Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/La19znfFdpwu2LwKRedGEtT0cBE.roa
File: La19znfFdpwu2LwKRedGEtT0cBE.roa (raw, json)
Hash identifier: B/iwxI4OSOo9YjRJcOJZ8nXurYc9BwHJtGfiBHcXPnI=
Subject key identifier: 2D:AD:7D:CE:77:C5:76:9C:2E:D8:BC:0A:45:E7:46:12:D4:F4:70:11
Certificate issuer: /CN=e2636e02f1554f70d971a656849c01bdff138ce8
Certificate serial: 018E31FA8492E6EBA644AAC3EFC07C33A555
Authority key identifier: E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/La19znfFdpwu2LwKRedGEtT0cBE.roa
Signing time: Tue 12 Mar 2024 09:24:45 +0000
ROA not before: Tue 12 Mar 2024 09:24:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 185.171.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 01:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:31:fa:84:92:e6:eb:a6:44:aa:c3:ef:c0:7c:33:a5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2636e02f1554f70d971a656849c01bdff138ce8
Validity
Not Before: Mar 12 09:24:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dad7dce77c5769c2ed8bc0a45e74612d4f47011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:39:2e:aa:e4:67:d2:32:9b:f8:0f:ec:b4:c7:
27:25:51:e8:bd:7d:e9:f2:b0:d8:1c:c0:74:27:ed:
e3:4a:55:d8:4c:14:4b:8d:c0:52:75:92:92:4a:ae:
a3:ec:cb:09:10:02:eb:41:2d:13:89:a7:38:88:2e:
cc:8b:9b:ba:3c:8a:fe:48:86:82:ae:e8:da:09:15:
ea:0a:44:33:02:4f:05:0d:28:72:52:b6:91:e1:a4:
d8:99:54:3e:40:a8:fc:c7:96:fd:31:b8:74:ed:ba:
34:e0:63:4a:39:a8:ca:8a:7a:8e:d4:8b:3a:bd:2d:
f8:9a:b0:0e:60:55:02:99:ea:38:e8:7f:00:f5:66:
6b:8c:5c:a9:e2:dd:62:1c:1c:e5:29:54:f9:ca:8b:
4d:10:25:8a:32:92:aa:5c:54:5b:d0:69:3f:b8:f0:
2c:c5:0e:30:b9:ea:6c:9b:48:db:50:ee:05:28:db:
b1:2e:35:93:6f:6b:32:77:7f:35:fb:8a:8a:55:70:
74:bc:5e:db:f7:b5:0f:fe:81:b1:46:94:76:cd:2c:
ef:55:8e:79:ae:d5:31:ef:73:8b:25:39:3b:96:42:
a0:4b:24:17:f6:4b:ad:b7:5f:2e:f0:73:21:db:11:
06:d1:5f:18:cf:b8:e2:3e:ad:ab:cd:b1:20:a9:0b:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AD:7D:CE:77:C5:76:9C:2E:D8:BC:0A:45:E7:46:12:D4:F4:70:11
X509v3 Authority Key Identifier:
keyid:E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/La19znfFdpwu2LwKRedGEtT0cBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.160.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:57:91:dc:c1:f7:e7:1e:3c:c3:32:96:83:54:2d:02:e8:b2:
a1:c9:10:23:e9:2e:07:2e:fd:39:5c:35:40:f9:77:22:85:22:
c6:81:7e:57:d9:19:aa:99:79:86:40:2a:94:d6:4a:c1:a7:07:
a1:21:b0:0d:5d:bf:39:61:f0:56:8d:ab:ca:cd:8a:b7:f6:50:
87:21:ac:b5:35:aa:2e:96:ae:45:51:d5:2f:df:42:fa:3b:6c:
84:62:c8:96:48:5c:6a:81:57:ec:db:b8:ca:71:e7:03:d1:07:
2f:63:4e:04:df:e3:45:d5:ec:11:53:48:52:b6:f9:3f:0e:b7:
c7:a8:2d:77:40:e8:81:6a:0e:6e:71:9a:dc:80:87:af:b0:00:
2b:92:b9:10:74:45:0f:70:64:52:be:fd:ca:a4:b3:6c:32:88:
ad:e5:e0:5d:b3:66:f5:df:f7:8a:3c:71:23:a7:e2:5a:80:d0:
d7:5d:aa:a0:3a:bc:6d:a8:9b:6a:15:5d:6f:01:6a:c9:16:9f:
51:c7:e8:91:22:5b:76:6e:a2:9c:6a:9c:49:96:63:f7:52:19:
1a:78:15:72:92:e8:66:90:c6:64:4e:72:9a:16:0c:a7:28:c0:
a4:72:d5:e4:1e:9b:6c:98:cd:e5:5d:9f:5b:14:6f:c9:e3:67:
66:37:77:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4x+oSS5uumRKrD78B8M6VVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNjM2ZTAyZjE1NTRmNzBkOTcxYTY1Njg0OWMwMWJkZmYx
MzhjZTgwHhcNMjQwMzEyMDkyNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGFkN2RjZTc3YzU3NjljMmVkOGJjMGE0NWU3NDYxMmQ0ZjQ3MDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjkuquRn0jKb+A/stMcnJVHovX3p
8rDYHMB0J+3jSlXYTBRLjcBSdZKSSq6j7MsJEALrQS0Tiac4iC7Mi5u6PIr+SIaC
rujaCRXqCkQzAk8FDShyUraR4aTYmVQ+QKj8x5b9Mbh07bo04GNKOajKinqO1Is6
vS34mrAOYFUCmeo46H8A9WZrjFyp4t1iHBzlKVT5yotNECWKMpKqXFRb0Gk/uPAs
xQ4wuepsm0jbUO4FKNuxLjWTb2syd381+4qKVXB0vF7b97UP/oGxRpR2zSzvVY55
rtUx73OLJTk7lkKgSyQX9kutt18u8HMh2xEG0V8Yz7jiPq2rzbEgqQu5fwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC2tfc53xXacLti8CkXnRhLU9HARMB8GA1UdIwQY
MBaAFOJjbgLxVU9w2XGmVoScAb3/E4zoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG1OdUF2RlZUM0RaY2FaV2hKd0J2ZjhUak9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMzU1MTMtZWJkYi00NTUwLWE3ZDQt
MTJmOWY3MzNkYzRmLzEvTGExOXpuZkZkcHd1Mkx3S1JlZEdFdFQwY0JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iMzU1MTMtZWJkYi00NTUwLWE3ZDQtMTJmOWY3MzNkYzRm
LzEvNG1OdUF2RlZUM0RaY2FaV2hKd0J2ZjhUak9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaugMA0G
CSqGSIb3DQEBCwUAA4IBAQCKV5HcwffnHjzDMpaDVC0C6LKhyRAj6S4HLv05XDVA
+XcihSLGgX5X2RmqmXmGQCqU1krBpwehIbANXb85YfBWjavKzYq39lCHIay1Naou
lq5FUdUv30L6O2yEYsiWSFxqgVfs27jKcecD0QcvY04E3+NF1ewRU0hStvk/DrfH
qC13QOiBag5ucZrcgIevsAArkrkQdEUPcGRSvv3KpLNsMoit5eBds2b13/eKPHEj
p+JagNDXXaqgOrxtqJtqFV1vAWrJFp9Rx+iRIlt2bqKcapxJlmP3UhkaeBVykuhm
kMZkTnKaFgynKMCkctXkHptsmM3lXZ9bFG/J42dmN3eG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-fra.rpki-client.org