Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/LCd47S6UH5nNZ_qyc7fE4xOjhKg.roa
File: LCd47S6UH5nNZ_qyc7fE4xOjhKg.roa (raw, json)
Hash identifier: +3yaR/hJSxp/Ti4NC/sFNmXEqx/R4Jlq6All/EWytb0=
Subject key identifier: 2C:27:78:ED:2E:94:1F:99:CD:67:FA:B2:73:B7:C4:E3:13:A3:84:A8
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 018F19ED2978F0BE25143DEAEC3CE007656B
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/LCd47S6UH5nNZ_qyc7fE4xOjhKg.roa
Signing time: Fri 26 Apr 2024 10:22:04 +0000
ROA not before: Fri 26 Apr 2024 10:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 185.244.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 14:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:ed:29:78:f0:be:25:14:3d:ea:ec:3c:e0:07:65:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Apr 26 10:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c2778ed2e941f99cd67fab273b7c4e313a384a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:1c:a2:eb:21:4c:8d:21:f7:b6:f7:a7:3e:
a2:d0:1c:04:15:1a:3b:5d:7d:65:65:bc:3a:03:ed:
e8:d5:5a:62:20:0a:d6:d8:ef:d8:a7:da:6c:bc:27:
51:3c:92:58:6f:7a:b7:25:9c:10:ff:02:f0:88:fc:
61:47:f8:2d:d0:b4:10:05:4a:96:33:03:fc:24:6a:
75:a8:f3:59:b6:49:0f:0d:07:86:35:fd:54:f0:f0:
c2:37:e9:ce:b6:3b:50:f0:61:d2:a1:2b:7a:e8:4e:
72:94:7e:29:6f:af:bf:0d:e2:f9:ee:4a:fa:8b:a6:
c2:a7:32:d1:9a:f8:35:89:50:fd:74:f2:1a:0b:14:
48:29:4e:2e:98:91:c5:bd:d7:d8:c0:b0:54:ad:9b:
d7:59:be:6e:dc:c6:6e:42:4a:07:2b:e5:61:ec:79:
a3:1f:32:ff:00:b0:80:5c:fd:e0:db:cb:38:80:f0:
51:c5:11:7b:45:3d:e6:b5:58:22:77:ee:cc:15:1a:
27:db:fe:79:17:a8:df:4e:bd:bb:ac:f8:5f:25:cc:
9f:f9:9e:51:23:45:4f:68:f3:6d:8d:ec:3e:49:a2:
a6:ee:7b:1f:c0:91:d5:05:d5:48:32:57:66:a8:55:
60:5f:bf:63:b2:5a:c2:e2:15:af:00:bf:f4:e7:0a:
fa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:27:78:ED:2E:94:1F:99:CD:67:FA:B2:73:B7:C4:E3:13:A3:84:A8
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/LCd47S6UH5nNZ_qyc7fE4xOjhKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.49.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3d:0a:7e:dd:c1:6b:b2:aa:b4:53:2c:fb:95:70:dc:a6:be:
c2:b8:50:d4:37:2b:71:2f:f0:44:cc:9b:97:d9:ea:ae:c6:87:
ca:a6:7c:12:76:e6:50:16:f8:13:c7:f6:27:25:13:33:94:37:
61:ad:4b:b0:89:0d:63:4d:97:c2:99:a7:e1:c0:4d:c3:f2:25:
e1:38:67:0a:f5:bf:36:8a:bf:31:f3:5f:de:5a:37:00:9f:52:
a7:d2:e0:72:76:98:24:9f:9d:6d:ae:ba:31:d5:6a:c0:6e:d8:
06:fd:fe:b6:aa:dc:dd:7c:c3:5a:28:5e:3c:94:ac:5f:97:4b:
15:2e:ca:5f:c2:24:60:0a:26:8e:cb:b4:f8:4e:68:bc:d3:88:
62:b7:33:98:79:3d:79:7a:3a:c0:ae:c0:ed:c7:4f:87:45:76:
c3:55:b5:2d:fa:f5:78:94:06:13:be:86:36:ee:8a:11:b5:6b:
b2:14:49:c9:c2:c0:6d:66:df:88:2e:58:e1:16:67:0c:99:f1:
c3:e0:ce:84:99:b6:fa:84:82:e9:db:e8:d2:7e:a7:fc:b5:fc:
28:67:74:94:7d:44:5d:21:62:96:31:ea:8c:55:9c:04:02:e0:
a5:67:d1:db:67:57:93:eb:f5:d2:92:49:28:a4:a4:09:43:1c:
bb:b0:75:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8Z7Sl48L4lFD3q7DzgB2VrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4
YmUwOTQwHhcNMjQwNDI2MTAyMjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzI3NzhlZDJlOTQxZjk5Y2Q2N2ZhYjI3M2I3YzRlMzEzYTM4NGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpYcoushTI0h97b3pz6i0BwEFRo7
XX1lZbw6A+3o1VpiIArW2O/Yp9psvCdRPJJYb3q3JZwQ/wLwiPxhR/gt0LQQBUqW
MwP8JGp1qPNZtkkPDQeGNf1U8PDCN+nOtjtQ8GHSoSt66E5ylH4pb6+/DeL57kr6
i6bCpzLRmvg1iVD9dPIaCxRIKU4umJHFvdfYwLBUrZvXWb5u3MZuQkoHK+Vh7Hmj
HzL/ALCAXP3g28s4gPBRxRF7RT3mtVgid+7MFRon2/55F6jfTr27rPhfJcyf+Z5R
I0VPaPNtjew+SaKm7nsfwJHVBdVIMldmqFVgX79jslrC4hWvAL/05wr6YQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCwneO0ulB+ZzWf6snO3xOMTo4SoMB8GA1UdIwQY
MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt
NDkyYWIzNzI2ODlkLzEvTENkNDdTNlVINW5OWl9xeWM3ZkU0eE9qaEtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk
LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufQxMA0G
CSqGSIb3DQEBCwUAA4IBAQBqPQp+3cFrsqq0Uyz7lXDcpr7CuFDUNytxL/BEzJuX
2equxofKpnwSduZQFvgTx/YnJRMzlDdhrUuwiQ1jTZfCmafhwE3D8iXhOGcK9b82
ir8x81/eWjcAn1Kn0uBydpgkn51trrox1WrAbtgG/f62qtzdfMNaKF48lKxfl0sV
LspfwiRgCiaOy7T4Tmi804hitzOYeT15ejrArsDtx0+HRXbDVbUt+vV4lAYTvoY2
7ooRtWuyFEnJwsBtZt+ILljhFmcMmfHD4M6Embb6hILp2+jSfqf8tfwoZ3SUfURd
IWKWMeqMVZwEAuClZ9HbZ1eT6/XSkkkopKQJQxy7sHUc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org