Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/LGu6oypJR9AI6M1ItZs9ywBUykE.roa
File: LGu6oypJR9AI6M1ItZs9ywBUykE.roa (raw, json)
Hash identifier: gAcw4W2JLdTJpF4BhbYVqso0jqRg6llHCYrIm6pGbY8=
Subject key identifier: 2C:6B:BA:A3:2A:49:47:D0:08:E8:CD:48:B5:9B:3D:CB:00:54:CA:41
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 0188B9D9439C3A0559DC4ACB70B2B0B0615B
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/LGu6oypJR9AI6M1ItZs9ywBUykE.roa
Signing time: Wed 14 Jun 2023 12:20:03 +0000
ROA not before: Wed 14 Jun 2023 12:20:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 46.228.131.0/24 maxlen: 24
46.228.136.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:d9:43:9c:3a:05:59:dc:4a:cb:70:b2:b0:b0:61:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jun 14 12:20:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c6bbaa32a4947d008e8cd48b59b3dcb0054ca41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d4:15:b8:16:3d:d1:f1:d4:93:d9:70:b2:dd:
4e:1d:b7:b3:e7:45:9b:13:8d:f8:b9:40:16:69:7f:
30:a0:9b:7b:b2:79:63:73:e2:ec:e0:d3:bf:eb:d3:
7c:74:43:54:59:1d:d1:53:62:90:4e:a0:8b:71:15:
d7:29:4f:c5:0e:aa:aa:74:5a:2f:1d:33:83:c6:30:
3e:fc:cb:06:83:0f:9b:c1:bc:e1:d8:56:47:e3:f7:
f0:6a:6d:d5:fe:c2:b2:03:10:e4:2b:5e:60:65:78:
83:d0:72:2b:4e:be:69:ce:64:37:e6:e8:50:43:bd:
94:f6:9b:2b:97:3c:d2:f2:94:b4:8c:76:f0:38:fe:
3c:ff:66:24:8a:e6:92:d5:a3:7d:62:d6:38:8a:cf:
ac:b8:6b:69:fe:60:f7:4d:13:0a:56:eb:82:ba:d2:
6d:ca:3b:e1:a2:38:c1:c1:75:86:a8:b9:ce:c6:fd:
ba:7a:1d:33:19:73:a3:c2:56:9c:36:ab:8f:72:d5:
ca:cf:77:3e:3c:9e:b7:08:2e:05:11:c9:5b:b8:98:
0d:65:c9:30:8b:c2:4b:d6:48:20:fc:e9:c2:4a:95:
76:ca:37:42:5f:4c:dc:e3:87:66:f6:57:4e:a6:21:
04:74:2a:ba:0a:d7:06:d8:07:72:e6:db:86:58:cc:
4c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6B:BA:A3:2A:49:47:D0:08:E8:CD:48:B5:9B:3D:CB:00:54:CA:41
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/LGu6oypJR9AI6M1ItZs9ywBUykE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.131.0/24
46.228.136.0/23
Signature Algorithm: sha256WithRSAEncryption
15:7f:1b:15:a6:cf:6d:56:03:64:10:d2:b9:91:f7:79:b2:09:
e6:2c:a2:b4:b3:37:e3:51:de:32:dd:b0:a4:38:25:a4:0a:35:
5d:e6:0b:fc:a5:9d:c8:96:3d:dd:91:5b:16:50:ee:cc:6f:76:
90:3d:05:a3:1a:7f:7a:74:08:91:6e:0b:d0:83:60:e6:e3:7c:
33:63:0e:00:18:d8:57:2f:de:ea:a1:a6:c0:32:75:7b:bc:b8:
66:5d:b5:32:4a:53:74:20:d8:10:65:73:64:fa:95:c7:02:ad:
db:06:20:a6:f8:91:85:19:5f:9d:de:af:8e:86:30:d1:61:49:
a4:a3:2b:90:aa:b0:04:af:67:3f:9c:c3:10:47:34:ff:ba:6d:
0b:5c:39:75:89:91:5e:61:5f:ff:d9:36:74:91:61:aa:62:05:
b5:77:a2:d0:22:f6:06:dc:17:de:2c:12:fe:cc:6a:d1:62:e5:
be:44:77:ae:d6:77:d0:7c:7f:73:ed:8e:2f:9a:5e:95:96:66:
37:68:8e:6c:84:5b:f8:8a:8c:63:e0:38:08:32:10:7a:c8:2e:
66:75:f1:98:b9:bc:f0:40:00:3a:fd:d5:82:76:c0:7b:10:7f:
3d:99:42:35:71:a3:61:65:b7:48:49:d8:d6:43:2a:96:a2:f1:
d6:a1:70:a1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYi52UOcOgVZ3ErLcLKwsGFbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjMzODYxMjA3YTIzMDU2NGVmMzZmMTFlMDE1NzM0NDcz
MWUzZjkwHhcNMjMwNjE0MTIyMDAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzZiYmFhMzJhNDk0N2QwMDhlOGNkNDhiNTliM2RjYjAwNTRjYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtQVuBY90fHUk9lwst1OHbez50Wb
E434uUAWaX8woJt7snljc+Ls4NO/69N8dENUWR3RU2KQTqCLcRXXKU/FDqqqdFov
HTODxjA+/MsGgw+bwbzh2FZH4/fwam3V/sKyAxDkK15gZXiD0HIrTr5pzmQ35uhQ
Q72U9psrlzzS8pS0jHbwOP48/2YkiuaS1aN9YtY4is+suGtp/mD3TRMKVuuCutJt
yjvhojjBwXWGqLnOxv26eh0zGXOjwlacNquPctXKz3c+PJ63CC4FEclbuJgNZckw
i8JL1kgg/OnCSpV2yjdCX0zc44dm9ldOpiEEdCq6CtcG2Ady5tuGWMxMoQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCxruqMqSUfQCOjNSLWbPcsAVMpBMB8GA1UdIwQY
MBaAFMEjOGEgeiMFZO828R4BVzRHMeP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTIt
MWM3YjJiOTFkMzA4LzEvTEd1Nm95cEpSOUFJNk0xSXRaczl5d0JVeWtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTItMWM3YjJiOTFkMzA4
LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALuSDAwQB
LuSIMA0GCSqGSIb3DQEBCwUAA4IBAQAVfxsVps9tVgNkENK5kfd5sgnmLKK0szfj
Ud4y3bCkOCWkCjVd5gv8pZ3Ilj3dkVsWUO7Mb3aQPQWjGn96dAiRbgvQg2Dm43wz
Yw4AGNhXL97qoabAMnV7vLhmXbUySlN0INgQZXNk+pXHAq3bBiCm+JGFGV+d3q+O
hjDRYUmkoyuQqrAEr2c/nMMQRzT/um0LXDl1iZFeYV//2TZ0kWGqYgW1d6LQIvYG
3BfeLBL+zGrRYuW+RHeu1nfQfH9z7Y4vml6VlmY3aI5shFv4ioxj4DgIMhB6yC5m
dfGYubzwQAA6/dWCdsB7EH89mUI1caNhZbdISdjWQyqWovHWoXCh
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org