Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/LSzAqMrs1BhS15x_E9PuvCPwgBI.roa
File: LSzAqMrs1BhS15x_E9PuvCPwgBI.roa (raw, json)
Hash identifier: k0ckqH/CogCnBXJu2po1AhGV2ag7WipWqS3yM7Av7gQ=
Subject key identifier: 2D:2C:C0:A8:CA:EC:D4:18:52:D7:9C:7F:13:D3:EE:BC:23:F0:80:12
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 018A1897055DCC37E194C9F43010F02C72DB
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/LSzAqMrs1BhS15x_E9PuvCPwgBI.roa
Signing time: Mon 21 Aug 2023 14:54:24 +0000
ROA not before: Mon 21 Aug 2023 14:54:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 262287
IP address blocks: 45.11.233.0/24 maxlen: 24
185.15.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:97:05:5d:cc:37:e1:94:c9:f4:30:10:f0:2c:72:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Aug 21 14:54:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d2cc0a8caecd41852d79c7f13d3eebc23f08012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:26:20:fe:8b:51:51:51:db:78:de:7d:3d:
5c:db:14:36:8d:25:4d:06:ba:b4:ca:a9:09:09:a7:
db:46:d5:15:8a:af:c6:df:21:49:58:c1:31:8c:ce:
3a:01:0e:61:be:39:a7:88:bf:16:75:b8:51:06:c7:
04:af:87:ea:4f:30:5b:bc:0d:f8:2f:7d:ce:6d:e0:
10:df:62:97:b1:f3:79:64:7e:25:58:97:67:00:3e:
d0:c2:51:26:66:65:a3:4c:0a:95:c7:fa:fb:b4:e8:
b0:c6:4b:e4:8b:55:0f:49:10:24:70:af:22:fd:91:
5c:0e:13:d7:34:bb:9c:a9:4c:af:90:6d:64:1c:02:
46:58:3e:8f:7a:25:4f:c1:fb:49:51:20:eb:29:d3:
77:98:ba:c2:60:92:e1:ee:06:cb:ed:00:d1:c6:79:
76:11:b4:e7:19:3d:d7:0a:57:e7:02:79:55:e5:20:
34:d5:e8:fd:39:2c:85:77:9f:fd:8e:72:f6:fe:e9:
46:84:b7:c4:53:30:e5:5e:2a:ed:d3:19:b6:70:39:
c4:ad:bf:88:90:fd:08:83:fd:ff:e9:9e:9a:40:3d:
d7:88:a6:7a:36:d9:17:08:c5:f0:7d:6c:4b:f8:52:
47:96:05:a5:de:76:85:88:f6:4a:33:ed:3c:ed:a5:
eb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2C:C0:A8:CA:EC:D4:18:52:D7:9C:7F:13:D3:EE:BC:23:F0:80:12
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/LSzAqMrs1BhS15x_E9PuvCPwgBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.233.0/24
185.15.176.0/24
Signature Algorithm: sha256WithRSAEncryption
74:06:fb:2d:9a:2c:12:19:e1:74:86:73:e6:93:89:1d:4e:1a:
5e:8c:a1:a0:6a:dd:e1:a7:dc:51:0d:d4:a1:a7:85:fb:f3:79:
da:75:d2:7b:cb:76:23:06:83:4e:1d:30:da:c0:ee:11:86:89:
0a:1d:e4:77:69:77:9e:b4:84:f6:5d:c6:59:86:5f:80:59:6a:
1d:e3:7f:c4:5b:1a:17:ca:6e:36:26:d6:b8:8b:63:05:51:7f:
46:c3:1b:72:a5:e9:72:ab:15:5c:37:72:dd:de:b2:b9:6b:01:
35:df:e2:11:30:a9:b7:56:fb:c3:5d:75:4e:61:0b:35:7c:84:
ae:47:8b:3f:fe:1d:86:26:d8:6b:2e:c7:00:fb:88:1a:db:66:
df:ca:6c:51:1f:44:c7:96:38:22:0f:b8:1d:b0:c6:b7:e2:f1:
5d:42:f0:fa:93:26:a7:80:7f:8f:e0:ab:1a:d7:a8:75:4c:62:
61:47:5b:95:c0:f1:ea:49:83:24:bc:8a:7c:1f:ad:fc:e5:29:
e0:2b:e0:21:b5:d3:ae:77:f8:0d:c1:83:09:c1:29:82:11:09:
84:e3:c4:28:62:6f:3e:94:12:c3:c8:bc:40:f6:cc:5e:eb:9e:
0e:cd:2f:4e:f4:7f:88:a8:69:42:ef:30:34:b5:9d:54:34:f1:
61:af:94:6e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYoYlwVdzDfhlMn0MBDwLHLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx
ODQxMmMwHhcNMjMwODIxMTQ1NDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDJjYzBhOGNhZWNkNDE4NTJkNzljN2YxM2QzZWViYzIzZjA4MDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiMmIP6LUVFR23jefT1c2xQ2jSVN
Brq0yqkJCafbRtUViq/G3yFJWMExjM46AQ5hvjmniL8WdbhRBscEr4fqTzBbvA34
L33ObeAQ32KXsfN5ZH4lWJdnAD7QwlEmZmWjTAqVx/r7tOiwxkvki1UPSRAkcK8i
/ZFcDhPXNLucqUyvkG1kHAJGWD6PeiVPwftJUSDrKdN3mLrCYJLh7gbL7QDRxnl2
EbTnGT3XClfnAnlV5SA01ej9OSyFd5/9jnL2/ulGhLfEUzDlXirt0xm2cDnErb+I
kP0Ig/3/6Z6aQD3XiKZ6NtkXCMXwfWxL+FJHlgWl3naFiPZKM+087aXrrQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC0swKjK7NQYUtecfxPT7rwj8IASMB8GA1UdIwQY
MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt
MjVjYzlkNmNmYmI5LzEvTFN6QXFNcnMxQmhTMTV4X0U5UHV2Q1B3Z0JJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5
LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQvpAwQA
uQ+wMA0GCSqGSIb3DQEBCwUAA4IBAQB0BvstmiwSGeF0hnPmk4kdThpejKGgat3h
p9xRDdShp4X783naddJ7y3YjBoNOHTDawO4RhokKHeR3aXeetIT2XcZZhl+AWWod
43/EWxoXym42Jta4i2MFUX9GwxtypelyqxVcN3Ld3rK5awE13+IRMKm3VvvDXXVO
YQs1fISuR4s//h2GJthrLscA+4ga22bfymxRH0THljgiD7gdsMa34vFdQvD6kyan
gH+P4Ksa16h1TGJhR1uVwPHqSYMkvIp8H6385SngK+AhtdOud/gNwYMJwSmCEQmE
48QoYm8+lBLDyLxA9sxe654OzS9O9H+IqGlC7zA0tZ1UNPFhr5Ru
-----END CERTIFICATE-----
Generated at Wed Aug 30 10:45:22 2023 by rpki-client on console-fra.rpki-client.org