Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/LjAU53lnw2_UP94SZ4oKRWPaN3w.roa
File: LjAU53lnw2_UP94SZ4oKRWPaN3w.roa (raw, json)
Hash identifier: PIfbmfrS7TsweqW5RYQgyFod2N9YNcSFnoyV8Uwwn/E=
Subject key identifier: 2E:30:14:E7:79:67:C3:6F:D4:3F:DE:12:67:8A:0A:45:63:DA:37:7C
Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial: 01856EEFD4AEBC67142952016BF3FA66FD87
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/LjAU53lnw2_UP94SZ4oKRWPaN3w.roa
Signing time: Sun 01 Jan 2023 20:04:49 +0000
ROA not before: Sun 01 Jan 2023 20:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34756
IP address blocks: 77.95.96.0/21 maxlen: 21
193.138.109.0/24 maxlen: 24
45.15.12.0/22 maxlen: 22
185.47.236.0/22 maxlen: 22
195.114.12.0/24 maxlen: 24
176.58.24.0/21 maxlen: 21
176.58.30.0/24 maxlen: 24
176.58.31.0/24 maxlen: 24
195.230.110.0/24 maxlen: 24
2a03:fc00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:d4:ae:bc:67:14:29:52:01:6b:f3:fa:66:fd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
Validity
Not Before: Jan 1 20:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e3014e77967c36fd43fde12678a0a4563da377c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5b:51:3e:1c:96:60:69:15:51:20:22:7e:74:
6a:52:76:fb:96:33:a1:a3:c7:9e:63:a2:c6:20:11:
43:2a:8e:b3:fb:8c:4a:28:95:d5:a2:78:c2:47:6b:
ee:07:84:3c:e4:f4:47:63:21:d6:c2:00:6f:19:db:
ac:35:0d:a2:f8:e1:9b:d8:bf:ec:1b:a6:8d:ef:31:
db:af:6f:61:4d:9e:c7:47:e9:c0:3e:bb:fe:f4:0b:
51:99:3e:ea:51:e0:fd:b2:ec:f0:3a:3b:db:1f:24:
b6:1f:2f:ed:a2:0f:be:99:7b:48:d2:76:98:92:11:
ae:64:67:0d:89:58:7f:07:8e:bb:7f:c3:27:ce:f5:
ae:8b:76:4a:62:8a:ea:87:1f:52:fd:44:20:e0:0d:
26:77:ed:e5:7d:01:40:12:b2:e7:d4:f6:3b:3c:5b:
9b:71:43:4b:0b:0d:e8:13:c3:90:0c:48:b7:c6:24:
e7:68:ad:fc:a1:6a:cd:86:50:1b:a0:82:f1:63:8f:
1f:b8:be:47:39:3f:1f:6d:80:36:3f:07:41:3e:3e:
b4:b0:89:99:8d:5e:f7:6f:06:cf:19:4a:cd:48:4f:
16:d9:0d:7c:c3:bd:48:f5:d2:29:e7:bf:14:fd:b2:
e6:98:64:11:ea:b3:61:0e:23:5b:f0:c0:c8:cd:b3:
b7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:30:14:E7:79:67:C3:6F:D4:3F:DE:12:67:8A:0A:45:63:DA:37:7C
X509v3 Authority Key Identifier:
keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/LjAU53lnw2_UP94SZ4oKRWPaN3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.12.0/22
77.95.96.0/21
176.58.24.0/21
185.47.236.0/22
193.138.109.0/24
195.114.12.0/24
195.230.110.0/24
IPv6:
2a03:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
84:5b:3d:0b:92:63:06:9b:0f:1d:6c:69:a4:42:e2:b5:06:b9:
0a:64:17:d5:44:b6:a4:05:3a:81:29:bc:b7:cb:18:09:03:96:
11:87:b0:74:ab:39:cb:b3:31:a5:2d:17:84:45:de:ba:b2:25:
f0:69:f1:66:b4:5f:e4:c5:4f:f5:c4:56:d6:c3:ef:82:a0:62:
51:b4:f8:c0:3b:71:92:d6:9b:41:b5:f0:a3:cc:01:b3:e2:91:
17:14:f7:5a:0e:3d:9d:5d:c0:6f:08:6b:2b:e2:31:6e:60:4f:
0a:2a:90:ed:4a:dc:45:32:5d:77:51:b6:67:c9:7b:5b:56:b6:
99:09:ab:85:40:f9:21:4a:90:16:86:5d:b5:60:c5:4f:a5:b5:
2d:7a:2b:6d:4e:67:0a:31:b1:f5:02:10:af:e0:ed:0e:43:c8:
9f:98:43:72:04:7c:9f:4e:db:16:2b:8a:b9:2b:21:4e:0b:0a:
8a:1d:60:8d:d5:ca:0b:2a:e9:78:93:ce:b3:e7:06:71:1a:97:
8d:ec:d1:4c:7b:25:06:ab:ef:29:e8:f1:5e:33:20:e9:36:ff:
ec:74:84:62:1a:48:15:0c:67:dc:74:7c:ad:fe:a9:88:d7:bd:
d3:a2:d6:fc:66:61:36:2c:44:b2:e3:2c:07:1d:dd:6c:54:0e:
88:32:a2:ff
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYVu79SuvGcUKVIBa/P6Zv2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NTE3NjJkZTNkM2YxOWNlZGQ0MzhiMDNjZjIzOTg2Y2U5
MTcyN2YwHhcNMjMwMTAxMjAwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTMwMTRlNzc5NjdjMzZmZDQzZmRlMTI2NzhhMGE0NTYzZGEzNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFtRPhyWYGkVUSAifnRqUnb7ljOh
o8eeY6LGIBFDKo6z+4xKKJXVonjCR2vuB4Q85PRHYyHWwgBvGdusNQ2i+OGb2L/s
G6aN7zHbr29hTZ7HR+nAPrv+9AtRmT7qUeD9suzwOjvbHyS2Hy/tog++mXtI0naY
khGuZGcNiVh/B467f8MnzvWui3ZKYorqhx9S/UQg4A0md+3lfQFAErLn1PY7PFub
cUNLCw3oE8OQDEi3xiTnaK38oWrNhlAboILxY48fuL5HOT8fbYA2PwdBPj60sImZ
jV73bwbPGUrNSE8W2Q18w71I9dIp578U/bLmmGQR6rNhDiNb8MDIzbO3qwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFC4wFOd5Z8Nv1D/eEmeKCkVj2jd8MB8GA1UdIwQY
MBaAFHZRdi3j0/Gc7dQ4sDzyOYbOkXJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGxGMkxlUFQ4Wnp0MURpd1BQSTVoczZSY244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTI4MDgtZThmNC00MmE3LWE4Mjct
N2FiY2U2MDBjMjE4LzEvTGpBVTUzbG53Ml9VUDk0U1o0b0tSV1BhTjN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80ZTI4MDgtZThmNC00MmE3LWE4MjctN2FiY2U2MDBjMjE4
LzEvZGxGMkxlUFQ4Wnp0MURpd1BQSTVoczZSY244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQCLQ8MAwQD
TV9gAwQDsDoYAwQCuS/sAwQAwYptAwQAw3IMAwQAw+ZuMA0EAgACMAcDBQMqA/wA
MA0GCSqGSIb3DQEBCwUAA4IBAQCEWz0LkmMGmw8dbGmkQuK1BrkKZBfVRLakBTqB
Kby3yxgJA5YRh7B0qznLszGlLReERd66siXwafFmtF/kxU/1xFbWw++CoGJRtPjA
O3GS1ptBtfCjzAGz4pEXFPdaDj2dXcBvCGsr4jFuYE8KKpDtStxFMl13UbZnyXtb
VraZCauFQPkhSpAWhl21YMVPpbUteittTmcKMbH1AhCv4O0OQ8ifmENyBHyfTtsW
K4q5KyFOCwqKHWCN1coLKul4k86z5wZxGpeN7NFMeyUGq+8p6PFeMyDpNv/sdIRi
GkgVDGfcdHyt/qmI173Totb8ZmE2LESy4ywHHd1sVA6IMqL/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:27 2024 by rpki-client on console-ams.rpki-client.org