Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/lwCXr_CX2jTKoz0voX-Sw4fWCj0.roa
File: lwCXr_CX2jTKoz0voX-Sw4fWCj0.roa (raw, json)
Hash identifier: 6duIG8HGMDelZgpnaKDA/gCk7DsTgePt/196VCbkFdU=
Subject key identifier: 97:00:97:AF:F0:97:DA:34:CA:A3:3D:2F:A1:7F:92:C3:87:D6:0A:3D
Certificate issuer: /CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Certificate serial: 01856D818884721042B6CDA239F6529C312C
Authority key identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/lwCXr_CX2jTKoz0voX-Sw4fWCj0.roa
Signing time: Sun 01 Jan 2023 13:24:43 +0000
ROA not before: Sun 01 Jan 2023 13:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202788
IP address blocks: 185.154.187.0/24 maxlen: 24
185.154.185.0/24 maxlen: 24
185.154.186.0/24 maxlen: 24
185.154.184.0/24 maxlen: 24
185.154.184.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:88:84:72:10:42:b6:cd:a2:39:f6:52:9c:31:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Validity
Not Before: Jan 1 13:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=970097aff097da34caa33d2fa17f92c387d60a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:1b:52:5c:8d:ba:0f:7c:d3:5f:7b:3a:2f:
84:a0:fb:4d:3d:20:5b:88:32:02:01:ab:80:94:6c:
25:dd:43:b9:6c:6b:3a:67:55:d8:ea:e3:67:e0:f9:
fd:c6:88:e2:97:39:3f:3d:63:ae:df:b8:73:3e:76:
71:b6:00:6f:ee:ec:ae:88:46:9e:ef:00:db:5e:7a:
b7:6c:42:18:0f:05:4e:f2:3d:2c:ca:6a:df:c4:d7:
e9:82:9a:e5:04:3a:0a:27:cc:c6:1c:ff:11:2c:b2:
d8:b3:a5:74:14:ff:70:03:4b:0c:a2:28:a3:b7:a6:
66:dc:e7:85:3b:cf:e8:64:3e:3b:fe:34:74:ed:0f:
0a:ad:1b:36:06:48:06:8f:43:1f:19:ec:59:c8:a7:
08:ba:48:90:cb:30:20:8e:50:e5:02:fc:e2:db:96:
a0:01:85:40:33:88:3b:1d:6a:b2:f7:2b:37:c5:5c:
0e:80:51:d3:97:e1:c4:40:5c:b8:74:d9:43:bb:66:
4f:a4:46:9a:89:73:82:ec:1d:61:e3:5a:b0:0c:a6:
e1:aa:99:6c:12:03:53:14:ec:cc:15:77:8c:c4:e4:
a7:21:fa:da:59:88:89:22:b1:b3:04:f6:d7:34:22:
37:04:37:8f:e5:39:f0:ad:fb:e2:49:25:d7:45:fa:
3c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:00:97:AF:F0:97:DA:34:CA:A3:3D:2F:A1:7F:92:C3:87:D6:0A:3D
X509v3 Authority Key Identifier:
keyid:69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/lwCXr_CX2jTKoz0voX-Sw4fWCj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.184.0/22
Signature Algorithm: sha256WithRSAEncryption
54:43:92:88:bf:88:85:9b:9f:d6:bc:47:17:52:03:c5:2d:e1:
18:7b:de:1d:f5:da:f6:18:c5:0d:e7:f5:01:71:86:89:cc:77:
94:e6:50:33:50:69:e1:f1:35:4a:c2:1b:e3:a2:bf:89:23:32:
58:22:3c:3b:2f:cf:28:22:16:36:1c:77:1c:54:31:60:c3:bf:
cc:24:c2:ef:4f:30:d2:18:20:1f:38:24:bb:be:38:5c:e0:45:
90:75:98:3e:49:6a:9d:e5:28:71:0e:8c:2a:4e:c2:3d:3d:01:
46:79:36:2b:25:6c:f7:fa:b6:73:b4:f9:74:37:55:31:c5:22:
64:93:1d:33:d3:67:b2:06:33:0d:c4:db:72:40:0e:5d:fd:eb:
df:fb:e6:16:b6:b6:2b:36:9c:de:29:77:de:15:b5:4b:32:b7:
bf:be:c0:5d:1c:16:1b:bb:64:43:9f:0b:15:fb:3c:13:5e:6f:
23:df:db:d1:5e:3c:41:d5:9c:1f:bf:bc:2e:8f:1b:0d:19:95:
8b:c9:90:52:97:fa:35:54:43:94:6a:cb:73:d8:e2:0f:c8:4d:
a1:47:90:04:32:9d:d1:60:9a:fa:1c:83:39:e0:f0:21:6a:01:
f5:bf:8e:e8:54:af:21:f8:5a:ce:24:9b:b5:92:3b:32:8f:a8:
31:3d:a7:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtgYiEchBCts2iOfZSnDEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTEyNWUyOTI2ZDM5YWM4Njk5ODIyYmM1N2E2NTgwZjVm
NTE3ZTkwHhcNMjMwMTAxMTMyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzAwOTdhZmYwOTdkYTM0Y2FhMzNkMmZhMTdmOTJjMzg3ZDYwYTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+EbUlyNug980197Oi+EoPtNPSBb
iDICAauAlGwl3UO5bGs6Z1XY6uNn4Pn9xojilzk/PWOu37hzPnZxtgBv7uyuiEae
7wDbXnq3bEIYDwVO8j0symrfxNfpgprlBDoKJ8zGHP8RLLLYs6V0FP9wA0sMoiij
t6Zm3OeFO8/oZD47/jR07Q8KrRs2BkgGj0MfGexZyKcIukiQyzAgjlDlAvzi25ag
AYVAM4g7HWqy9ys3xVwOgFHTl+HEQFy4dNlDu2ZPpEaaiXOC7B1h41qwDKbhqpls
EgNTFOzMFXeMxOSnIfraWYiJIrGzBPbXNCI3BDeP5TnwrfviSSXXRfo85QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJcAl6/wl9o0yqM9L6F/ksOH1go9MB8GA1UdIwQY
MBaAFGmhJeKSbTmshpmCK8V6ZYD19RfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFFbDRwSnRPYXlHbVlJcnhYcGxnUFgxRi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83YWJiMDYtOTdlNy00ZmE1LWFjN2Qt
N2I1NjdjNjE4NWY5LzEvbHdDWHJfQ1gyalRLb3owdm9YLVN3NGZXQ2owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83YWJiMDYtOTdlNy00ZmE1LWFjN2QtN2I1NjdjNjE4NWY5
LzEvYWFFbDRwSnRPYXlHbVlJcnhYcGxnUFgxRi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZq4MA0G
CSqGSIb3DQEBCwUAA4IBAQBUQ5KIv4iFm5/WvEcXUgPFLeEYe94d9dr2GMUN5/UB
cYaJzHeU5lAzUGnh8TVKwhvjor+JIzJYIjw7L88oIhY2HHccVDFgw7/MJMLvTzDS
GCAfOCS7vjhc4EWQdZg+SWqd5ShxDowqTsI9PQFGeTYrJWz3+rZztPl0N1UxxSJk
kx0z02eyBjMNxNtyQA5d/evf++YWtrYrNpzeKXfeFbVLMre/vsBdHBYbu2RDnwsV
+zwTXm8j39vRXjxB1Zwfv7wujxsNGZWLyZBSl/o1VEOUastz2OIPyE2hR5AEMp3R
YJr6HIM54PAhagH1v47oVK8h+FrOJJu1kjsyj6gxPacx
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:08 2024 by rpki-client on console-ams.rpki-client.org