Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/l3j43fmlgL5C7j55GvI3KlTib-c.roa
File: l3j43fmlgL5C7j55GvI3KlTib-c.roa (raw, json)
Hash identifier: FNusv0J1kB+lzJSxwnS/smihlGJZyoY6cOnRCx46WXE=
Subject key identifier: 97:78:F8:DD:F9:A5:80:BE:42:EE:3E:79:1A:F2:37:2A:54:E2:6F:E7
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 01865FACFB93B02B49D2ACD37A8FF91D4DC1
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/l3j43fmlgL5C7j55GvI3KlTib-c.roa
Signing time: Fri 17 Feb 2023 14:00:17 +0000
ROA not before: Fri 17 Feb 2023 14:00:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209604
IP address blocks: 185.255.92.0/24 maxlen: 24
185.255.93.0/24 maxlen: 24
185.93.70.0/24 maxlen: 24
185.93.68.0/24 maxlen: 24
185.93.69.0/24 maxlen: 24
185.255.94.0/24 maxlen: 24
185.255.95.0/24 maxlen: 24
193.164.5.0/24 maxlen: 24
185.132.126.0/24 maxlen: 24
93.115.10.0/24 maxlen: 24
93.177.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Feb 2023 10:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:ac:fb:93:b0:2b:49:d2:ac:d3:7a:8f:f9:1d:4d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Feb 17 14:00:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9778f8ddf9a580be42ee3e791af2372a54e26fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:7c:28:e0:66:29:9a:e1:b2:b6:f3:30:dc:
98:2e:d2:be:18:f6:48:9e:27:89:4b:79:45:02:7b:
d1:6c:3f:9e:0b:34:0f:9e:ee:d9:18:a0:17:11:86:
b4:07:79:d3:7a:0c:13:87:c3:3e:10:4d:87:89:1f:
48:91:39:f3:c8:59:c6:68:3b:89:60:3e:07:d7:da:
cf:79:ce:82:ea:3d:c6:f4:e2:a5:ec:6c:e3:c2:a7:
16:38:f7:5f:b9:d9:20:3b:19:98:81:3f:b7:ca:10:
54:9d:78:61:25:b6:ec:4f:f1:08:f9:54:3d:bb:3b:
f4:02:61:33:01:92:6f:82:0b:d3:26:09:8d:4d:30:
07:f7:6d:94:6c:dd:01:99:be:49:f6:19:77:c6:57:
74:d4:99:bb:e8:b7:6b:c6:a8:65:f0:2a:75:45:8a:
78:62:7c:4e:e0:e0:4b:de:84:6c:02:e3:c6:d5:95:
b0:6c:5f:c3:5b:11:f6:0d:4c:09:66:5c:c1:e4:c7:
ca:47:40:11:fd:31:99:7a:e6:1d:cc:d8:fa:13:5a:
0f:4b:1d:53:d3:34:61:e4:42:45:4e:52:d2:40:43:
3f:87:37:23:2a:af:8e:b7:4e:fc:2a:71:86:84:18:
70:52:5b:73:bb:fa:59:be:1a:bd:73:08:f6:fd:e2:
7e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:78:F8:DD:F9:A5:80:BE:42:EE:3E:79:1A:F2:37:2A:54:E2:6F:E7
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/l3j43fmlgL5C7j55GvI3KlTib-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.10.0/24
93.177.101.0/24
185.93.68.0-185.93.70.255
185.132.126.0/24
185.255.92.0/22
193.164.5.0/24
Signature Algorithm: sha256WithRSAEncryption
56:16:ca:b4:92:ad:8a:96:34:b5:5a:5e:64:cf:d9:23:11:ff:
f8:44:f7:9d:a0:ec:97:bd:c7:37:2c:04:e5:26:d6:1b:01:09:
45:89:82:97:8d:0a:e0:ef:fd:b5:55:02:1f:fe:ff:55:41:e6:
fd:6d:4a:4f:f0:43:a7:3e:1f:01:7f:8f:d6:b6:18:32:a0:3b:
71:00:76:f8:0a:13:92:73:f8:0f:03:a7:8d:52:26:90:3f:da:
d5:a6:09:8f:17:f2:d0:f4:62:ac:58:cb:ad:91:a9:15:c4:89:
00:a8:a3:87:ab:e5:27:ba:5a:41:b4:b5:2c:e1:73:37:18:61:
9b:9b:4c:84:55:1c:8c:3f:32:37:a2:fe:42:b3:11:e7:d4:92:
2a:be:74:d9:d6:10:df:53:57:db:0b:72:59:11:1c:71:a1:c7:
42:84:25:3d:7a:10:d5:b0:0f:42:30:45:7b:8d:88:b2:88:8f:
b8:d9:1e:0a:42:03:b5:2b:c2:9e:21:df:60:d2:60:14:f0:13:
ac:8f:1f:b6:8a:86:ec:74:9e:eb:01:65:ca:06:e1:cd:26:c2:
07:ee:5f:41:ff:ce:ba:47:ba:46:63:de:1e:00:82:ea:a0:71:
4e:2e:1c:63:d7:3b:79:51:2f:59:57:17:3e:1b:34:70:60:8d:
f4:71:8c:96
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYZfrPuTsCtJ0qzTeo/5HU3BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm
Y2M5YTAwHhcNMjMwMjE3MTQwMDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Nzc4ZjhkZGY5YTU4MGJlNDJlZTNlNzkxYWYyMzcyYTU0ZTI2ZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkJ8KOBmKZrhsrbzMNyYLtK+GPZI
nieJS3lFAnvRbD+eCzQPnu7ZGKAXEYa0B3nTegwTh8M+EE2HiR9IkTnzyFnGaDuJ
YD4H19rPec6C6j3G9OKl7GzjwqcWOPdfudkgOxmYgT+3yhBUnXhhJbbsT/EI+VQ9
uzv0AmEzAZJvggvTJgmNTTAH922UbN0Bmb5J9hl3xld01Jm76Ldrxqhl8Cp1RYp4
YnxO4OBL3oRsAuPG1ZWwbF/DWxH2DUwJZlzB5MfKR0AR/TGZeuYdzNj6E1oPSx1T
0zRh5EJFTlLSQEM/hzcjKq+Ot078KnGGhBhwUltzu/pZvhq9cwj2/eJ+KQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFJd4+N35pYC+Qu4+eRryNypU4m/nMB8GA1UdIwQY
MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt
NzQ1ZTA4ZmU1OGM2LzEvbDNqNDNmbWxnTDVDN2o1NUd2STNLbFRpYi1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2
LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAXXMKAwQA
XbFlMAwDBAK5XUQDBAC5XUYDBAC5hH4DBAK5/1wDBADBpAUwDQYJKoZIhvcNAQEL
BQADggEBAFYWyrSSrYqWNLVaXmTP2SMR//hE952g7Je9xzcsBOUm1hsBCUWJgpeN
CuDv/bVVAh/+/1VB5v1tSk/wQ6c+HwF/j9a2GDKgO3EAdvgKE5Jz+A8Dp41SJpA/
2tWmCY8X8tD0YqxYy62RqRXEiQCoo4er5Se6WkG0tSzhczcYYZubTIRVHIw/Mjei
/kKzEefUkiq+dNnWEN9TV9sLclkRHHGhx0KEJT16ENWwD0IwRXuNiLKIj7jZHgpC
A7Urwp4h32DSYBTwE6yPH7aKhux0nusBZcoG4c0mwgfuX0H/zrpHukZj3h4Aguqg
cU4uHGPXO3lRL1lXFz4bNHBgjfRxjJY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:12 2024 by rpki-client on console-ams.rpki-client.org