Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/LDcLnc0L4EgueBgPuAcstRVhGQs.roa
File: LDcLnc0L4EgueBgPuAcstRVhGQs.roa (raw, json)
Hash identifier: A/JvxSZYyjaTTYYZRdXcIG/UAll+MNXue5Llnqhusj0=
Subject key identifier: 2C:37:0B:9D:CD:0B:E0:48:2E:78:18:0F:B8:07:2C:B5:15:61:19:0B
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 018BAE4F59151E3B7F1C68EDA28F11D1260E
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/LDcLnc0L4EgueBgPuAcstRVhGQs.roa
Signing time: Wed 08 Nov 2023 09:41:57 +0000
ROA not before: Wed 08 Nov 2023 09:41:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196763
IP address blocks: 93.190.232.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:4f:59:15:1e:3b:7f:1c:68:ed:a2:8f:11:d1:26:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Nov 8 09:41:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c370b9dcd0be0482e78180fb8072cb51561190b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:83:e0:5c:61:00:ea:24:3c:20:10:4a:14:
3b:0b:e3:e1:cd:1e:e6:d2:4e:a6:0f:69:45:eb:4e:
3b:da:4d:89:ca:10:62:53:34:f0:9c:5d:b2:76:3a:
ae:91:6d:a1:40:0e:85:ad:9e:7d:41:10:0b:fa:95:
1c:c2:33:56:4c:08:83:36:28:b3:e7:ca:a1:41:ae:
e0:ce:88:e0:41:1b:51:52:3f:d7:d9:87:5d:d2:7c:
ee:7d:ea:90:b0:a9:36:a6:0e:4c:5a:21:13:1b:f5:
84:25:b1:5e:8f:71:4b:0b:ae:68:52:08:a8:f4:2f:
ab:42:c4:ef:8d:31:90:15:00:a7:eb:3e:f5:f2:46:
61:d1:ac:84:da:8d:8f:51:71:c3:95:b7:59:18:88:
69:3e:9e:a1:8d:66:fc:b3:63:94:78:0e:2a:31:00:
ec:b1:83:70:38:b4:64:8d:aa:0b:bf:59:1c:e7:03:
e3:c9:a2:3e:56:d0:7d:76:c0:16:84:0a:81:e4:5e:
bd:f4:d7:57:9a:17:01:23:ac:4c:51:d1:56:ff:0c:
42:15:92:81:72:0c:5b:05:89:8a:c5:aa:42:f6:93:
f3:3a:70:87:0e:df:d1:f0:e3:08:03:e3:49:f4:ef:
a0:de:9c:01:26:c0:d7:e6:84:15:cb:5b:a4:5b:8b:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:37:0B:9D:CD:0B:E0:48:2E:78:18:0F:B8:07:2C:B5:15:61:19:0B
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/LDcLnc0L4EgueBgPuAcstRVhGQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.232.0/21
Signature Algorithm: sha256WithRSAEncryption
84:7a:d1:da:6b:90:3e:59:17:d7:dd:37:7c:da:02:29:6c:d1:
a2:17:3d:b2:c9:c6:a3:58:e2:ab:64:c0:3c:3b:f5:b3:cf:56:
3b:2c:fb:ce:fc:c7:e9:19:a0:9a:d1:c5:26:89:6d:58:56:60:
a4:4f:42:6d:25:6e:5b:ec:3e:68:e4:48:70:5d:cd:d9:fe:77:
e7:77:b5:17:15:fe:a3:19:eb:9d:27:ec:c6:a0:b8:be:3f:81:
92:1c:51:8c:1a:dd:ab:35:6c:da:19:e6:48:f2:b7:ab:6f:64:
c5:44:32:73:02:4f:ba:27:bf:5a:bf:8d:f2:50:89:26:ef:e6:
ae:b9:55:a3:c2:06:45:ba:89:97:c1:c4:ee:f8:3d:6b:ea:bd:
7c:b9:86:65:5f:06:0c:d7:fd:09:16:13:1e:61:ea:65:ea:72:
8e:5a:b2:00:e9:7b:05:48:cf:0d:02:5c:8f:1f:da:90:6b:33:
46:1f:ae:8c:3e:9c:29:15:d9:09:1a:19:09:8f:33:bd:fe:c8:
b0:6e:f5:15:f9:d2:3e:4e:c3:b6:20:90:9c:c2:b7:ae:1b:00:
22:23:54:5d:a0:d5:b4:60:6e:e5:34:8c:89:9c:f9:2d:3a:98:
69:36:6a:3d:75:65:76:28:68:c2:6e:7a:29:4a:52:8f:ee:6e:
03:53:87:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuuT1kVHjt/HGjtoo8R0SYOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTdjZThiYWNiZWNlZWIxNmY2MDBiNjA3ZDFiZmQwODAz
M2IzMDIwHhcNMjMxMTA4MDk0MTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzM3MGI5ZGNkMGJlMDQ4MmU3ODE4MGZiODA3MmNiNTE1NjExOTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbOD4FxhAOokPCAQShQ7C+PhzR7m
0k6mD2lF60472k2JyhBiUzTwnF2ydjqukW2hQA6FrZ59QRAL+pUcwjNWTAiDNiiz
58qhQa7gzojgQRtRUj/X2Ydd0nzufeqQsKk2pg5MWiETG/WEJbFej3FLC65oUgio
9C+rQsTvjTGQFQCn6z718kZh0ayE2o2PUXHDlbdZGIhpPp6hjWb8s2OUeA4qMQDs
sYNwOLRkjaoLv1kc5wPjyaI+VtB9dsAWhAqB5F699NdXmhcBI6xMUdFW/wxCFZKB
cgxbBYmKxapC9pPzOnCHDt/R8OMIA+NJ9O+g3pwBJsDX5oQVy1ukW4tq1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCw3C53NC+BILngYD7gHLLUVYRkLMB8GA1UdIwQY
MBaAFIGnzousvs7rFvYAtgfRv9CAM7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzct
YjI3ZDg3MzBhMjcwLzEvTERjTG5jMEw0RWd1ZUJnUHVBY3N0UlZoR1FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzctYjI3ZDg3MzBhMjcw
LzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXb7oMA0G
CSqGSIb3DQEBCwUAA4IBAQCEetHaa5A+WRfX3Td82gIpbNGiFz2yycajWOKrZMA8
O/Wzz1Y7LPvO/MfpGaCa0cUmiW1YVmCkT0JtJW5b7D5o5EhwXc3Z/nfnd7UXFf6j
GeudJ+zGoLi+P4GSHFGMGt2rNWzaGeZI8rerb2TFRDJzAk+6J79av43yUIkm7+au
uVWjwgZFuomXwcTu+D1r6r18uYZlXwYM1/0JFhMeYepl6nKOWrIA6XsFSM8NAlyP
H9qQazNGH66MPpwpFdkJGhkJjzO9/siwbvUV+dI+TsO2IJCcwreuGwAiI1RdoNW0
YG7lNIyJnPktOphpNmo9dWV2KGjCbnopSlKP7m4DU4fH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:40 2024 by rpki-client on console-ams.rpki-client.org