Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/DL97LMCNAGWBxZs01XqxwR1nDpQ.roa
File: DL97LMCNAGWBxZs01XqxwR1nDpQ.roa (raw, json)
Hash identifier: ah1Hmu0wBhz9+GtSfEYyy7uX/rBNnkjcPT0CMO25om4=
Subject key identifier: 0C:BF:7B:2C:C0:8D:00:65:81:C5:9B:34:D5:7A:B1:C1:1D:67:0E:94
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DCF4CA693E54CB79CB2F7099B96F9
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/DL97LMCNAGWBxZs01XqxwR1nDpQ.roa
Signing time: Sun 01 Jan 2023 20:55:02 +0000
ROA not before: Sun 01 Jan 2023 20:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35537
IP address blocks: 94.124.116.0/24 maxlen: 24
2a09:7:2004::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:cf:4c:a6:93:e5:4c:b7:9c:b2:f7:09:9b:96:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cbf7b2cc08d006581c59b34d57ab1c11d670e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:a4:00:3e:c8:ae:e3:53:bf:cb:3d:98:59:
e7:82:f1:b0:f6:16:60:ba:7e:e6:07:2f:28:8f:1d:
79:bf:5a:33:54:fa:cc:4a:76:73:31:01:ba:b5:d0:
ae:77:47:b9:87:83:d5:a8:37:cc:39:66:2b:b9:b6:
4c:a4:7b:cb:1e:f4:78:47:8c:04:eb:e8:9e:21:fb:
fb:e4:e3:8f:b1:b2:b3:f5:6d:bf:11:e9:c8:d5:ee:
5c:91:4e:3e:42:64:f7:bf:38:a7:d9:bc:4b:2a:ae:
51:15:ae:8d:0f:59:ac:35:1b:9c:ca:15:2d:07:33:
6e:b3:63:df:15:cf:37:e6:b1:7a:81:9a:63:51:a8:
8e:6d:a0:e3:5d:98:38:89:0e:c4:81:e8:0a:be:41:
a0:2c:b7:82:e2:2f:d5:15:0b:05:ca:7d:25:29:f1:
1f:d7:d1:18:26:74:21:dc:8f:a1:ae:1c:34:14:10:
c5:c7:43:5e:55:5d:e8:db:74:20:d7:8d:93:54:ac:
e2:bd:7d:bf:1d:79:08:2b:7f:20:91:1a:fc:84:28:
e8:b8:12:53:68:90:51:23:3f:88:b5:e2:98:92:9d:
c9:fd:ed:f6:30:c5:ae:fa:d2:40:99:a2:ae:4a:a2:
9d:19:3e:4d:f4:f1:95:3a:71:eb:55:62:2c:00:e4:
90:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BF:7B:2C:C0:8D:00:65:81:C5:9B:34:D5:7A:B1:C1:1D:67:0E:94
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/DL97LMCNAGWBxZs01XqxwR1nDpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.116.0/24
IPv6:
2a09:7:2004::/48
Signature Algorithm: sha256WithRSAEncryption
5c:6c:d9:f5:43:dd:34:64:56:ef:74:95:15:e3:d2:fa:df:eb:
69:c4:1a:41:4d:b7:a3:52:3b:33:d8:b9:79:6d:ad:69:2b:98:
51:db:75:31:a9:ba:ed:b2:af:ae:1b:83:0f:9f:5f:f9:c9:07:
cc:f9:4a:77:a9:a3:42:0b:48:4e:68:bd:09:da:1a:b8:da:c9:
f8:89:0b:79:d1:43:a1:7f:6d:f8:36:0d:26:d8:6a:62:a8:b8:
14:41:01:b3:86:8a:86:74:80:9a:8d:c7:05:97:05:df:fc:2f:
55:97:51:0e:cf:83:4a:9c:ea:86:67:49:06:a2:bd:f3:8a:d3:
f8:6a:c0:29:d4:70:f4:d2:2a:cd:72:e7:0b:07:b3:bd:a7:46:
93:95:a0:cd:28:c0:da:dc:5c:a5:91:50:f7:7d:d5:aa:23:70:
b0:2e:6e:c5:f9:96:87:5d:8c:1f:cb:38:35:93:35:ef:41:86:
a7:c7:32:2a:f4:50:13:db:9e:3c:09:cc:7b:66:b6:7e:de:55:
d1:a6:86:65:77:4c:14:ad:ec:2a:88:3d:0b:85:69:fb:e1:66:
e9:ea:b0:af:c6:0f:d6:44:98:17:5a:d0:a4:51:ca:7b:20:0c:
bc:ab:0f:3a:a6:15:8d:6a:47:18:dc:9d:f7:25:fa:38:99:c1:
cc:56:e1:16
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVvHc9MppPlTLecsvcJm5b5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjMwMTAxMjA1NTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2JmN2IyY2MwOGQwMDY1ODFjNTliMzRkNTdhYjFjMTFkNjcwZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC6kAD7IruNTv8s9mFnngvGw9hZg
un7mBy8ojx15v1ozVPrMSnZzMQG6tdCud0e5h4PVqDfMOWYrubZMpHvLHvR4R4wE
6+ieIfv75OOPsbKz9W2/EenI1e5ckU4+QmT3vzin2bxLKq5RFa6ND1msNRucyhUt
BzNus2PfFc835rF6gZpjUaiObaDjXZg4iQ7EgegKvkGgLLeC4i/VFQsFyn0lKfEf
19EYJnQh3I+hrhw0FBDFx0NeVV3o23Qg142TVKzivX2/HXkIK38gkRr8hCjouBJT
aJBRIz+IteKYkp3J/e32MMWu+tJAmaKuSqKdGT5N9PGVOnHrVWIsAOSQTwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAy/eyzAjQBlgcWbNNV6scEdZw6UMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvREw5N0xNQ05BR1dCeFpzMDFYcXh3UjFuRHBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAXnx0MA8E
AgACMAkDBwAqCQAHIAQwDQYJKoZIhvcNAQELBQADggEBAFxs2fVD3TRkVu90lRXj
0vrf62nEGkFNt6NSOzPYuXltrWkrmFHbdTGpuu2yr64bgw+fX/nJB8z5Snepo0IL
SE5ovQnaGrjayfiJC3nRQ6F/bfg2DSbYamKouBRBAbOGioZ0gJqNxwWXBd/8L1WX
UQ7Pg0qc6oZnSQaivfOK0/hqwCnUcPTSKs1y5wsHs72nRpOVoM0owNrcXKWRUPd9
1aojcLAubsX5loddjB/LODWTNe9BhqfHMir0UBPbnjwJzHtmtn7eVdGmhmV3TBSt
7CqIPQuFafvhZunqsK/GD9ZEmBda0KRRynsgDLyrDzqmFY1qRxjcnfcl+jiZwcxW
4RY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org