Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/lcVKCUPut_4laPBSuxnZrQaPgL0.roa
File: lcVKCUPut_4laPBSuxnZrQaPgL0.roa (raw, json)
Hash identifier: wSmgrHVOk+lSSx3Zh/iqCXo36r/7hTEUImNxNrHDlmw=
Subject key identifier: 95:C5:4A:09:43:EE:B7:FE:25:68:F0:52:BB:19:D9:AD:06:8F:80:BD
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 018E566BBCE3C3ACE172BE6F165399B186CC
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/lcVKCUPut_4laPBSuxnZrQaPgL0.roa
Signing time: Tue 19 Mar 2024 11:14:44 +0000
ROA not before: Tue 19 Mar 2024 11:14:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 92.243.74.0/24 maxlen: 24
92.243.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 08:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:56:6b:bc:e3:c3:ac:e1:72:be:6f:16:53:99:b1:86:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Mar 19 11:14:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95c54a0943eeb7fe2568f052bb19d9ad068f80bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:98:5f:10:60:44:0a:5c:ce:8a:00:a2:5c:4d:
8f:1c:ac:9b:62:76:6d:01:b5:e0:c0:0f:bb:f9:ca:
20:0d:97:f1:eb:1c:07:3c:40:d6:36:8a:0d:6a:d1:
e2:a4:b7:3b:41:67:cd:01:1c:e8:09:f1:b7:79:4b:
07:9b:6e:be:97:8c:14:b5:d5:52:d9:1e:9f:b2:db:
3d:85:09:f0:ae:35:b8:03:bd:a0:61:f6:37:bc:ed:
0f:f7:3d:f8:db:ab:e7:8a:d2:2a:f9:f2:e9:4b:34:
6a:28:15:06:ed:0a:b0:25:06:ce:17:e3:d5:02:cf:
b8:00:60:1f:56:f7:d3:ad:d5:c3:0f:1f:32:3c:c3:
97:90:47:4d:9d:3e:a0:7c:28:63:a8:aa:8b:e7:9c:
bd:d3:4b:44:43:3c:8a:e6:51:f5:7d:c9:6e:3a:3f:
d4:32:10:8f:14:f2:2b:a2:b0:94:e0:0c:45:5e:1b:
8e:2a:8f:c5:16:15:9a:75:68:fe:a3:4c:f6:a7:4c:
e1:e6:f9:be:80:7d:51:3d:39:b3:fc:26:fd:2f:3f:
15:c3:04:28:ab:79:43:64:0a:b9:19:15:47:89:2d:
87:b0:2a:94:01:bc:bd:28:f2:c5:31:e3:d7:51:d7:
d9:ef:a6:70:c0:6d:eb:b9:37:f8:b4:8e:2b:3d:22:
a1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C5:4A:09:43:EE:B7:FE:25:68:F0:52:BB:19:D9:AD:06:8F:80:BD
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/lcVKCUPut_4laPBSuxnZrQaPgL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.74.0/23
Signature Algorithm: sha256WithRSAEncryption
00:a5:c1:78:b7:3f:af:57:3c:7e:00:09:49:14:91:28:62:77:
2b:76:38:9b:5b:9f:ec:6b:e0:8c:49:09:eb:12:46:6b:1d:fd:
03:1e:99:5f:ae:01:c4:57:e4:49:5c:3d:99:2c:80:c4:d0:ef:
6c:f1:2f:66:96:12:35:f3:43:26:23:49:b3:42:57:55:9d:7c:
64:77:e2:c9:56:b4:40:4d:c5:db:8c:bf:b3:a9:56:e9:bf:a8:
1f:63:2c:08:7a:61:20:f6:8e:98:7a:62:28:55:d7:48:7c:f4:
da:ad:8c:75:4a:b1:e3:14:42:22:a7:cd:80:37:db:a2:bf:98:
73:f1:1a:6c:bd:da:1b:2d:c1:94:c6:6c:10:a6:5f:fc:c8:18:
44:c2:13:29:37:b9:eb:11:ca:a4:19:8a:9a:f9:81:61:bf:92:
5a:b4:b2:35:e0:68:18:c8:7f:9c:09:1e:74:bb:bb:7b:dc:62:
91:35:87:8b:07:47:1d:ad:0c:3d:af:9b:6a:f0:a9:f4:bc:45:
76:35:ec:a9:c2:45:f1:be:59:59:bc:a9:85:3e:e5:cd:03:81:
c3:84:4b:60:e7:b9:cb:02:e5:76:dd:d4:fa:7d:0e:8c:42:74:
61:ed:21:72:81:be:d6:cb:19:01:ea:75:e9:bc:e0:5e:f8:b5:
5b:58:0d:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5Wa7zjw6zhcr5vFlOZsYbMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl
NmRlNWUwHhcNMjQwMzE5MTExNDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWM1NGEwOTQzZWViN2ZlMjU2OGYwNTJiYjE5ZDlhZDA2OGY4MGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZhfEGBEClzOigCiXE2PHKybYnZt
AbXgwA+7+cogDZfx6xwHPEDWNooNatHipLc7QWfNARzoCfG3eUsHm26+l4wUtdVS
2R6fsts9hQnwrjW4A72gYfY3vO0P9z3426vnitIq+fLpSzRqKBUG7QqwJQbOF+PV
As+4AGAfVvfTrdXDDx8yPMOXkEdNnT6gfChjqKqL55y900tEQzyK5lH1fcluOj/U
MhCPFPIrorCU4AxFXhuOKo/FFhWadWj+o0z2p0zh5vm+gH1RPTmz/Cb9Lz8VwwQo
q3lDZAq5GRVHiS2HsCqUAby9KPLFMePXUdfZ76ZwwG3ruTf4tI4rPSKhYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJXFSglD7rf+JWjwUrsZ2a0Gj4C9MB8GA1UdIwQY
MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt
OTJjODFmMjJlNzEyLzEvbGNWS0NVUHV0XzRsYVBCU3V4blpyUWFQZ0wwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy
LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXPNKMA0G
CSqGSIb3DQEBCwUAA4IBAQAApcF4tz+vVzx+AAlJFJEoYncrdjibW5/sa+CMSQnr
EkZrHf0DHplfrgHEV+RJXD2ZLIDE0O9s8S9mlhI180MmI0mzQldVnXxkd+LJVrRA
TcXbjL+zqVbpv6gfYywIemEg9o6YemIoVddIfPTarYx1SrHjFEIip82AN9uiv5hz
8RpsvdobLcGUxmwQpl/8yBhEwhMpN7nrEcqkGYqa+YFhv5JatLI14GgYyH+cCR50
u7t73GKRNYeLB0cdrQw9r5tq8Kn0vEV2NeypwkXxvllZvKmFPuXNA4HDhEtg57nL
AuV23dT6fQ6MQnRh7SFygb7WyxkB6nXpvOBe+LVbWA3z
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:22 2024 by rpki-client on console-fra.rpki-client.org