Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/LW4aXNLPvZdxHE9R6i2-C3ugplk.roa
File: LW4aXNLPvZdxHE9R6i2-C3ugplk.roa (raw, json)
Hash identifier: MkP7AMk2HVpKlZPJZra+Arg5niTCQLL8h9A9FhDD0Zg=
Subject key identifier: 2D:6E:1A:5C:D2:CF:BD:97:71:1C:4F:51:EA:2D:BE:0B:7B:A0:A6:59
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 018C1A7AE896C9F1F5E74BAC402C6C477F16
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/LW4aXNLPvZdxHE9R6i2-C3ugplk.roa
Signing time: Wed 29 Nov 2023 09:48:31 +0000
ROA not before: Wed 29 Nov 2023 09:48:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42724
IP address blocks: 194.62.40.0/24 maxlen: 24
194.36.84.0/24 maxlen: 24
194.36.86.0/24 maxlen: 24
194.36.87.0/24 maxlen: 24
45.155.127.0/24 maxlen: 24
45.155.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:7a:e8:96:c9:f1:f5:e7:4b:ac:40:2c:6c:47:7f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Nov 29 09:48:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d6e1a5cd2cfbd97711c4f51ea2dbe0b7ba0a659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a2:4a:ac:c5:8c:0e:55:9b:16:c7:6b:cc:20:
72:eb:7a:65:29:ca:71:c6:fb:c8:ab:53:6e:19:48:
50:c1:f1:d7:8a:c2:d6:cb:08:6d:02:47:70:bc:e7:
6f:8a:42:be:fd:f7:ed:85:35:57:4d:9a:90:6a:0e:
30:05:12:d6:36:54:c1:db:00:a9:15:6b:ff:d7:25:
6c:a2:ba:4a:3b:3e:d6:ae:f8:b1:f3:46:47:6e:75:
76:ce:c0:78:ae:f5:43:ea:aa:00:36:06:b4:a7:15:
a3:84:cf:03:1e:2e:b5:44:f6:df:f9:5b:6b:d7:0a:
12:03:94:22:1c:29:51:b1:66:50:2f:53:0b:c5:a8:
c6:1c:40:da:65:b8:e5:4d:c3:94:dd:e4:e9:06:e3:
89:bf:a4:ab:a2:a0:9e:13:34:cb:54:f6:67:8c:a5:
1f:f3:5e:06:40:bc:39:ae:76:77:eb:56:d3:b9:7e:
29:a0:ac:a6:8d:af:6a:a1:b6:f3:88:38:a1:52:89:
8f:26:14:ed:56:d2:5e:b1:7f:a7:5b:49:81:4d:74:
d6:78:ea:47:ab:7c:26:ec:d8:b3:db:ea:8a:18:d2:
a7:c6:3e:ab:88:f3:cc:4e:7f:a8:5d:a4:5c:d6:69:
bd:c7:6d:8e:3b:a9:b9:67:2d:40:4a:80:ae:60:98:
1f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6E:1A:5C:D2:CF:BD:97:71:1C:4F:51:EA:2D:BE:0B:7B:A0:A6:59
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/LW4aXNLPvZdxHE9R6i2-C3ugplk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.126.0/23
194.36.84.0/24
194.36.86.0/23
194.62.40.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e7:0f:c4:69:f1:e5:2b:aa:31:37:41:d6:ea:c7:dd:40:56:
ef:b7:b5:45:ad:11:d0:a6:23:c5:7a:37:86:42:7e:4a:79:f2:
dc:ee:73:4a:87:57:e1:51:05:83:94:1f:af:85:cc:88:a8:4f:
79:68:e3:8d:a7:e3:b8:db:33:7b:93:4a:6d:8e:03:6e:32:1a:
aa:c4:9b:d4:6f:86:1b:fd:a4:d5:f8:41:0a:e5:95:e5:4a:65:
29:9c:e5:81:3d:9e:0e:ca:5e:cd:30:20:61:46:37:66:3f:a9:
f7:50:4b:25:18:94:5b:02:ac:3a:3a:fc:dd:e7:d6:50:de:da:
54:93:c9:a4:3a:b4:54:60:b6:17:ce:55:83:b4:37:14:53:89:
fc:bf:13:d4:0a:be:7c:ba:d5:05:02:fd:02:1f:f5:f0:7e:bf:
72:14:a8:19:03:47:c5:6d:9e:52:27:58:18:fe:aa:bf:6f:4e:
f1:b9:dc:9d:18:bc:4d:f0:17:a1:62:6d:b9:83:ec:95:2a:c6:
a5:b4:06:45:a7:bb:0f:13:41:f0:2d:23:22:6d:47:21:c6:16:
3c:08:5f:57:2a:2b:e2:34:80:99:7d:bd:61:19:fc:10:7f:fb:
c0:e2:a4:83:d5:70:2a:4c:b4:49:8a:a6:c5:73:62:7d:73:5b:
d6:1a:70:32
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYwaeuiWyfH150usQCxsR38WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MzIzOTY1MWRiNmFhYjFiY2I2NzMyNWY3ODViNWVlMWY0
MDI1Y2IwHhcNMjMxMTI5MDk0ODMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDZlMWE1Y2QyY2ZiZDk3NzExYzRmNTFlYTJkYmUwYjdiYTBhNjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqJKrMWMDlWbFsdrzCBy63plKcpx
xvvIq1NuGUhQwfHXisLWywhtAkdwvOdvikK+/ffthTVXTZqQag4wBRLWNlTB2wCp
FWv/1yVsorpKOz7Wrvix80ZHbnV2zsB4rvVD6qoANga0pxWjhM8DHi61RPbf+Vtr
1woSA5QiHClRsWZQL1MLxajGHEDaZbjlTcOU3eTpBuOJv6SroqCeEzTLVPZnjKUf
814GQLw5rnZ361bTuX4poKymja9qobbziDihUomPJhTtVtJesX+nW0mBTXTWeOpH
q3wm7Niz2+qKGNKnxj6riPPMTn+oXaRc1mm9x22OO6m5Zy1ASoCuYJgf9QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFC1uGlzSz72XcRxPUeotvgt7oKZZMB8GA1UdIwQY
MBaAFBQyOWUdtqqxvLZzJfeFte4fQCXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQt
NmVlYzc3ZDliOTg1LzEvTFc0YVhOTFB2WmR4SEU5UjZpMi1DM3VncGxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQtNmVlYzc3ZDliOTg1
LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLZt+AwQA
wiRUAwQBwiRWAwQAwj4oMA0GCSqGSIb3DQEBCwUAA4IBAQB15w/EafHlK6oxN0HW
6sfdQFbvt7VFrRHQpiPFejeGQn5KefLc7nNKh1fhUQWDlB+vhcyIqE95aOONp+O4
2zN7k0ptjgNuMhqqxJvUb4Yb/aTV+EEK5ZXlSmUpnOWBPZ4Oyl7NMCBhRjdmP6n3
UEslGJRbAqw6Ovzd59ZQ3tpUk8mkOrRUYLYXzlWDtDcUU4n8vxPUCr58utUFAv0C
H/Xwfr9yFKgZA0fFbZ5SJ1gY/qq/b07xudydGLxN8BehYm25g+yVKsaltAZFp7sP
E0HwLSMibUchxhY8CF9XKiviNICZfb1hGfwQf/vA4qSD1XAqTLRJiqbFc2J9c1vW
GnAy
-----END CERTIFICATE-----
Generated at Wed Nov 29 11:22:45 2023 by rpki-client on console-ams.rpki-client.org