Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LgaPNl6b8NNgv0NhRoKQKeeJxCA.roa
File: LgaPNl6b8NNgv0NhRoKQKeeJxCA.roa (raw, json)
Hash identifier: 9Vd82W3K3mASwUmDS7riWV4z6MMnDtwdHdKMJLA5g7s=
Subject key identifier: 2E:06:8F:36:5E:9B:F0:D3:60:BF:43:61:46:82:90:29:E7:89:C4:20
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019049CFD126119FD40AF07467B4AE340918
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LgaPNl6b8NNgv0NhRoKQKeeJxCA.roa
Signing time: Mon 24 Jun 2024 10:34:34 +0000
ROA not before: Mon 24 Jun 2024 10:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 2.57.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Aug 2024 11:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:cf:d1:26:11:9f:d4:0a:f0:74:67:b4:ae:34:09:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 24 10:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e068f365e9bf0d360bf436146829029e789c420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:19:14:d7:58:71:c6:64:b2:06:76:42:ab:
a2:ef:54:8c:b0:2a:51:a1:32:90:8b:9a:d6:b7:4c:
5e:16:a4:32:ad:d3:c9:40:5d:f4:35:03:4c:c8:ff:
fd:fd:e5:1e:90:00:68:2e:55:d6:c3:bd:7e:3d:92:
0a:9b:bd:51:dd:eb:ff:42:ee:40:8d:c0:ba:37:26:
40:8a:92:e6:d1:e8:30:35:96:b7:23:f7:99:7e:bd:
92:0d:f1:09:9e:31:72:dd:7e:be:4e:59:15:2c:f3:
78:0c:4f:a9:9a:c3:d3:f4:d2:8f:4a:21:89:14:9a:
4f:c4:40:a9:ed:7b:a3:e0:54:d5:14:ed:b8:cc:b1:
ba:c9:50:0d:f5:03:ea:f1:3f:05:48:4d:0a:e8:71:
cd:c8:bd:e2:51:17:d9:db:d8:c8:31:75:66:c3:ac:
fc:52:1c:87:4a:70:c5:59:d6:e4:16:b8:f3:74:db:
46:d5:24:3e:55:ac:df:4a:6a:ca:8e:f4:80:4a:db:
c4:8f:91:bd:42:86:87:bc:3a:a7:99:2e:02:0d:90:
e4:f2:1a:39:f8:ee:c7:11:23:ff:7f:27:c7:ed:bd:
b6:ad:e3:37:0c:ed:8b:4a:37:62:73:b4:b2:2d:21:
48:35:ea:01:7e:9b:d8:84:e5:43:1e:b3:0a:6d:1c:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:06:8F:36:5E:9B:F0:D3:60:BF:43:61:46:82:90:29:E7:89:C4:20
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LgaPNl6b8NNgv0NhRoKQKeeJxCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/24
Signature Algorithm: sha256WithRSAEncryption
79:df:b9:86:85:1b:a1:f5:45:97:da:2c:ca:75:9e:33:6c:52:
a4:c7:90:4e:3a:e6:2f:d1:07:ef:6f:ac:d3:62:9c:92:c3:22:
bf:d6:1c:6d:05:7e:46:64:cb:b6:2f:66:af:c1:f1:c4:95:49:
dd:e1:c3:64:c6:2e:f0:ae:f6:97:57:32:ad:d4:9a:94:f0:85:
18:55:7c:e8:fa:07:30:06:4f:d6:90:fc:62:d8:52:27:b2:63:
b8:04:91:e5:0d:96:1a:f8:6d:13:82:6c:e7:e5:26:3d:95:5a:
ac:01:69:ed:ea:93:6e:31:ec:61:39:93:c4:66:76:62:52:c9:
1b:11:9e:2d:b8:ed:74:c4:3a:42:5c:91:3a:7c:32:99:b9:57:
fc:37:cc:dc:d6:60:60:7a:77:44:88:17:05:82:b6:f7:24:36:
f9:e8:c1:a3:36:44:27:e8:a5:d6:7b:a5:d3:f5:25:44:92:31:
13:8f:42:55:c0:2d:76:fb:de:df:ba:6b:f5:89:fc:78:57:db:
43:72:83:04:59:db:15:a3:80:ef:a7:7d:19:5a:f3:98:cd:a2:
5c:4c:e7:dc:55:a4:96:64:2e:ab:78:d4:d5:85:ad:e6:58:41:
10:ab:b1:07:ca:4e:a1:9f:28:c6:f6:f6:36:30:9e:5b:45:83:
bf:d9:4e:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBJz9EmEZ/UCvB0Z7SuNAkYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwNjI0MTAzNDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTA2OGYzNjVlOWJmMGQzNjBiZjQzNjE0NjgyOTAyOWU3ODljNDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ8ZFNdYccZksgZ2Qqui71SMsCpR
oTKQi5rWt0xeFqQyrdPJQF30NQNMyP/9/eUekABoLlXWw71+PZIKm71R3ev/Qu5A
jcC6NyZAipLm0egwNZa3I/eZfr2SDfEJnjFy3X6+TlkVLPN4DE+pmsPT9NKPSiGJ
FJpPxECp7Xuj4FTVFO24zLG6yVAN9QPq8T8FSE0K6HHNyL3iURfZ29jIMXVmw6z8
UhyHSnDFWdbkFrjzdNtG1SQ+VazfSmrKjvSAStvEj5G9QoaHvDqnmS4CDZDk8ho5
+O7HESP/fyfH7b22reM3DO2LSjdic7SyLSFINeoBfpvYhOVDHrMKbRwmLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC4GjzZem/DTYL9DYUaCkCnnicQgMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvTGdhUE5sNmI4Tk5ndjBOaFJvS1FLZWVKeENBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjnyMA0G
CSqGSIb3DQEBCwUAA4IBAQB537mGhRuh9UWX2izKdZ4zbFKkx5BOOuYv0Qfvb6zT
YpySwyK/1hxtBX5GZMu2L2avwfHElUnd4cNkxi7wrvaXVzKt1JqU8IUYVXzo+gcw
Bk/WkPxi2FInsmO4BJHlDZYa+G0Tgmzn5SY9lVqsAWnt6pNuMexhOZPEZnZiUskb
EZ4tuO10xDpCXJE6fDKZuVf8N8zc1mBgendEiBcFgrb3JDb56MGjNkQn6KXWe6XT
9SVEkjETj0JVwC12+97fumv1ifx4V9tDcoMEWdsVo4Dvp30ZWvOYzaJcTOfcVaSW
ZC6reNTVha3mWEEQq7EHyk6hnyjG9vY2MJ5bRYO/2U4Y
-----END CERTIFICATE-----
Generated at Sat Aug 24 16:11:45 2024 by rpki-client on console-ams.rpki-client.org