Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/lqaPB9ZCY2Lth9LjMPC5WsvDt3s.roa
File: lqaPB9ZCY2Lth9LjMPC5WsvDt3s.roa (raw, json)
Hash identifier: pR1OXDTI+kjsq3zaPh+bwzmFCuoxRjtJ4EJC3+ls2j8=
Subject key identifier: 96:A6:8F:07:D6:42:63:62:ED:87:D2:E3:30:F0:B9:5A:CB:C3:B7:7B
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 0185CE75BCE5943429CF73819F4E3A9E14F8
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/lqaPB9ZCY2Lth9LjMPC5WsvDt3s.roa
Signing time: Fri 20 Jan 2023 09:14:59 +0000
ROA not before: Fri 20 Jan 2023 09:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199725
IP address blocks: 212.21.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ce:75:bc:e5:94:34:29:cf:73:81:9f:4e:3a:9e:14:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Jan 20 09:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96a68f07d6426362ed87d2e330f0b95acbc3b77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:6e:33:68:ef:ee:a8:e8:6c:ec:da:46:73:
87:cb:57:64:24:b0:7d:c9:98:cd:62:53:4a:d1:6c:
ac:16:34:e4:62:bf:52:72:49:1a:8c:da:b1:d8:a9:
b3:d3:5b:8c:05:8f:b6:c5:0b:84:ba:ad:63:10:8f:
6e:db:3b:e4:63:ac:e7:6d:06:65:b8:f9:ee:6f:01:
32:2a:10:27:db:be:b6:e9:d3:f2:cd:c8:33:9f:6c:
e1:a9:c4:14:6c:2c:30:b6:72:57:f9:82:73:f5:e1:
31:1a:cd:1c:fc:c3:2c:90:2b:dd:2b:d1:61:a2:5e:
ad:6a:7b:bb:5c:90:95:dd:26:90:a1:88:a1:60:86:
0a:95:44:e6:f4:80:30:3a:78:96:88:8d:4b:66:c2:
3d:fd:82:45:58:ed:9e:95:d5:27:27:31:e8:24:22:
c0:41:c7:d0:9e:df:4a:98:6a:22:90:d0:9c:50:0d:
99:d7:c3:fd:b3:f6:1e:90:1a:0e:bf:4a:c9:24:85:
c4:ab:b6:8d:c7:6e:31:67:cd:55:59:62:08:5f:3a:
6d:71:0d:58:7f:e7:06:7a:2a:63:39:17:7e:e5:0c:
f1:ea:0d:62:f2:32:eb:d0:6b:ea:55:28:ff:b6:ef:
58:8b:15:e0:3d:99:c7:36:29:76:bc:83:ce:90:cf:
dd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A6:8F:07:D6:42:63:62:ED:87:D2:E3:30:F0:B9:5A:CB:C3:B7:7B
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/lqaPB9ZCY2Lth9LjMPC5WsvDt3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.21.93.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ec:08:09:7a:13:94:08:31:2e:bf:a3:1c:cc:02:83:4d:2b:
09:a5:63:a0:31:5f:69:2d:01:e5:06:85:b0:8b:c5:3f:00:56:
70:9d:8d:ad:7a:a6:96:a9:08:f7:db:6d:11:39:4a:5e:b1:0a:
93:d7:23:35:b2:3a:2f:8e:c6:0f:f3:dc:db:74:d7:ae:f8:b7:
eb:9d:30:20:3a:bb:a4:ab:b6:dd:9b:23:4f:50:41:00:1c:7a:
25:ef:44:cd:18:17:70:48:65:37:8e:32:26:c4:aa:44:c3:01:
12:c4:a9:5f:b1:28:ce:f6:d9:04:0c:6f:a2:ea:69:94:c4:17:
81:b5:f7:f4:05:ae:d7:1d:c1:2d:48:1a:96:20:2c:f0:75:e5:
83:bc:59:f5:9a:a4:c7:68:42:fe:6e:ea:82:a5:f2:d7:36:bb:
67:41:8c:9d:45:1d:5a:4d:b8:8b:fe:8a:77:dd:0e:10:ca:65:
7a:f2:12:c2:be:5c:42:4c:db:b4:73:3c:d0:a5:75:1b:f9:2c:
55:47:b9:4a:0e:22:be:0d:4e:17:06:68:fe:78:fe:08:4c:e0:
52:7b:9f:db:d1:10:87:6e:37:75:d8:04:b4:5d:96:29:8f:03:
d0:05:79:3b:d1:ce:9d:e6:77:93:ae:5e:dc:bf:8e:0b:c6:7a:
b0:f0:f9:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXOdbzllDQpz3OBn046nhT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw
YTJiN2UwHhcNMjMwMTIwMDkxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmE2OGYwN2Q2NDI2MzYyZWQ4N2QyZTMzMGYwYjk1YWNiYzNiNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS9uM2jv7qjobOzaRnOHy1dkJLB9
yZjNYlNK0WysFjTkYr9SckkajNqx2Kmz01uMBY+2xQuEuq1jEI9u2zvkY6znbQZl
uPnubwEyKhAn27626dPyzcgzn2zhqcQUbCwwtnJX+YJz9eExGs0c/MMskCvdK9Fh
ol6tanu7XJCV3SaQoYihYIYKlUTm9IAwOniWiI1LZsI9/YJFWO2eldUnJzHoJCLA
QcfQnt9KmGoikNCcUA2Z18P9s/YekBoOv0rJJIXEq7aNx24xZ81VWWIIXzptcQ1Y
f+cGeipjORd+5Qzx6g1i8jLr0GvqVSj/tu9YixXgPZnHNil2vIPOkM/dqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJamjwfWQmNi7YfS4zDwuVrLw7d7MB8GA1UdIwQY
MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct
NzNmZDNiYzE5YWE3LzEvbHFhUEI5WkNZMkx0aDlMak1QQzVXc3ZEdDNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3
LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BVdMA0G
CSqGSIb3DQEBCwUAA4IBAQB27AgJehOUCDEuv6MczAKDTSsJpWOgMV9pLQHlBoWw
i8U/AFZwnY2teqaWqQj3220ROUpesQqT1yM1sjovjsYP89zbdNeu+LfrnTAgOruk
q7bdmyNPUEEAHHol70TNGBdwSGU3jjImxKpEwwESxKlfsSjO9tkEDG+i6mmUxBeB
tff0Ba7XHcEtSBqWICzwdeWDvFn1mqTHaEL+buqCpfLXNrtnQYydRR1aTbiL/op3
3Q4QymV68hLCvlxCTNu0czzQpXUb+SxVR7lKDiK+DU4XBmj+eP4ITOBSe5/b0RCH
bjd12AS0XZYpjwPQBXk70c6d5neTrl7cv44Lxnqw8Plv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:46 2024 by rpki-client on console-fra.rpki-client.org