Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/LN29UrFOsGJNtsJjroy2YSuqkLI.roa
File: LN29UrFOsGJNtsJjroy2YSuqkLI.roa (raw, json)
Hash identifier: MzEpUb2dpxNsrTEk/SglStnCkF21ltz1oxrFL2qzrhY=
Subject key identifier: 2C:DD:BD:52:B1:4E:B0:62:4D:B6:C2:63:AE:8C:B6:61:2B:AA:90:B2
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01888A96B2CBE8EC51E3BBA0E4CBD27130AE
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/LN29UrFOsGJNtsJjroy2YSuqkLI.roa
Signing time: Mon 05 Jun 2023 08:05:11 +0000
ROA not before: Mon 05 Jun 2023 08:05:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44092
IP address blocks: 185.22.56.0/24 maxlen: 24
185.22.58.0/24 maxlen: 24
185.22.57.0/24 maxlen: 24
185.22.59.0/24 maxlen: 24
147.185.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:96:b2:cb:e8:ec:51:e3:bb:a0:e4:cb:d2:71:30:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jun 5 08:05:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cddbd52b14eb0624db6c263ae8cb6612baa90b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2c:99:42:91:62:0b:85:77:2e:79:a0:86:1d:
b1:64:23:61:49:a0:ff:e0:8f:3f:a4:e3:21:c9:7f:
82:9e:56:2e:ba:fb:5b:05:0b:d3:9e:3a:50:41:06:
7b:dc:9e:23:6d:23:01:70:6c:01:25:48:5e:80:c9:
1f:04:d3:e6:35:a6:eb:a9:f4:33:df:31:92:47:1b:
bd:f4:55:af:ab:63:8b:f8:74:b2:fb:fc:aa:1e:d4:
e9:cf:8e:38:fb:a4:38:a3:8f:38:88:e3:6a:01:b5:
bf:bb:20:90:14:6e:db:cf:57:a3:cc:9c:ba:03:5c:
02:92:d0:19:e5:44:1d:1f:c1:c6:45:15:fc:61:6c:
d6:64:3b:7c:6b:f1:9b:dd:94:85:f4:9f:50:10:33:
a5:ce:56:d3:90:ba:fb:30:1e:ba:40:2d:af:69:82:
b9:f1:0d:9b:f4:e3:05:52:3b:90:f8:35:b8:8b:06:
9f:34:bd:2f:3b:b7:06:f7:2b:17:8e:5f:4a:78:07:
9d:a5:fa:64:79:34:e8:5a:c8:10:9e:50:7d:23:68:
28:70:23:79:5c:b6:dd:91:e2:ff:12:50:04:8d:5d:
c5:fc:3c:e6:ef:58:73:de:16:fd:58:d3:47:5d:a9:
51:97:7a:20:62:8e:9e:db:96:14:90:af:64:cc:a1:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DD:BD:52:B1:4E:B0:62:4D:B6:C2:63:AE:8C:B6:61:2B:AA:90:B2
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/LN29UrFOsGJNtsJjroy2YSuqkLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.163.0/24
185.22.56.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:e3:2e:f8:7c:f5:ec:5d:96:68:33:1a:f7:e2:47:b3:5d:ba:
5c:ea:c1:d1:86:a4:4b:61:86:95:5e:77:b1:08:1e:97:24:a7:
2e:7e:93:1d:83:2f:95:47:e3:a2:91:95:bb:3b:d9:71:7b:14:
d6:ee:a7:c7:2d:3a:d3:a8:da:3e:83:fe:99:7c:50:b3:51:f3:
f6:8a:b5:95:94:7a:17:8a:be:c9:57:f0:8f:09:3d:3b:8a:a8:
00:4b:31:b8:91:80:95:47:b6:93:7f:80:cb:ed:20:ac:ac:87:
84:65:a3:ad:17:76:6b:5c:fa:b4:c6:84:55:35:6b:b6:46:84:
9e:11:15:65:69:ac:d9:35:3c:01:e1:b6:93:04:37:8c:fc:82:
ff:e8:61:af:c0:a3:d1:15:7b:93:48:35:19:31:91:9e:e1:be:
72:7a:64:bb:f4:0a:ec:76:6f:10:73:b0:41:5f:db:33:0c:e5:
95:a1:2d:d7:9c:37:13:8f:03:ef:14:03:dc:31:0a:e5:47:dd:
9d:ea:43:e4:39:8a:5f:79:ee:ec:63:02:af:de:e1:ef:d7:72:
92:29:33:1a:f4:20:a2:fc:11:22:23:17:18:10:70:18:00:75:
73:ba:67:ee:84:3c:1f:87:80:63:ef:b9:0a:f4:e9:fe:05:58:
be:66:d6:3e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYiKlrLL6OxR47ug5MvScTCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1
NGZhNDYwHhcNMjMwNjA1MDgwNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2RkYmQ1MmIxNGViMDYyNGRiNmMyNjNhZThjYjY2MTJiYWE5MGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiyZQpFiC4V3Lnmghh2xZCNhSaD/
4I8/pOMhyX+CnlYuuvtbBQvTnjpQQQZ73J4jbSMBcGwBJUhegMkfBNPmNabrqfQz
3zGSRxu99FWvq2OL+HSy+/yqHtTpz444+6Q4o484iONqAbW/uyCQFG7bz1ejzJy6
A1wCktAZ5UQdH8HGRRX8YWzWZDt8a/Gb3ZSF9J9QEDOlzlbTkLr7MB66QC2vaYK5
8Q2b9OMFUjuQ+DW4iwafNL0vO7cG9ysXjl9KeAedpfpkeTToWsgQnlB9I2gocCN5
XLbdkeL/ElAEjV3F/Dzm71hz3hb9WNNHXalRl3ogYo6e25YUkK9kzKE7owIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCzdvVKxTrBiTbbCY66MtmErqpCyMB8GA1UdIwQY
MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt
YzBjZWIwMzdhZDQyLzEvTE4yOVVyRk9zR0pOdHNKanJveTJZU3Vxa0xJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy
LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAk7mjAwQC
uRY4MA0GCSqGSIb3DQEBCwUAA4IBAQBt4y74fPXsXZZoMxr34kezXbpc6sHRhqRL
YYaVXnexCB6XJKcufpMdgy+VR+OikZW7O9lxexTW7qfHLTrTqNo+g/6ZfFCzUfP2
irWVlHoXir7JV/CPCT07iqgASzG4kYCVR7aTf4DL7SCsrIeEZaOtF3ZrXPq0xoRV
NWu2RoSeERVlaazZNTwB4baTBDeM/IL/6GGvwKPRFXuTSDUZMZGe4b5yemS79Ars
dm8Qc7BBX9szDOWVoS3XnDcTjwPvFAPcMQrlR92d6kPkOYpfee7sYwKv3uHv13KS
KTMa9CCi/BEiIxcYEHAYAHVzumfuhDwfh4Bj77kK9On+BVi+ZtY+
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org