Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/lAQN2uLltEAx2pvFc-sxCWqkWnE.roa
File: lAQN2uLltEAx2pvFc-sxCWqkWnE.roa (raw, json)
Hash identifier: I4aKC/vvYdgUEqvk+9j4C+b3dXyuDbcOh98yN6vqZck=
Subject key identifier: 94:04:0D:DA:E2:E5:B4:40:31:DA:9B:C5:73:EB:31:09:6A:A4:5A:71
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 018A928DA26DE89BE049389F02BC00C2DA77
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/lAQN2uLltEAx2pvFc-sxCWqkWnE.roa
Signing time: Thu 14 Sep 2023 07:17:50 +0000
ROA not before: Thu 14 Sep 2023 07:17:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6453
IP address blocks: 91.140.128.0/17 maxlen: 24
194.54.192.0/18 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:8d:a2:6d:e8:9b:e0:49:38:9f:02:bc:00:c2:da:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Sep 14 07:17:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94040ddae2e5b44031da9bc573eb31096aa45a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:7e:6c:f4:a9:93:39:3f:b9:6f:d0:e6:e4:
45:12:ed:0b:50:42:1d:90:94:45:6f:54:bf:46:d9:
86:a7:87:04:44:38:79:c8:9c:74:b3:6e:aa:df:a9:
a8:c8:7e:a6:44:f6:e8:db:0f:d6:0c:35:c0:dd:9e:
30:7f:cd:68:e5:8a:dd:e8:41:a8:6f:3c:9b:1c:68:
50:09:ad:91:06:28:65:11:00:8d:7e:91:4b:9e:53:
6a:40:59:4d:85:23:5f:8b:3c:25:29:f6:3f:0d:76:
7c:0b:63:ce:4c:f3:1f:04:31:05:ac:35:be:0f:3d:
08:12:43:05:2c:1b:82:33:c8:1d:83:1e:44:e8:ef:
cd:8c:4e:5c:72:94:c4:4c:bc:79:fc:f1:c3:3b:ba:
5d:55:7f:bd:fa:fe:9c:6d:d3:ce:ce:dc:77:4e:57:
f5:e3:89:d4:06:06:03:97:16:d7:1a:12:2c:cd:8a:
77:8f:91:d0:3b:c8:2b:22:ba:44:81:b1:f6:10:c7:
7f:98:c9:24:87:c7:e0:e8:cf:dd:2f:32:a3:57:97:
5e:92:bf:93:e6:96:cd:1e:46:5f:b6:f5:37:76:c0:
28:7f:fb:d1:20:f0:4a:26:48:dd:e7:d1:b5:4d:00:
ea:33:ab:ae:bb:cd:eb:30:e4:a8:64:9f:98:a1:e0:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:04:0D:DA:E2:E5:B4:40:31:DA:9B:C5:73:EB:31:09:6A:A4:5A:71
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/lAQN2uLltEAx2pvFc-sxCWqkWnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.128.0/17
194.54.192.0/18
Signature Algorithm: sha256WithRSAEncryption
49:19:31:14:26:8a:1f:ef:0b:17:0a:2f:22:60:bc:0b:f8:52:
a9:a9:6a:ac:f2:20:6e:7a:84:9b:3c:e8:42:da:06:18:c6:6e:
c7:8e:3b:f1:a7:1f:c6:cd:47:15:05:13:03:87:9e:a9:44:7f:
58:59:6c:aa:7a:ea:4e:4d:45:59:59:4d:fe:32:7e:9f:a2:85:
9b:9e:a8:f0:52:42:6f:ba:c6:2c:9a:34:65:0c:b3:1d:33:13:
89:76:35:f0:0b:12:cd:d1:94:51:e2:26:3f:ca:f6:8d:36:6c:
a0:3a:d6:71:61:60:d7:71:00:bc:28:f9:33:f3:0d:84:18:d4:
1e:2c:be:58:02:1c:76:15:d8:13:1f:8a:05:52:82:25:2f:a4:
5b:a1:64:3f:d6:66:2f:12:0d:9c:b2:2a:a5:c5:d4:f3:1c:4e:
3f:02:93:74:c3:bd:80:46:ad:63:a3:44:3d:d6:54:e1:fa:71:
57:a9:03:21:dc:0b:db:db:2c:05:b2:f0:b3:0a:34:0f:b1:e9:
49:18:31:fd:04:c2:61:1c:78:cc:de:77:2c:66:d3:ba:71:f4:
34:58:6e:0c:37:e6:4a:e7:66:41:bd:af:5a:b8:12:3a:8d:f5:
84:b4:e1:b9:21:f3:11:fc:8e:2a:0f:d3:9f:07:24:f9:26:d3:
ca:9b:62:df
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYqSjaJt6JvgSTifArwAwtp3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2Y3ZGIwMzMzMTRjNDczY2RhMTk0ZTBkZjc5ZjFjMzc1
ZGEzZjQwHhcNMjMwOTE0MDcxNzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDA0MGRkYWUyZTViNDQwMzFkYTliYzU3M2ViMzEwOTZhYTQ1YTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokh+bPSpkzk/uW/Q5uRFEu0LUEId
kJRFb1S/RtmGp4cERDh5yJx0s26q36moyH6mRPbo2w/WDDXA3Z4wf81o5Yrd6EGo
bzybHGhQCa2RBihlEQCNfpFLnlNqQFlNhSNfizwlKfY/DXZ8C2POTPMfBDEFrDW+
Dz0IEkMFLBuCM8gdgx5E6O/NjE5ccpTETLx5/PHDO7pdVX+9+v6cbdPOztx3Tlf1
44nUBgYDlxbXGhIszYp3j5HQO8grIrpEgbH2EMd/mMkkh8fg6M/dLzKjV5dekr+T
5pbNHkZftvU3dsAof/vRIPBKJkjd59G1TQDqM6uuu83rMOSoZJ+YoeAj3wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJQEDdri5bRAMdqbxXPrMQlqpFpxMB8GA1UdIwQY
MBaAFCN/fbAzMUxHPNoZTg33nxw3XaP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYt
ZWUwNjAzOTQ5ZjkzLzEvbEFRTjJ1TGx0RUF4MnB2RmMtc3hDV3FrV25FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYtZWUwNjAzOTQ5Zjkz
LzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHW4yAAwQG
wjbAMA0GCSqGSIb3DQEBCwUAA4IBAQBJGTEUJoof7wsXCi8iYLwL+FKpqWqs8iBu
eoSbPOhC2gYYxm7Hjjvxpx/GzUcVBRMDh56pRH9YWWyqeupOTUVZWU3+Mn6fooWb
nqjwUkJvusYsmjRlDLMdMxOJdjXwCxLN0ZRR4iY/yvaNNmygOtZxYWDXcQC8KPkz
8w2EGNQeLL5YAhx2FdgTH4oFUoIlL6RboWQ/1mYvEg2csiqlxdTzHE4/ApN0w72A
Rq1jo0Q91lTh+nFXqQMh3Avb2ywFsvCzCjQPselJGDH9BMJhHHjM3ncsZtO6cfQ0
WG4MN+ZK52ZBva9auBI6jfWEtOG5IfMR/I4qD9OfByT5JtPKm2Lf
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:58 2024 by rpki-client on console-ams.rpki-client.org