3:5f:64:1d:02:7f:ef:5b:40:91:b1:20:
f7:26:9a:8b:9c:fd:0e:8c:91:e0:09:bf:96:40:d8:
fd:0f:44:73:81:17:d6:b2:12:cf:7f:c6:94:7e:d9:
37:22:5c:64:07:62:a9:04:83:ab:86:8e:20:84:ae:
0b:a0:95:b8:07:06:4c:6c:d0:08:8d:c0:c7:c5:34:
2b:94:d0:6f:11:65:e6:aa:d5:f8:d3:96:30:f9:f2:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5C:AE:5E:CB:BB:86:48:3F:2D:FC:40:3E:1B:25:8F:A0:7F:17:E5
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/l1yuXsu7hkg_LfxAPhslj6B_F-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.188.0/24
185.113.190.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:ef:d5:f5:cb:1f:7e:1b:f2:a1:d1:6d:cf:fa:43:5a:df:16:
b4:a1:2c:d6:64:19:60:87:c1:5b:50:d0:3c:a4:85:1f:0b:d9:
ea:c3:79:66:f8:94:1e:a3:0a:ed:2e:36:78:b1:d1:ab:46:89:
b8:53:ee:bf:9e:4d:11:89:e3:ec:76:58:0f:1d:de:ef:05:ee:
73:5f:d3:86:33:a7:3e:e0:7d:e4:01:32:8e:48:d3:fd:ed:e6:
e1:cb:44:77:17:b7:b5:09:f1:58:8c:ad:26:84:9b:8a:42:f5:
09:ab:20:0a:f8:54:48:4b:10:77:e1:c0:52:eb:80:15:c5:59:
30:22:af:9c:da:db:86:f6:31:95:c1:7b:aa:78:89:02:ab:f4:
8e:04:b4:87:25:ad:05:c5:58:3b:e0:9f:02:f5:45:aa:06:72:
7f:77:34:e8:51:c9:09:5e:db:9e:53:2e:fb:b8:d8:dc:6f:64:
e8:ed:02:9a:5c:f3:1e:4c:de:b8:99:66:56:6e:f4:08:e3:d4:
12:ee:1d:95:e0:66:96:f6:dd:6a:25:ae:9c:ae:d5:40:fd:0e:
bc:71:37:77:ff:92:19:aa:3b:f1:e8:3d:9c:45:53:1a:9b:6e:
eb:43:e3:58:29:e8:c1:42:11:10:43:ea:f1:c4:20:65:03:67:
ab:c4:dd:1a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYkCMa3iVKYLPi7QOac14+qSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOGZhODUzM2RjYzgyMGJhMWFkNmZiMmIyZjAxNjEwMTA1
MzFkYjkwHhcNMjMwNjI4MTMyOTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzVjYWU1ZWNiYmI4NjQ4M2YyZGZjNDAzZTFiMjU4ZmEwN2YxN2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNBtyfNWU5exK3c+m9IUX0MCQW0v
kf3rZbTm1Kf8o3u2GSUgXqlVTEEAEbrd4CNmGonwMjHNMq7GFkps4pSIuni4DKlm
1/BlUPPCfVjDZcPRlXNexnrsaDjybS5G7ZVm0xicg0PXdIUK1TULcnEsBPqL8kN0
oeC2HSppzJXhwRM3N9cazfYwrfIxlzLExPsXsC+qsiQkgLA64PzS0ZrY8ApzK/Dv
GYzDX2QdAn/vW0CRsSD3JpqLnP0OjJHgCb+WQNj9D0RzgRfWshLPf8aUftk3Ilxk
B2KpBIOrho4ghK4LoJW4BwZMbNAIjcDHxTQrlNBvEWXmqtX405Yw+fIrmwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJdcrl7Lu4ZIPy38QD4bJY+gfxflMB8GA1UdIwQY
MBaAFCyPqFM9zIILoa1vsrLwFhAQUx25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2Et
OWU5NmFmNmQ2YThmLzEvbDF5dVhzdTdoa2dfTGZ4QVBoc2xqNkJfRi1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2EtOWU5NmFmNmQ2YThm
LzEvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuXG8AwQB
uXG+MA0GCSqGSIb3DQEBCwUAA4IBAQC979X1yx9+G/Kh0W3P+kNa3xa0oSzWZBlg
h8FbUNA8pIUfC9nqw3lm+JQeowrtLjZ4sdGrRom4U+6/nk0RiePsdlgPHd7vBe5z
X9OGM6c+4H3kATKOSNP97ebhy0R3F7e1CfFYjK0mhJuKQvUJqyAK+FRISxB34cBS
64AVxVkwIq+c2tuG9jGVwXuqeIkCq/SOBLSHJa0FxVg74J8C9UWqBnJ/dzToUckJ
XtueUy77uNjcb2To7QKaXPMeTN64mWZWbvQI49QS7h2V4GaW9t1qJa6crtVA/Q68
cTd3/5IZqjvx6D2cRVMam27rQ+NYKejBQhEQQ+rxxCBlA2erxN0a
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:43 2024 by rpki-client on console-ams.rpki-client.org