Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/LxA4qejCTyaMxlO82YIKKUdjFwE.roa
File: LxA4qejCTyaMxlO82YIKKUdjFwE.roa (raw, json)
Hash identifier: GMxfN34CSToF/sLjhbbW/64E6xAb4zzTouHZGwfQN4k=
Subject key identifier: 2F:10:38:A9:E8:C2:4F:26:8C:C6:53:BC:D9:82:0A:29:47:63:17:01
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0192AE54A911C8C4654C55E09E9E13B0A222
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/LxA4qejCTyaMxlO82YIKKUdjFwE.roa
Signing time: Mon 21 Oct 2024 09:07:16 +0000
ROA not before: Mon 21 Oct 2024 09:07:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.218.42.0/24 maxlen: 24
185.173.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 09:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:54:a9:11:c8:c4:65:4c:55:e0:9e:9e:13:b0:a2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Oct 21 09:07:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f1038a9e8c24f268cc653bcd9820a2947631701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:99:f4:66:e0:8f:1b:ed:88:79:b4:62:28:
5a:1a:d7:ab:03:b2:3a:90:4e:fa:cb:3f:7c:5e:40:
8d:a1:49:41:b1:6c:9a:cf:88:0b:60:5b:e0:2f:5d:
a3:9e:3c:29:f0:98:2f:29:71:56:f6:09:65:8e:6b:
e0:a8:74:6b:d3:38:b2:a9:51:37:a7:2d:b4:d3:58:
f3:40:4e:1a:31:20:d5:29:d6:18:5a:6f:f0:c6:ef:
43:9c:7b:e9:01:11:4c:4c:62:ea:3e:71:07:ed:89:
44:5d:a6:09:92:f9:8b:89:c8:b0:33:34:0d:c7:14:
c0:c3:79:b8:45:65:c0:e1:77:f9:6f:b4:28:17:60:
e4:f5:d9:81:9e:c0:2a:2f:2f:2a:51:6b:ca:32:0a:
aa:30:20:e8:2f:6b:dd:06:2a:8e:5e:20:76:7f:67:
eb:d3:04:65:51:1d:41:6b:46:b0:e6:9e:b2:45:a5:
99:51:5d:31:5f:10:71:a4:65:48:f0:45:cc:74:b3:
b7:2f:ce:d3:43:78:89:ba:a5:fe:a9:40:84:75:d4:
17:67:86:8f:1b:03:1e:76:3d:f3:b1:4e:6c:ce:a9:
32:c0:f1:60:24:59:bb:4f:ec:4d:28:06:75:c7:4b:
2c:b3:bc:42:e2:52:ad:d1:65:af:bd:77:0d:dd:89:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:10:38:A9:E8:C2:4F:26:8C:C6:53:BC:D9:82:0A:29:47:63:17:01
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/LxA4qejCTyaMxlO82YIKKUdjFwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
185.173.144.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5a:13:57:98:4d:56:45:f4:7a:c6:87:a5:09:15:53:8b:f5:
0a:1e:9e:a4:c8:80:42:bf:c8:f9:fe:f1:94:66:ee:b9:2f:41:
75:d1:ac:5a:10:f4:8b:84:9c:0f:f4:4f:55:f2:4c:7b:95:bf:
ba:bd:64:da:2d:63:54:77:5f:2d:c5:4b:f0:d0:72:e1:be:e2:
8b:b8:87:cf:1f:ef:b9:3e:08:68:eb:b6:5e:3f:3c:6d:12:83:
31:28:6b:81:9e:b2:aa:e6:10:64:5c:0f:9c:2c:19:95:1b:78:
6b:9d:db:4b:7c:ec:2b:bc:60:0d:a8:aa:e8:d1:cd:bb:05:93:
3e:58:ee:1d:94:a4:05:b5:b5:7b:96:e2:2f:45:24:25:e0:9f:
20:fc:27:1a:6f:48:f3:66:53:ab:37:44:7a:54:8a:7a:ac:04:
01:6a:c5:64:a4:c1:c3:0b:4e:15:ab:18:79:f3:45:9a:c6:c8:
e5:36:d8:b5:ca:67:f9:db:14:42:4a:a2:14:8d:10:01:c7:8e:
5d:7e:94:3d:8d:ff:ca:1f:a6:88:59:48:92:eb:39:4c:64:22:
f3:6a:71:80:c7:cd:22:d9:34:08:41:38:ab:f8:44:71:f4:5c:
d8:f5:67:01:0f:93:e2:39:7f:8e:0f:a3:11:22:c2:e6:18:69:
97:05:55:e7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZKuVKkRyMRlTFXgnp4TsKIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjQxMDIxMDkwNzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjEwMzhhOWU4YzI0ZjI2OGNjNjUzYmNkOTgyMGEyOTQ3NjMxNzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutSZ9GbgjxvtiHm0YihaGterA7I6
kE76yz98XkCNoUlBsWyaz4gLYFvgL12jnjwp8JgvKXFW9glljmvgqHRr0ziyqVE3
py2001jzQE4aMSDVKdYYWm/wxu9DnHvpARFMTGLqPnEH7YlEXaYJkvmLiciwMzQN
xxTAw3m4RWXA4Xf5b7QoF2Dk9dmBnsAqLy8qUWvKMgqqMCDoL2vdBiqOXiB2f2fr
0wRlUR1Ba0aw5p6yRaWZUV0xXxBxpGVI8EXMdLO3L87TQ3iJuqX+qUCEddQXZ4aP
GwMedj3zsU5szqkywPFgJFm7T+xNKAZ1x0sss7xC4lKt0WWvvXcN3YnrkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC8QOKnowk8mjMZTvNmCCilHYxcBMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvTHhBNHFlakNUeWFNeGxPODJZSUtLVWRqRndFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWNoqAwQA
ua2QMA0GCSqGSIb3DQEBCwUAA4IBAQBzWhNXmE1WRfR6xoelCRVTi/UKHp6kyIBC
v8j5/vGUZu65L0F10axaEPSLhJwP9E9V8kx7lb+6vWTaLWNUd18txUvw0HLhvuKL
uIfPH++5Pgho67ZePzxtEoMxKGuBnrKq5hBkXA+cLBmVG3hrndtLfOwrvGANqKro
0c27BZM+WO4dlKQFtbV7luIvRSQl4J8g/Ccab0jzZlOrN0R6VIp6rAQBasVkpMHD
C04Vqxh580WaxsjlNti1ymf52xRCSqIUjRABx45dfpQ9jf/KH6aIWUiS6zlMZCLz
anGAx80i2TQIQTir+ERx9FzY9WcBD5PiOX+OD6MRIsLmGGmXBVXn
-----END CERTIFICATE-----
Generated at Mon Oct 28 12:17:12 2024 by rpki-client on console-ams.rpki-client.org