Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/LJAISplgAxPVyOsXRpK1iOQyuCs.roa
File: LJAISplgAxPVyOsXRpK1iOQyuCs.roa (raw, json)
Hash identifier: 6swqD/6Clhs8PW3eTDKtCp8kFpliURyrdEZNddlCZ7c=
Subject key identifier: 2C:90:08:4A:99:60:03:13:D5:C8:EB:17:46:92:B5:88:E4:32:B8:2B
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 018ABD60DFE7718F352BAB6D4D6D3119ABB4
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/LJAISplgAxPVyOsXRpK1iOQyuCs.roa
Signing time: Fri 22 Sep 2023 14:52:37 +0000
ROA not before: Fri 22 Sep 2023 14:52:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 46.28.240.0/21 maxlen: 24
193.22.169.0/24 maxlen: 24
195.80.237.0/24 maxlen: 24
193.41.210.0/23 maxlen: 24
2a02:2978::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bd:60:df:e7:71:8f:35:2b:ab:6d:4d:6d:31:19:ab:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Sep 22 14:52:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c90084a99600313d5c8eb174692b588e432b82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c7:eb:3c:00:df:ac:ab:39:ad:bb:3e:99:fe:
d1:ed:bd:49:ee:c3:08:7c:f0:e7:ed:23:2b:f3:1e:
a6:fc:7f:06:50:68:91:62:51:de:9e:23:ed:05:22:
a0:4c:23:0a:a8:c2:c1:56:55:4f:55:44:20:8b:a3:
d6:6d:57:0c:f6:06:0c:a0:bd:ea:71:c9:54:5d:f8:
c8:02:df:5d:3c:84:e2:13:48:52:7c:7c:6b:aa:d2:
d0:16:17:12:e3:e6:5e:65:44:4a:04:68:ac:2b:1a:
1e:45:87:c6:fe:03:e3:db:9c:76:b1:c8:f0:20:8d:
cb:56:b4:74:ee:d1:c7:b8:ce:a3:47:53:e5:83:68:
5b:b5:ec:86:d4:2e:bf:a3:4a:96:1a:97:6d:d6:d0:
88:5f:13:a2:fb:8d:29:f4:f4:35:fe:04:35:e9:20:
e1:1c:35:3e:6a:80:6a:50:bb:b9:44:85:f6:2e:58:
e3:47:e7:ea:51:98:eb:2f:4d:f9:9d:70:76:6b:7e:
b2:b3:be:cb:02:18:41:03:6e:e0:03:af:41:d4:7d:
88:b8:f6:e0:ec:82:ab:ad:ce:01:32:4e:8f:1f:a0:
f1:d3:38:51:d8:48:3a:5f:56:a1:e2:e2:30:d2:cc:
89:c1:25:07:50:d7:c6:02:00:47:c5:56:a3:79:09:
3f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:90:08:4A:99:60:03:13:D5:C8:EB:17:46:92:B5:88:E4:32:B8:2B
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/LJAISplgAxPVyOsXRpK1iOQyuCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.240.0/21
193.22.169.0/24
193.41.210.0/23
195.80.237.0/24
IPv6:
2a02:2978::/32
Signature Algorithm: sha256WithRSAEncryption
06:93:c1:47:f5:a8:99:52:6f:f8:0c:37:18:00:84:e9:7d:af:
bd:71:8a:ec:79:1a:3b:b2:26:72:7f:44:70:3c:22:25:fa:47:
88:97:83:53:39:00:85:51:4f:21:1f:f9:d3:e4:b8:2b:dc:49:
b1:99:e5:4e:3e:b9:d3:04:eb:76:71:67:b5:76:15:c1:02:33:
67:f9:0a:76:55:02:49:51:67:c9:7e:d3:0f:0c:b8:84:7d:01:
f5:3a:d9:26:f4:22:c8:8b:93:e5:bf:26:b7:ee:4c:1d:32:7f:
d3:b7:dd:9d:5e:a1:16:cc:a6:e0:9f:a4:3c:3e:10:49:f6:e0:
6d:89:e2:10:40:70:e2:7d:06:c9:86:92:69:10:99:3e:e7:00:
06:4c:da:77:03:dc:99:87:00:93:62:34:d4:a8:b8:ac:0d:da:
1f:90:b6:15:4c:f0:aa:6f:21:75:d1:9b:54:0d:98:8b:90:a5:
17:76:4d:65:f6:34:16:84:cb:d8:db:0a:32:b8:3c:56:cd:00:
25:af:89:0f:43:6c:ee:df:a5:f0:93:e0:ef:c5:c8:07:84:d3:
fe:ce:e5:7e:14:d4:db:8e:56:38:6f:68:c2:a5:f4:e6:54:8e:
96:db:fd:9c:bf:86:6b:cb:68:bd:ee:b7:f9:1e:f3:9b:4b:61:
79:84:03:ed
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYq9YN/ncY81K6ttTW0xGau0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZmNhN2M5NmU4MDQ1MDVhNDhiOTk2MDNkOWIyMTI0ZjFk
ZDM3MDIwHhcNMjMwOTIyMTQ1MjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzkwMDg0YTk5NjAwMzEzZDVjOGViMTc0NjkyYjU4OGU0MzJiODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cfrPADfrKs5rbs+mf7R7b1J7sMI
fPDn7SMr8x6m/H8GUGiRYlHeniPtBSKgTCMKqMLBVlVPVUQgi6PWbVcM9gYMoL3q
cclUXfjIAt9dPITiE0hSfHxrqtLQFhcS4+ZeZURKBGisKxoeRYfG/gPj25x2scjw
II3LVrR07tHHuM6jR1Plg2hbteyG1C6/o0qWGpdt1tCIXxOi+40p9PQ1/gQ16SDh
HDU+aoBqULu5RIX2LljjR+fqUZjrL035nXB2a36ys77LAhhBA27gA69B1H2IuPbg
7IKrrc4BMk6PH6Dx0zhR2Eg6X1ah4uIw0syJwSUHUNfGAgBHxVajeQk/2QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFCyQCEqZYAMT1cjrF0aStYjkMrgrMB8GA1UdIwQY
MBaAFIv8p8lugEUFpIuZYD2bISTx3TcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAt
MThiMWE5MzdhNTY3LzEvTEpBSVNwbGdBeFBWeU9zWFJwSzFpT1F5dUNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAtMThiMWE5MzdhNTY3
LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLhzwAwQA
wRapAwQBwSnSAwQAw1DtMA0EAgACMAcDBQAqAil4MA0GCSqGSIb3DQEBCwUAA4IB
AQAGk8FH9aiZUm/4DDcYAITpfa+9cYrseRo7siZyf0RwPCIl+keIl4NTOQCFUU8h
H/nT5Lgr3EmxmeVOPrnTBOt2cWe1dhXBAjNn+Qp2VQJJUWfJftMPDLiEfQH1Otkm
9CLIi5Plvya37kwdMn/Tt92dXqEWzKbgn6Q8PhBJ9uBtieIQQHDifQbJhpJpEJk+
5wAGTNp3A9yZhwCTYjTUqLisDdofkLYVTPCqbyF10ZtUDZiLkKUXdk1l9jQWhMvY
2woyuDxWzQAlr4kPQ2zu36Xwk+DvxcgHhNP+zuV+FNTbjlY4b2jCpfTmVI6W2/2c
v4Zry2i97rf5HvObS2F5hAPt
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:19 2024 by rpki-client on console-ams.rpki-client.org