Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/LoSxSCDNEVWa2dVkE8I8Xr4oshs.roa
File: LoSxSCDNEVWa2dVkE8I8Xr4oshs.roa (raw, json)
Hash identifier: cL3UqqkGxdqAqC2tde5tlYRffacQ5MINaQA6vYJsuxo=
Subject key identifier: 2E:84:B1:48:20:CD:11:55:9A:D9:D5:64:13:C2:3C:5E:BE:28:B2:1B
Certificate issuer: /CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Certificate serial: 018573718E3C546CCC2EC86BBEF85BBFDE45
Authority key identifier: A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/LoSxSCDNEVWa2dVkE8I8Xr4oshs.roa
Signing time: Mon 02 Jan 2023 17:04:59 +0000
ROA not before: Mon 02 Jan 2023 17:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51050
IP address blocks: 193.53.90.0/23 maxlen: 23
193.53.10.0/23 maxlen: 23
185.98.144.0/22 maxlen: 22
5.83.0.0/21 maxlen: 21
178.217.80.0/21 maxlen: 21
2a01:5cc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:8e:3c:54:6c:cc:2e:c8:6b:be:f8:5b:bf:de:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Validity
Not Before: Jan 2 17:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e84b14820cd11559ad9d56413c23c5ebe28b21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:3c:d7:ac:9b:d9:96:12:82:fe:58:2a:c6:
26:17:ce:a6:b4:cc:cb:48:2f:d3:75:48:37:b1:cc:
7f:6e:e9:20:94:ef:0a:f1:04:13:18:6d:47:ae:16:
bb:be:e1:c5:a3:d2:00:94:10:ca:61:65:7e:57:b7:
2a:b1:e3:ad:15:01:82:5e:ca:ab:a4:f6:38:2c:73:
35:86:2d:1f:3b:d7:37:b2:b5:2e:7c:5d:2b:24:95:
21:d4:8f:a8:20:5e:af:f8:a9:6b:e6:5d:31:fc:27:
87:61:c0:6f:ae:6d:da:5f:dc:1e:24:5c:17:74:ed:
8e:a2:56:77:1e:97:31:b9:d4:5b:35:20:c8:37:74:
0a:b1:c3:80:54:fc:1d:dd:ac:e8:02:a9:57:fd:d3:
29:1d:b2:e7:2e:9c:14:5e:36:f5:c5:5d:f7:40:3e:
33:58:01:a3:16:2d:b9:e4:a6:41:03:f7:54:cb:79:
1d:0d:19:5f:57:22:dd:bb:af:c9:9b:f9:ca:c7:83:
76:44:6b:49:d9:96:41:e0:4b:83:11:93:b9:5f:5f:
02:45:54:be:de:ce:35:bd:03:5a:d1:fe:e9:06:b3:
62:37:de:38:94:2c:fb:dc:51:99:ac:fd:30:1c:80:
4a:03:d4:96:be:e2:13:5b:2b:d8:e1:e4:4d:88:a3:
b8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:84:B1:48:20:CD:11:55:9A:D9:D5:64:13:C2:3C:5E:BE:28:B2:1B
X509v3 Authority Key Identifier:
keyid:A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/LoSxSCDNEVWa2dVkE8I8Xr4oshs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.0.0/21
178.217.80.0/21
185.98.144.0/22
193.53.10.0/23
193.53.90.0/23
IPv6:
2a01:5cc0::/32
Signature Algorithm: sha256WithRSAEncryption
78:93:02:80:68:22:2a:3b:29:a0:06:b9:5c:e4:bf:b2:8e:e7:
95:de:ed:a1:56:0b:25:42:de:e6:c5:c9:0e:24:da:ea:b4:3e:
c6:f2:81:0f:1d:28:05:63:1b:57:9e:8f:b6:53:e9:07:2e:43:
a3:ab:47:45:f4:06:8c:33:2c:ef:ef:73:79:e4:c0:20:e8:9a:
9d:1b:12:37:35:05:44:41:3a:0f:4a:68:5d:58:2d:97:d5:4f:
a2:42:26:d2:53:b9:b2:90:d0:04:5c:05:22:1b:72:9b:7b:9b:
86:74:c5:fa:84:6f:fe:cf:37:a6:bf:6b:e9:10:8a:20:01:11:
c6:c4:8e:2b:2b:a4:10:42:0c:b0:ce:43:f7:93:32:9e:c1:fb:
d5:17:e9:30:d3:69:88:a3:aa:01:a6:87:da:37:59:58:70:a1:
37:38:bb:69:0c:91:8d:fb:b2:3c:58:19:26:5a:77:f5:ab:44:
b0:39:b7:15:b2:82:d8:36:6a:c2:01:e6:9f:0f:3e:c8:97:ce:
07:8c:d2:28:39:d7:df:d6:1a:cb:d3:1c:3f:f3:46:af:5f:17:
d2:63:67:76:88:22:da:65:7b:60:f1:80:fc:e6:af:93:fa:b9:
e7:04:e7:b5:d5:9f:5e:0f:6e:ab:20:26:4f:9a:14:9a:08:e8:
ae:5c:8f:48
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYVzcY48VGzMLshrvvhbv95FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTJkMTVhOWQ4ZGZkZWNkZThmZTZiMGMxODA0ZDBhOWVl
MmU2MjgwHhcNMjMwMTAyMTcwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTg0YjE0ODIwY2QxMTU1OWFkOWQ1NjQxM2MyM2M1ZWJlMjhiMjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg4816yb2ZYSgv5YKsYmF86mtMzL
SC/TdUg3scx/bukglO8K8QQTGG1Hrha7vuHFo9IAlBDKYWV+V7cqseOtFQGCXsqr
pPY4LHM1hi0fO9c3srUufF0rJJUh1I+oIF6v+Klr5l0x/CeHYcBvrm3aX9weJFwX
dO2OolZ3HpcxudRbNSDIN3QKscOAVPwd3azoAqlX/dMpHbLnLpwUXjb1xV33QD4z
WAGjFi255KZBA/dUy3kdDRlfVyLdu6/Jm/nKx4N2RGtJ2ZZB4EuDEZO5X18CRVS+
3s41vQNa0f7pBrNiN944lCz73FGZrP0wHIBKA9SWvuITWyvY4eRNiKO4fQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFC6EsUggzRFVmtnVZBPCPF6+KLIbMB8GA1UdIwQY
MBaAFKGi0Vqdjf3s3o/msMGATQqe4uYoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FMUldwMk5fZXplai1hd3dZQk5DcDdpNWlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9iNjQwYTYtN2VjZC00MjBiLTg2ZWQt
ODZkMTk0YWU4YTcxLzEvTG9TeFNDRE5FVldhMmRWa0U4SThYcjRvc2hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9iNjQwYTYtN2VjZC00MjBiLTg2ZWQtODZkMTk0YWU4YTcx
LzEvb2FMUldwMk5fZXplai1hd3dZQk5DcDdpNWlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDBVMAAwQD
stlQAwQCuWKQAwQBwTUKAwQBwTVaMA0EAgACMAcDBQAqAVzAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4kwKAaCIqOymgBrlc5L+yjueV3u2hVgslQt7mxckOJNrqtD7G8oEP
HSgFYxtXno+2U+kHLkOjq0dF9AaMMyzv73N55MAg6JqdGxI3NQVEQToPSmhdWC2X
1U+iQibSU7mykNAEXAUiG3Kbe5uGdMX6hG/+zzemv2vpEIogARHGxI4rK6QQQgyw
zkP3kzKewfvVF+kw02mIo6oBpofaN1lYcKE3OLtpDJGN+7I8WBkmWnf1q0SwObcV
soLYNmrCAeafDz7Il84HjNIoOdff1hrL0xw/80avXxfSY2d2iCLaZXtg8YD85q+T
+rnnBOe11Z9eD26rICZPmhSaCOiuXI9I
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:19 2024 by rpki-client on console-ams.rpki-client.org