Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/lvCp6rYdrj4AgbnBUv734QSa6ho.roa
File: lvCp6rYdrj4AgbnBUv734QSa6ho.roa (raw, json)
Hash identifier: 3GJUyXs+xvpC5W/z1eQvgU9w/GorCHAHG0Lr8kjU5Rw=
Subject key identifier: 96:F0:A9:EA:B6:1D:AE:3E:00:81:B9:C1:52:FE:F7:E1:04:9A:EA:1A
Certificate issuer: /CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Certificate serial: 018CC9BCD421E2FB1AA546837B404F23A234
Authority key identifier: C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/lvCp6rYdrj4AgbnBUv734QSa6ho.roa
Signing time: Tue 02 Jan 2024 10:34:04 +0000
ROA not before: Tue 02 Jan 2024 10:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210402
IP address blocks: 109.61.4.0/24 maxlen: 24
109.61.4.0/23 maxlen: 23
109.61.4.0/22 maxlen: 22
109.61.5.0/24 maxlen: 24
109.61.6.0/23 maxlen: 23
109.61.6.0/24 maxlen: 24
109.61.7.0/24 maxlen: 24
91.106.36.0/22 maxlen: 22
91.106.36.0/24 maxlen: 24
91.106.37.0/24 maxlen: 24
91.106.38.0/24 maxlen: 24
91.106.39.0/24 maxlen: 24
91.106.38.0/23 maxlen: 23
91.106.50.0/24 maxlen: 24
91.106.49.0/24 maxlen: 24
91.106.57.0/24 maxlen: 24
91.106.58.0/24 maxlen: 24
91.106.53.0/24 maxlen: 24
91.106.54.0/24 maxlen: 24
91.106.55.0/24 maxlen: 24
91.106.56.0/24 maxlen: 24
91.106.56.0/22 maxlen: 22
91.106.52.0/24 maxlen: 24
91.106.60.0/24 maxlen: 24
91.106.61.0/24 maxlen: 24
91.106.62.0/24 maxlen: 24
91.106.63.0/24 maxlen: 24
91.106.59.0/24 maxlen: 24
91.106.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 14 Mar 2024 09:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d4:21:e2:fb:1a:a5:46:83:7b:40:4f:23:a2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Validity
Not Before: Jan 2 10:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96f0a9eab61dae3e0081b9c152fef7e1049aea1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:22:da:cd:a1:24:04:4f:f0:07:28:1d:54:69:
45:d9:e9:0d:6a:04:d3:3d:a6:16:5d:01:af:2c:31:
d8:50:d6:c8:12:62:9c:0b:ad:46:69:bb:0c:fb:b6:
5e:6e:95:2a:d8:78:73:45:be:71:b5:fc:c3:e6:cb:
1b:6c:35:d6:f0:79:40:32:41:33:6d:18:66:85:3f:
06:a9:50:f4:47:42:03:54:be:dc:3b:fc:d9:ce:01:
55:84:c9:f5:64:32:61:18:de:c6:0b:58:ed:f6:bf:
29:77:c8:2b:e2:ac:6c:d7:bd:89:52:e7:25:f5:32:
35:ea:12:ed:6d:1d:b2:03:cf:ed:62:d6:e1:94:76:
b6:43:02:19:4e:c2:e3:8f:50:7d:d3:eb:fb:42:86:
bf:70:d8:7c:7f:f2:79:a9:cc:76:a2:d2:2a:4a:c4:
a4:45:c7:f8:45:dd:94:1e:98:8c:3e:92:07:0a:f7:
c8:95:d7:ea:62:e6:7f:f3:34:93:a0:1a:24:5e:66:
36:98:35:18:e2:93:72:a8:1b:c9:b0:59:95:0b:b8:
3a:56:3d:36:ff:e3:17:ad:30:e9:6a:f8:86:d5:86:
42:b9:9b:fe:94:e7:9c:8b:af:b9:6d:52:cd:94:5f:
56:a0:bb:9b:9c:62:df:12:85:4b:23:74:d8:d7:ad:
04:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:A9:EA:B6:1D:AE:3E:00:81:B9:C1:52:FE:F7:E1:04:9A:EA:1A
X509v3 Authority Key Identifier:
keyid:C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/lvCp6rYdrj4AgbnBUv734QSa6ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.36.0/22
91.106.49.0-91.106.50.255
91.106.52.0-91.106.63.255
109.61.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:dc:fb:85:87:d8:73:ea:ce:c9:aa:cc:0e:a7:e1:33:0c:b4:
27:63:b4:0d:d5:21:46:45:62:30:2d:59:04:6f:53:0c:e2:d1:
f0:49:4e:58:7d:55:1d:9a:a2:96:fe:e2:cc:a6:49:06:ed:f9:
74:2f:d2:3e:9d:e6:84:11:56:43:ac:f4:4c:a6:d7:c5:ae:3d:
ac:d6:8a:40:76:05:86:5c:0d:dd:40:f1:e7:a1:ec:ac:e6:de:
e3:08:0f:8f:f1:85:ca:24:20:45:b2:36:8c:1e:de:28:5d:94:
0a:60:c7:62:8e:d4:ad:6a:93:8b:e3:a0:43:5e:d0:cc:97:15:
e8:e5:9f:24:3a:7e:ff:7f:59:3f:a3:a4:bc:31:c7:43:5a:22:
37:da:68:f1:a5:65:12:bd:c3:a6:85:f4:0d:b6:74:d5:78:f6:
75:34:77:33:35:34:4b:fc:f9:ce:12:cf:d0:81:88:30:e6:50:
93:ab:f4:f4:91:3d:44:1e:d6:91:b3:a7:b6:ee:11:03:a2:b1:
75:ab:c6:64:12:c4:71:e1:bf:40:60:fb:ce:d3:9b:00:53:e8:
43:64:76:43:da:79:c6:38:29:ed:b7:7f:23:63:af:f0:15:46:
8f:2d:7a:e1:8d:64:5e:0e:1f:47:97:4f:0b:e2:3c:6f:2a:eb:
0a:47:c3:71
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYzJvNQh4vsapUaDe0BPI6I0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOTJkOGQ1NTExYjE5ZWNlNDU2OTYwZjIzYmZhODg2ZWUx
ZDU3MGIwHhcNMjQwMTAyMTAzNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmYwYTllYWI2MWRhZTNlMDA4MWI5YzE1MmZlZjdlMTA0OWFlYTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyLazaEkBE/wBygdVGlF2ekNagTT
PaYWXQGvLDHYUNbIEmKcC61GabsM+7ZebpUq2HhzRb5xtfzD5ssbbDXW8HlAMkEz
bRhmhT8GqVD0R0IDVL7cO/zZzgFVhMn1ZDJhGN7GC1jt9r8pd8gr4qxs172JUucl
9TI16hLtbR2yA8/tYtbhlHa2QwIZTsLjj1B90+v7Qoa/cNh8f/J5qcx2otIqSsSk
Rcf4Rd2UHpiMPpIHCvfIldfqYuZ/8zSToBokXmY2mDUY4pNyqBvJsFmVC7g6Vj02
/+MXrTDpaviG1YZCuZv+lOeci6+5bVLNlF9WoLubnGLfEoVLI3TY160EoQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFJbwqeq2Ha4+AIG5wVL+9+EEmuoaMB8GA1UdIwQY
MBaAFMCS2NVRGxns5FaWDyO/qIbuHVcLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0pMWTFWRWJHZXprVnBZUEk3LW9odTRkVndzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kNDMwZDktZDIxNC00MWMwLThlNTEt
MjY3YTE2YjQ2MjlmLzEvbHZDcDZyWWRyajRBZ2JuQlV2NzM0UVNhNmhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9kNDMwZDktZDIxNC00MWMwLThlNTEtMjY3YTE2YjQ2Mjlm
LzEvd0pMWTFWRWJHZXprVnBZUEk3LW9odTRkVndzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQCW2okMAwD
BABbajEDBABbajIwDAMEAltqNAMEBltqAAMEAm09BDANBgkqhkiG9w0BAQsFAAOC
AQEADtz7hYfYc+rOyarMDqfhMwy0J2O0DdUhRkViMC1ZBG9TDOLR8ElOWH1VHZqi
lv7izKZJBu35dC/SPp3mhBFWQ6z0TKbXxa49rNaKQHYFhlwN3UDx56HsrObe4wgP
j/GFyiQgRbI2jB7eKF2UCmDHYo7UrWqTi+OgQ17QzJcV6OWfJDp+/39ZP6OkvDHH
Q1oiN9po8aVlEr3DpoX0DbZ01Xj2dTR3MzU0S/z5zhLP0IGIMOZQk6v09JE9RB7W
kbOntu4RA6KxdavGZBLEceG/QGD7ztObAFPoQ2R2Q9p5xjgp7bd/I2Ov8BVGjy16
4Y1kXg4fR5dPC+I8byrrCkfDcQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org