Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/lj5XPGATwbPlYTMfSRl8dbE817Q.roa
File: lj5XPGATwbPlYTMfSRl8dbE817Q.roa (raw, json)
Hash identifier: a3UHjBlzjnTU5uA+a1O8VWtNTxO7hUraMBjWMejHCvA=
Subject key identifier: 96:3E:57:3C:60:13:C1:B3:E5:61:33:1F:49:19:7C:75:B1:3C:D7:B4
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 0189F861D593FB6BAD7AE4009775A5EE7E61
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/lj5XPGATwbPlYTMfSRl8dbE817Q.roa
Signing time: Tue 15 Aug 2023 08:48:28 +0000
ROA not before: Tue 15 Aug 2023 08:48:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40994
IP address blocks: 46.102.157.0/24 maxlen: 24
46.102.156.0/24 maxlen: 24
193.219.97.0/24 maxlen: 24
83.138.55.0/24 maxlen: 24
31.14.17.0/24 maxlen: 24
94.177.8.0/23 maxlen: 24
86.106.182.0/23 maxlen: 24
2a0d:f302::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:61:d5:93:fb:6b:ad:7a:e4:00:97:75:a5:ee:7e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Aug 15 08:48:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=963e573c6013c1b3e561331f49197c75b13cd7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:94:4c:23:46:2b:57:92:ce:4a:30:07:bf:f7:
a6:c4:80:a7:c8:53:7b:20:51:93:56:88:d1:ab:2b:
ed:60:a9:95:bb:7e:7e:9c:ca:ff:dd:7f:64:57:7a:
47:94:42:c3:5b:c4:f1:cc:7d:ad:52:32:8d:77:02:
d9:a1:11:2c:0e:fb:0b:5d:f5:7a:c9:13:aa:4a:33:
08:e8:ab:3d:74:2f:c8:e4:8c:be:12:41:8d:c2:7d:
62:7d:16:0a:4f:28:9d:a4:e5:9a:d0:9d:ca:0e:dc:
f7:4e:b4:64:3d:c7:4b:8b:57:88:39:68:f5:82:72:
7b:71:aa:e8:e5:34:79:22:a1:47:2f:f8:0b:5c:54:
30:e9:83:d4:e7:86:26:a3:f8:5b:bd:fe:4d:cc:bd:
45:d5:2e:42:76:5e:c1:13:4d:1f:c5:95:32:95:c4:
81:5e:9f:b8:db:43:03:7d:a7:a0:83:3c:b5:04:9d:
14:08:23:2f:89:fb:fd:af:6b:ec:10:92:3e:78:25:
a5:a6:17:c1:26:8d:61:b7:12:e8:eb:d1:ce:7e:21:
0a:75:89:df:ef:9b:23:57:bc:b3:0d:a3:60:13:8b:
9f:91:91:f0:77:a0:4a:7d:2b:94:79:29:37:0f:a8:
30:b2:96:86:c0:9e:21:8f:46:37:6f:dd:be:e4:18:
ad:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3E:57:3C:60:13:C1:B3:E5:61:33:1F:49:19:7C:75:B1:3C:D7:B4
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/lj5XPGATwbPlYTMfSRl8dbE817Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.17.0/24
46.102.156.0/23
83.138.55.0/24
86.106.182.0/23
94.177.8.0/23
193.219.97.0/24
IPv6:
2a0d:f302::/32
Signature Algorithm: sha256WithRSAEncryption
7b:42:a1:67:f9:85:e3:a6:d5:2a:5c:43:21:f5:2e:dd:ea:50:
40:32:22:10:c8:6b:72:cb:f0:e5:bd:2e:22:ff:8e:75:08:a2:
67:b5:d1:44:8c:3a:18:d2:3d:f2:3a:e2:e6:55:bd:f5:cd:91:
98:ef:f9:95:cc:9a:3e:02:4c:57:9b:90:86:3d:72:e8:ce:4f:
50:02:59:38:c5:df:d7:ff:59:0c:46:1f:ef:96:b0:6b:af:49:
2f:9a:c2:2e:9c:76:0f:e9:2d:70:d1:8d:84:ed:d3:e8:3e:51:
f0:1a:6b:6d:02:44:e9:6d:e2:47:68:ee:01:03:39:de:37:8a:
c8:df:80:41:45:40:de:cb:df:ae:fe:bb:d3:89:4d:ba:90:cc:
8b:b9:e3:8b:24:31:29:83:11:48:91:1f:03:4f:90:67:24:40:
4a:c6:b9:21:7c:d6:be:73:fe:20:f5:39:c4:9e:98:da:dc:46:
e1:28:6d:6e:09:15:9c:fc:eb:fa:34:12:0a:84:5e:03:24:00:
1d:69:29:73:35:0d:19:7f:33:80:41:34:51:68:de:8a:1e:65:
3f:24:4c:65:84:7e:af:4b:22:69:cc:cf:ce:1a:20:47:5b:62:
b3:eb:0b:13:8a:32:47:ba:f3:8e:56:ce:9d:a7:26:2d:dd:15:
ce:84:1a:b6
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAYn4YdWT+2uteuQAl3Wl7n5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2YwZmJkNWY2ZTE3NTk5MDNjYzY5ZGUwZGM0ZWEyNGMx
ZjgzZGYwHhcNMjMwODE1MDg0ODI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjNlNTczYzYwMTNjMWIzZTU2MTMzMWY0OTE5N2M3NWIxM2NkN2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpRMI0YrV5LOSjAHv/emxICnyFN7
IFGTVojRqyvtYKmVu35+nMr/3X9kV3pHlELDW8TxzH2tUjKNdwLZoREsDvsLXfV6
yROqSjMI6Ks9dC/I5Iy+EkGNwn1ifRYKTyidpOWa0J3KDtz3TrRkPcdLi1eIOWj1
gnJ7caro5TR5IqFHL/gLXFQw6YPU54Ymo/hbvf5NzL1F1S5Cdl7BE00fxZUylcSB
Xp+420MDfaeggzy1BJ0UCCMvifv9r2vsEJI+eCWlphfBJo1htxLo69HOfiEKdYnf
75sjV7yzDaNgE4ufkZHwd6BKfSuUeSk3D6gwspaGwJ4hj0Y3b92+5BitmwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFJY+VzxgE8Gz5WEzH0kZfHWxPNe0MB8GA1UdIwQY
MBaAFNTPD71fbhdZkDzGneDcTqJMH4PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMt
NTg1N2YxYzE3NjI0LzEvbGo1WFBHQVR3YlBsWVRNZlNSbDhkYkU4MTdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMtNTg1N2YxYzE3NjI0
LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQAHw4RAwQB
LmacAwQAU4o3AwQBVmq2AwQBXrEIAwQAwdthMA0EAgACMAcDBQAqDfMCMA0GCSqG
SIb3DQEBCwUAA4IBAQB7QqFn+YXjptUqXEMh9S7d6lBAMiIQyGtyy/DlvS4i/451
CKJntdFEjDoY0j3yOuLmVb31zZGY7/mVzJo+AkxXm5CGPXLozk9QAlk4xd/X/1kM
Rh/vlrBrr0kvmsIunHYP6S1w0Y2E7dPoPlHwGmttAkTpbeJHaO4BAzneN4rI34BB
RUDey9+u/rvTiU26kMyLueOLJDEpgxFIkR8DT5BnJEBKxrkhfNa+c/4g9TnEnpja
3EbhKG1uCRWc/Ov6NBIKhF4DJAAdaSlzNQ0ZfzOAQTRRaN6KHmU/JExlhH6vSyJp
zM/OGiBHW2Kz6wsTijJHuvOOVs6dpyYt3RXOhBq2
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:26 2024 by rpki-client on console-ams.rpki-client.org