Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/LZKkrrnvljf7gHppkbFLoF_eV10.roa
File: LZKkrrnvljf7gHppkbFLoF_eV10.roa (raw, json)
Hash identifier: nnE33QDcPnvbRXx34cCeqAvcj1EaSRPb913oNlWi5sQ=
Subject key identifier: 2D:92:A4:AE:B9:EF:96:37:FB:80:7A:69:91:B1:4B:A0:5F:DE:57:5D
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018D45D629F46E73BD91013850B19CA0E730
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/LZKkrrnvljf7gHppkbFLoF_eV10.roa
Signing time: Fri 26 Jan 2024 12:54:39 +0000
ROA not before: Fri 26 Jan 2024 12:54:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 77.246.222.0/24 maxlen: 24
88.80.134.0/23 maxlen: 24
88.80.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:d6:29:f4:6e:73:bd:91:01:38:50:b1:9c:a0:e7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 26 12:54:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d92a4aeb9ef9637fb807a6991b14ba05fde575d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:31:06:55:8c:8e:11:26:c7:32:da:d2:6d:af:
6e:64:12:82:e6:83:25:19:a7:c3:8e:70:a5:e5:1f:
42:94:13:a9:52:da:4d:48:2e:ad:eb:8d:6f:b9:83:
18:6d:ed:1a:10:1f:95:85:6f:5c:3a:0b:79:00:af:
eb:3f:f7:90:42:48:89:b3:59:8f:45:de:f1:c7:05:
fb:b5:b0:2e:3f:b8:a7:9a:fb:fa:94:a2:ab:8a:e2:
ba:ce:4f:00:6e:27:8c:10:44:0a:ac:a5:d6:16:b3:
1f:bb:b5:98:27:3e:47:de:27:f9:7c:44:75:c6:17:
3b:ee:43:ac:ac:1a:03:27:12:29:d6:50:e2:5d:a9:
c4:1c:39:3a:69:c5:35:57:a2:13:a1:4a:ae:83:20:
0b:f1:8a:11:46:fe:5e:d0:6e:4b:2e:1c:c5:17:4e:
1b:8b:91:81:50:3f:25:8c:1f:6e:0f:73:52:72:b8:
85:94:56:82:e6:d4:53:93:54:d6:65:0b:3b:5e:63:
06:bd:96:64:4f:02:c3:11:ea:61:55:29:15:30:c7:
26:d5:05:74:17:77:63:eb:75:f1:74:80:c3:05:3c:
65:74:0a:4d:2c:8a:00:dc:7e:1c:f5:dd:94:ba:0e:
e8:e1:5d:9b:f3:4a:87:21:16:df:bf:a0:72:e0:ff:
bd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:92:A4:AE:B9:EF:96:37:FB:80:7A:69:91:B1:4B:A0:5F:DE:57:5D
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/LZKkrrnvljf7gHppkbFLoF_eV10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.222.0/24
88.80.134.0/23
88.80.138.0/24
Signature Algorithm: sha256WithRSAEncryption
80:82:bd:89:9d:ae:dc:26:a2:19:ac:8c:db:18:58:b4:3b:78:
08:a2:ae:47:a9:b1:13:03:8a:21:47:bd:a1:cd:4b:bc:23:e1:
aa:85:ff:93:66:dd:d2:21:69:83:df:b0:eb:b1:fb:df:f2:7d:
21:43:21:d0:51:5d:46:ca:2a:33:5b:74:b6:53:f4:17:16:cd:
ac:b9:1b:da:ce:dc:09:54:1f:ee:fc:50:10:e3:fa:28:4a:c4:
29:b1:c7:32:96:91:55:e5:06:51:28:05:7d:80:63:51:6c:46:
16:61:b6:46:8a:18:58:2d:e2:3f:77:15:06:4d:0c:09:b7:10:
da:2e:da:42:75:7e:06:ef:e5:dd:7c:39:fe:20:93:ed:1b:10:
ae:81:c1:28:38:09:da:c7:99:7b:6e:cd:69:d7:8a:b0:49:66:
e2:d9:58:0d:c6:a9:57:f0:05:c8:6e:b5:8f:0e:58:cd:18:78:
bb:da:2b:fb:b4:b6:c1:1e:ad:ad:cf:f8:55:f9:00:da:43:70:
b3:f1:28:f8:d9:54:04:ff:e3:8d:a4:88:ff:9c:30:d0:c6:ac:
cf:0f:80:44:55:23:8d:6d:22:69:8e:c8:a3:ab:c1:68:d5:14:
6e:36:10:70:9b:61:fb:9f:d9:1a:c0:1e:5f:2b:7c:8d:9a:b4:
9d:49:b4:f5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY1F1in0bnO9kQE4ULGcoOcwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjQwMTI2MTI1NDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDkyYTRhZWI5ZWY5NjM3ZmI4MDdhNjk5MWIxNGJhMDVmZGU1NzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzEGVYyOESbHMtrSba9uZBKC5oMl
GafDjnCl5R9ClBOpUtpNSC6t641vuYMYbe0aEB+VhW9cOgt5AK/rP/eQQkiJs1mP
Rd7xxwX7tbAuP7inmvv6lKKriuK6zk8AbieMEEQKrKXWFrMfu7WYJz5H3if5fER1
xhc77kOsrBoDJxIp1lDiXanEHDk6acU1V6IToUqugyAL8YoRRv5e0G5LLhzFF04b
i5GBUD8ljB9uD3NScriFlFaC5tRTk1TWZQs7XmMGvZZkTwLDEephVSkVMMcm1QV0
F3dj63XxdIDDBTxldApNLIoA3H4c9d2Uug7o4V2b80qHIRbfv6By4P+9eQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFC2SpK6575Y3+4B6aZGxS6Bf3lddMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvTFpLa3JybnZsamY3Z0hwcGtiRkxvRl9lVjEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATfbeAwQB
WFCGAwQAWFCKMA0GCSqGSIb3DQEBCwUAA4IBAQCAgr2Jna7cJqIZrIzbGFi0O3gI
oq5HqbETA4ohR72hzUu8I+Gqhf+TZt3SIWmD37Drsfvf8n0hQyHQUV1GyiozW3S2
U/QXFs2suRvaztwJVB/u/FAQ4/ooSsQpsccylpFV5QZRKAV9gGNRbEYWYbZGihhY
LeI/dxUGTQwJtxDaLtpCdX4G7+XdfDn+IJPtGxCugcEoOAnax5l7bs1p14qwSWbi
2VgNxqlX8AXIbrWPDljNGHi72iv7tLbBHq2tz/hV+QDaQ3Cz8Sj42VQE/+ONpIj/
nDDQxqzPD4BEVSONbSJpjsijq8Fo1RRuNhBwm2H7n9kawB5fK3yNmrSdSbT1
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:20 2024 by rpki-client on console-ams.rpki-client.org