Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/lLYJxe_uADpFTdsISRGk8FsMwbk.roa
File: lLYJxe_uADpFTdsISRGk8FsMwbk.roa (raw, json)
Hash identifier: Yh0l2OUcBhW5k2Rt8jzN7xR3Tx/fm89UNZn/pRMsC0s=
Subject key identifier: 94:B6:09:C5:EF:EE:00:3A:45:4D:DB:08:49:11:A4:F0:5B:0C:C1:B9
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 018B94EC4CB376D8E90EEA1EA73BD42B38A9
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/lLYJxe_uADpFTdsISRGk8FsMwbk.roa
Signing time: Fri 03 Nov 2023 11:23:15 +0000
ROA not before: Fri 03 Nov 2023 11:23:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33891
IP address blocks: 188.65.144.0/21 maxlen: 21
91.204.168.0/22 maxlen: 22
2a00:1aa0::/32 maxlen: 32
2a00:1aa0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:ec:4c:b3:76:d8:e9:0e:ea:1e:a7:3b:d4:2b:38:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: Nov 3 11:23:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94b609c5efee003a454ddb084911a4f05b0cc1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:02:72:87:c1:5a:6e:fe:12:80:eb:33:b6:30:
f9:75:0f:3a:fb:e4:c3:c9:56:4d:6e:c5:8f:e4:08:
04:34:56:c1:78:17:6c:4f:25:ac:8d:4e:fa:59:54:
e2:db:cb:b4:66:28:cc:e1:55:39:39:38:db:22:92:
89:67:4e:9e:9c:8d:5a:4a:20:08:3e:3b:37:ad:f2:
af:ba:7a:a2:0c:ca:b5:4e:98:44:40:11:8e:d6:31:
d2:f7:19:34:18:78:e1:c3:db:52:31:ae:cd:3c:cc:
37:43:40:ea:f4:09:25:f9:a9:9b:a5:8c:9c:16:8f:
e8:cd:6f:97:db:55:cb:cf:13:88:36:c6:c6:96:dd:
ff:02:df:4c:ac:b9:a7:6d:93:18:30:d0:9c:8e:fa:
c4:d3:45:74:bf:6a:4e:ca:5e:16:14:6a:79:e3:59:
db:b3:54:c2:19:6b:b1:11:48:60:e8:1d:88:d4:94:
e6:4c:25:68:2a:e9:1e:c3:cb:5a:2e:61:fb:ea:bc:
84:7b:ff:da:b7:e4:b9:84:75:7d:9c:f2:dc:db:3c:
32:4a:86:92:e0:d2:4d:6d:d4:cd:f5:fc:46:12:da:
bd:c5:a5:1c:7f:5b:18:e8:80:87:a9:5c:57:1d:2b:
ab:82:01:c9:3d:ef:20:81:be:c2:5c:05:2b:7f:9d:
38:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B6:09:C5:EF:EE:00:3A:45:4D:DB:08:49:11:A4:F0:5B:0C:C1:B9
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/lLYJxe_uADpFTdsISRGk8FsMwbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.168.0/22
188.65.144.0/21
IPv6:
2a00:1aa0::/29
Signature Algorithm: sha256WithRSAEncryption
78:51:4f:11:e7:80:82:e3:5f:7b:5b:34:c9:95:61:c3:36:88:
7a:3d:2f:b1:b0:b9:4c:4b:30:3e:d8:96:16:b8:22:46:08:f7:
69:20:6a:11:87:31:61:a3:18:be:86:80:76:0d:56:00:7c:c8:
59:94:5c:d0:9b:a1:61:78:a5:0f:73:8c:87:61:77:b4:d6:6e:
75:ee:ec:ab:8e:16:a9:9a:e6:97:6a:c4:84:d4:5f:53:01:a7:
36:d1:93:22:cf:ce:28:37:dd:ba:66:c3:c3:c8:90:c2:41:c9:
e7:f6:dc:70:96:a3:72:0c:51:65:92:78:04:bc:a0:c0:6c:c3:
71:f9:05:0c:5b:c9:22:72:81:3b:d6:c1:14:0c:f7:01:bd:29:
55:50:83:47:ed:34:e0:5e:b2:2f:aa:5d:8b:91:13:ab:03:33:
a4:78:48:22:c8:4f:16:82:25:ef:e2:a6:fb:d9:ab:06:dc:63:
95:e3:50:b5:6c:e0:41:b2:38:2f:4c:db:e6:12:92:40:87:c9:
66:c9:7f:f4:7d:fc:64:f3:c5:df:18:bf:72:10:ac:25:fd:0c:
d3:29:6a:61:66:d9:ee:5c:42:7d:94:80:7d:d6:89:1b:f9:89:
14:e6:5d:a0:62:49:7a:2e:06:35:0b:82:70:4b:d9:97:90:18:
c5:96:45:49
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYuU7EyzdtjpDuoepzvUKzipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZDYzNmM1MDVkNTZhZjQyYTQxNGMxNjdkNTI0MDdkMzU2
YjNkMGIwHhcNMjMxMTAzMTEyMzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGI2MDljNWVmZWUwMDNhNDU0ZGRiMDg0OTExYTRmMDViMGNjMWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowJyh8Fabv4SgOsztjD5dQ86++TD
yVZNbsWP5AgENFbBeBdsTyWsjU76WVTi28u0ZijM4VU5OTjbIpKJZ06enI1aSiAI
Pjs3rfKvunqiDMq1TphEQBGO1jHS9xk0GHjhw9tSMa7NPMw3Q0Dq9Akl+ambpYyc
Fo/ozW+X21XLzxOINsbGlt3/At9MrLmnbZMYMNCcjvrE00V0v2pOyl4WFGp541nb
s1TCGWuxEUhg6B2I1JTmTCVoKukew8taLmH76ryEe//at+S5hHV9nPLc2zwySoaS
4NJNbdTN9fxGEtq9xaUcf1sY6ICHqVxXHSurggHJPe8ggb7CXAUrf5043wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFJS2CcXv7gA6RU3bCEkRpPBbDMG5MB8GA1UdIwQY
MBaAFHjWNsUF1Wr0KkFMFn1SQH01az0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xZmE5NDUtNTBlNy00NzlhLTlkOTIt
ZGRjZDRkOTM1MDMwLzEvbExZSnhlX3VBRHBGVGRzSVNSR2s4RnNNd2JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xZmE5NDUtNTBlNy00NzlhLTlkOTItZGRjZDRkOTM1MDMw
LzEvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW8yoAwQD
vEGQMA0EAgACMAcDBQMqABqgMA0GCSqGSIb3DQEBCwUAA4IBAQB4UU8R54CC4197
WzTJlWHDNoh6PS+xsLlMSzA+2JYWuCJGCPdpIGoRhzFhoxi+hoB2DVYAfMhZlFzQ
m6FheKUPc4yHYXe01m517uyrjhapmuaXasSE1F9TAac20ZMiz84oN926ZsPDyJDC
Qcnn9txwlqNyDFFlkngEvKDAbMNx+QUMW8kicoE71sEUDPcBvSlVUINH7TTgXrIv
ql2LkROrAzOkeEgiyE8WgiXv4qb72asG3GOV41C1bOBBsjgvTNvmEpJAh8lmyX/0
ffxk88XfGL9yEKwl/QzTKWphZtnuXEJ9lIB91okb+YkU5l2gYkl6LgY1C4JwS9mX
kBjFlkVJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:46 2024 by rpki-client on console-fra.rpki-client.org