Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/L-FqB4AzS9ZmBNeogFaQCcb4yWE.roa
File: L-FqB4AzS9ZmBNeogFaQCcb4yWE.roa (raw, json)
Hash identifier: STHMbZ+rHQDB6j9Xr3iougllpAwu+VHdBz2bIGgHt3E=
Subject key identifier: 2F:E1:6A:07:80:33:4B:D6:66:04:D7:A8:80:56:90:09:C6:F8:C9:61
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0186B634D3F7FD61A9430452B39E33B10FA3
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/L-FqB4AzS9ZmBNeogFaQCcb4yWE.roa
Signing time: Mon 06 Mar 2023 09:16:00 +0000
ROA not before: Mon 06 Mar 2023 09:16:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 81.29.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:34:d3:f7:fd:61:a9:43:04:52:b3:9e:33:b1:0f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Mar 6 09:16:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fe16a0780334bd66604d7a880569009c6f8c961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:65:f8:d7:45:29:9d:18:98:c3:9e:e1:ff:
18:35:f0:1d:2d:9b:29:32:cf:c3:d0:d9:fb:8b:70:
7f:fe:3e:b6:5b:30:12:1b:2a:ed:15:c6:88:14:71:
cf:3d:57:c6:ee:1a:96:cd:00:f7:9a:2c:af:21:06:
d3:e3:72:9d:a1:ac:d0:09:4b:f7:ef:40:4a:64:5d:
b6:c5:52:1b:8a:f9:af:54:df:4a:23:3b:fc:76:08:
f2:54:d6:2a:ea:75:d0:91:be:5a:4a:4b:2a:ef:c3:
95:8a:b5:77:50:48:f5:b7:94:08:24:e0:21:0d:27:
ea:4f:74:00:a8:2f:26:8b:93:0a:af:33:d7:03:0b:
44:da:5e:9b:87:10:8d:9b:b4:7d:4a:a0:a5:85:0b:
1e:37:64:92:8d:88:34:97:6b:0f:a4:64:be:8d:c9:
87:11:d7:97:13:41:06:56:15:92:95:47:d2:b6:fc:
e5:f9:26:69:74:46:23:c2:f4:5c:00:4f:87:e3:07:
97:dc:bd:5e:92:46:e7:80:5b:fe:d7:9d:f5:8e:1f:
02:4e:16:36:0d:84:79:a9:51:1c:88:5c:ad:c5:44:
ad:59:f3:a0:7c:27:e6:6f:93:05:8c:aa:ef:04:66:
fa:18:3d:c3:34:23:06:0c:e3:f7:b0:20:92:93:c2:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E1:6A:07:80:33:4B:D6:66:04:D7:A8:80:56:90:09:C6:F8:C9:61
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/L-FqB4AzS9ZmBNeogFaQCcb4yWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.152.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ca:56:59:ab:0e:e1:9d:c4:04:27:8b:22:b2:5d:68:b9:e7:
91:5e:c0:c3:d8:53:ac:d5:8d:af:20:00:8d:82:60:62:6c:0d:
5b:59:f0:df:bd:ee:aa:a6:63:52:10:41:60:83:54:a2:1e:b6:
c2:d1:5e:68:3e:c5:65:9e:a7:b5:dc:ff:cb:11:9d:9b:db:dd:
cb:a2:b0:6f:b2:50:ed:95:37:7d:7c:2e:1f:d1:93:87:6c:4c:
5b:2f:9f:cc:1d:ff:ae:84:e1:d5:25:2c:dd:34:83:ba:bd:30:
f3:1d:e0:5e:b1:c0:4c:f5:c3:34:f3:ec:d6:fb:2a:eb:01:f7:
f8:30:56:ee:fc:48:08:1e:fd:3c:9e:18:35:97:ec:a5:a6:73:
c2:e0:c3:17:0f:a4:bb:f1:29:e1:e5:8d:7f:fa:d8:6b:18:20:
84:4a:6e:19:09:49:58:45:f7:ae:93:d1:22:73:53:49:11:b3:
ac:fa:ea:39:6e:51:5e:4b:2e:f1:fa:70:f5:29:59:0d:ce:f5:
d6:48:ab:dd:e5:6c:b5:38:b0:0a:d9:a3:75:d5:93:b2:f6:99:
99:00:d9:a6:51:ba:b0:bf:28:ea:5e:8f:28:dc:87:e1:15:8f:
f2:d8:3f:7c:98:f7:fa:12:fa:e5:49:0d:fd:11:80:e3:a6:28:
98:23:d6:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYa2NNP3/WGpQwRSs54zsQ+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjMwMzA2MDkxNjAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmUxNmEwNzgwMzM0YmQ2NjYwNGQ3YTg4MDU2OTAwOWM2ZjhjOTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04Zl+NdFKZ0YmMOe4f8YNfAdLZsp
Ms/D0Nn7i3B//j62WzASGyrtFcaIFHHPPVfG7hqWzQD3miyvIQbT43KdoazQCUv3
70BKZF22xVIbivmvVN9KIzv8dgjyVNYq6nXQkb5aSksq78OVirV3UEj1t5QIJOAh
DSfqT3QAqC8mi5MKrzPXAwtE2l6bhxCNm7R9SqClhQseN2SSjYg0l2sPpGS+jcmH
EdeXE0EGVhWSlUfStvzl+SZpdEYjwvRcAE+H4weX3L1ekkbngFv+1531jh8CThY2
DYR5qVEciFytxUStWfOgfCfmb5MFjKrvBGb6GD3DNCMGDOP3sCCSk8LnXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC/hageAM0vWZgTXqIBWkAnG+MlhMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvTC1GcUI0QXpTOVptQk5lb2dGYVFDY2I0eVdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2YMA0G
CSqGSIb3DQEBCwUAA4IBAQBVylZZqw7hncQEJ4sisl1oueeRXsDD2FOs1Y2vIACN
gmBibA1bWfDfve6qpmNSEEFgg1SiHrbC0V5oPsVlnqe13P/LEZ2b293LorBvslDt
lTd9fC4f0ZOHbExbL5/MHf+uhOHVJSzdNIO6vTDzHeBescBM9cM08+zW+yrrAff4
MFbu/EgIHv08nhg1l+ylpnPC4MMXD6S78Snh5Y1/+thrGCCESm4ZCUlYRfeuk9Ei
c1NJEbOs+uo5blFeSy7x+nD1KVkNzvXWSKvd5Wy1OLAK2aN11ZOy9pmZANmmUbqw
vyjqXo8o3IfhFY/y2D98mPf6EvrlSQ39EYDjpiiYI9bz
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:35 2024 by rpki-client on console-ams.rpki-client.org