Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/LrJF6UJOGi5WXw2icPoyON22vYA.roa
File: LrJF6UJOGi5WXw2icPoyON22vYA.roa (raw, json)
Hash identifier: 5SzIfr7UOum8uZbhjdYubdp01l4DZmX0ATZOFVWNB6I=
Subject key identifier: 2E:B2:45:E9:42:4E:1A:2E:56:5F:0D:A2:70:FA:32:38:DD:B6:BD:80
Certificate issuer: /CN=708029a674177efd99252275094618c0c9cfbd1d
Certificate serial: 018E862CC62EB1B4336AD37BBAECCA460F09
Authority key identifier: 70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/LrJF6UJOGi5WXw2icPoyON22vYA.roa
Signing time: Thu 28 Mar 2024 17:47:44 +0000
ROA not before: Thu 28 Mar 2024 17:47:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.167.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 18:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:2c:c6:2e:b1:b4:33:6a:d3:7b:ba:ec:ca:46:0f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708029a674177efd99252275094618c0c9cfbd1d
Validity
Not Before: Mar 28 17:47:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2eb245e9424e1a2e565f0da270fa3238ddb6bd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:61:23:de:17:58:c7:78:b5:a8:3f:48:14:62:
e1:22:98:62:af:2e:eb:ca:50:24:d6:ea:71:1a:d2:
03:29:04:fa:9f:c3:08:6d:b3:0f:2e:c1:85:e8:69:
13:fd:4f:a1:46:00:c9:0f:18:62:5f:a1:a7:4d:ab:
59:ae:cc:c2:71:22:f2:f4:cc:82:23:7e:26:e9:9f:
ee:72:36:95:08:b9:d3:cd:60:1d:b3:49:ca:6e:43:
91:40:da:8b:a5:8e:ad:b9:33:01:82:a4:38:62:c1:
76:72:8d:72:47:76:e9:f2:28:e0:f0:18:90:e2:6a:
a7:04:42:35:c6:a8:5d:e2:3c:91:45:10:a5:a5:ac:
ff:14:93:c3:61:24:e0:88:6f:94:92:40:a2:29:55:
85:9b:88:fe:21:a5:61:25:7b:07:40:66:c9:ba:de:
4a:2c:78:ed:41:7d:9c:ae:ba:48:6f:cc:e5:ef:fc:
4d:c8:98:c3:52:2c:85:1c:b1:4f:a8:5b:bb:e0:bc:
d7:b2:e5:90:09:24:38:a8:f1:1a:b9:38:05:a2:70:
9b:aa:6e:9e:20:af:30:b8:91:fb:69:ab:e4:27:b2:
13:ad:80:44:a3:d9:c2:42:12:7b:ea:a2:c4:88:b8:
10:ff:4a:10:f4:30:52:26:6f:ed:8a:49:e0:69:fa:
72:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B2:45:E9:42:4E:1A:2E:56:5F:0D:A2:70:FA:32:38:DD:B6:BD:80
X509v3 Authority Key Identifier:
keyid:70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/LrJF6UJOGi5WXw2icPoyON22vYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.253.0/24
Signature Algorithm: sha256WithRSAEncryption
85:72:e0:5f:ad:ca:f0:06:19:33:53:f5:2a:7d:76:d8:79:db:
17:4a:3e:39:66:23:25:bf:33:4d:1a:53:59:70:02:9a:3f:73:
93:b6:31:2f:2c:c2:94:1b:f2:a7:1a:69:71:ff:d3:66:c3:51:
1f:f2:f9:eb:19:a7:76:12:ac:f6:e0:61:38:eb:fe:43:3e:27:
1a:38:11:f8:a7:8f:09:5d:5e:e8:69:c1:f2:56:82:c2:d8:32:
bc:e8:f1:c8:4d:95:b8:e8:c9:6c:6b:c6:9e:fe:a0:9a:ea:53:
52:74:ed:9c:e5:b2:a3:cf:f3:56:00:c8:57:ed:69:79:ef:5b:
6d:80:d0:2f:ff:06:9c:e4:5f:55:d2:40:5b:9d:ac:37:b9:94:
23:f4:f5:96:26:78:51:68:ee:64:6b:80:84:65:fb:a5:10:2b:
07:cf:e3:5e:a6:36:7d:64:5e:d3:0b:de:d1:78:e3:e0:c6:d7:
39:13:62:bb:40:2f:20:6a:10:77:25:4c:48:b8:2a:90:21:71:
be:17:53:71:c2:cc:90:4a:de:3a:54:83:95:6e:15:b3:5a:84:
3d:82:31:6a:6f:27:c1:62:66:0a:b8:f3:e1:e5:a9:b3:ef:8a:
fc:35:71:0f:df:23:00:4b:e4:80:6c:90:ba:7d:e8:07:4e:a2:
89:a1:a8:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6GLMYusbQzatN7uuzKRg8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODAyOWE2NzQxNzdlZmQ5OTI1MjI3NTA5NDYxOGMwYzlj
ZmJkMWQwHhcNMjQwMzI4MTc0NzQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWIyNDVlOTQyNGUxYTJlNTY1ZjBkYTI3MGZhMzIzOGRkYjZiZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2Ej3hdYx3i1qD9IFGLhIphiry7r
ylAk1upxGtIDKQT6n8MIbbMPLsGF6GkT/U+hRgDJDxhiX6GnTatZrszCcSLy9MyC
I34m6Z/ucjaVCLnTzWAds0nKbkORQNqLpY6tuTMBgqQ4YsF2co1yR3bp8ijg8BiQ
4mqnBEI1xqhd4jyRRRClpaz/FJPDYSTgiG+UkkCiKVWFm4j+IaVhJXsHQGbJut5K
LHjtQX2crrpIb8zl7/xNyJjDUiyFHLFPqFu74LzXsuWQCSQ4qPEauTgFonCbqm6e
IK8wuJH7aavkJ7ITrYBEo9nCQhJ76qLEiLgQ/0oQ9DBSJm/tikngafpygQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC6yRelCThouVl8NonD6Mjjdtr2AMB8GA1UdIwQY
MBaAFHCAKaZ0F379mSUidQlGGMDJz70dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lBcHBuUVhmdjJaSlNKMUNVWVl3TW5QdlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wOGQ0NGMtZjEwMi00YjcwLThkYjAt
NzJhYmVlZmVkYTRhLzEvTHJKRjZVSk9HaTVXWHcyaWNQb3lPTjIydllBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wOGQ0NGMtZjEwMi00YjcwLThkYjAtNzJhYmVlZmVkYTRh
LzEvY0lBcHBuUVhmdjJaSlNKMUNVWVl3TW5QdlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaf9MA0G
CSqGSIb3DQEBCwUAA4IBAQCFcuBfrcrwBhkzU/UqfXbYedsXSj45ZiMlvzNNGlNZ
cAKaP3OTtjEvLMKUG/KnGmlx/9Nmw1Ef8vnrGad2Eqz24GE46/5DPicaOBH4p48J
XV7oacHyVoLC2DK86PHITZW46Mlsa8ae/qCa6lNSdO2c5bKjz/NWAMhX7Wl571tt
gNAv/wac5F9V0kBbnaw3uZQj9PWWJnhRaO5ka4CEZfulECsHz+NepjZ9ZF7TC97R
eOPgxtc5E2K7QC8gahB3JUxIuCqQIXG+F1NxwsyQSt46VIOVbhWzWoQ9gjFqbyfB
YmYKuPPh5amz74r8NXEP3yMAS+SAbJC6fegHTqKJoagX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-fra.rpki-client.org