Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/lClHgXgUBg80DSSrCG8Q8Ne-lhg.roa
File: lClHgXgUBg80DSSrCG8Q8Ne-lhg.roa (raw, json)
Hash identifier: ggbhqA8auVNOXFbFHrJYk3q4ihHO6TJ/H9N0sCwvaPE=
Subject key identifier: 94:29:47:81:78:14:06:0F:34:0D:24:AB:08:6F:10:F0:D7:BE:96:18
Certificate issuer: /CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585
Certificate serial: 018571B9FB910ECE05FE71A737ABE6E1F059
Authority key identifier: E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/lClHgXgUBg80DSSrCG8Q8Ne-lhg.roa
Signing time: Mon 02 Jan 2023 09:04:51 +0000
ROA not before: Mon 02 Jan 2023 09:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201393
IP address blocks: 185.76.112.0/24 maxlen: 24
185.76.112.0/22 maxlen: 22
185.76.113.0/24 maxlen: 24
185.76.114.0/24 maxlen: 24
185.76.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b9:fb:91:0e:ce:05:fe:71:a7:37:ab:e6:e1:f0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585
Validity
Not Before: Jan 2 09:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=942947817814060f340d24ab086f10f0d7be9618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:91:c8:9d:24:ea:6a:64:1b:d3:1c:a6:3c:
db:bb:c8:3d:a3:bd:f3:53:67:49:87:9b:4d:a3:3a:
d7:29:0d:f7:e9:ba:e9:d2:99:f3:4b:5d:bd:18:00:
73:a2:3e:c0:33:e7:96:12:db:e0:6f:87:28:6b:ed:
04:62:76:2f:6b:92:8a:e8:11:e6:33:b5:b2:2c:29:
42:dc:6f:a1:62:60:d6:a5:61:da:47:14:b3:c6:a3:
1b:5d:ec:1d:ea:4d:af:7e:47:08:4c:5d:36:90:e7:
84:fd:06:91:ea:ae:53:fd:24:d3:fa:c9:a4:cb:f5:
ca:d7:4f:46:29:87:ca:f2:49:b6:1e:f9:5e:92:00:
91:ae:37:fa:dd:f2:2a:26:a4:8a:6c:ae:f7:b8:fc:
08:53:93:b8:6d:46:3c:de:48:4d:e9:26:c0:00:5c:
bb:7c:1e:f1:21:e1:fe:ce:5d:ce:23:ee:83:62:7f:
71:03:85:63:a3:c7:c5:3b:4b:bb:dc:be:c3:41:a6:
2d:9a:45:0c:96:d7:81:6a:c4:cb:2b:56:6f:66:da:
15:31:a4:d1:8e:0c:cb:0f:b3:3a:f8:84:33:d9:8a:
a7:7a:e7:f2:eb:e7:fd:d2:94:20:3c:20:df:6e:be:
fb:66:ad:3f:64:cd:6c:5d:5a:ae:ab:a5:0e:4f:93:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:29:47:81:78:14:06:0F:34:0D:24:AB:08:6F:10:F0:D7:BE:96:18
X509v3 Authority Key Identifier:
keyid:E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/lClHgXgUBg80DSSrCG8Q8Ne-lhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.112.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:fd:09:04:3f:8e:f8:c3:a1:00:c4:86:4e:e8:32:dc:8f:4a:
33:50:96:3d:e0:d5:8e:f3:55:9f:b7:16:c3:7e:c2:dd:c7:9b:
18:fc:33:a8:c3:ab:83:87:7c:67:ce:50:de:16:b0:e0:97:ab:
13:74:79:41:7f:30:6c:3d:5c:83:fb:d3:7b:d7:b8:cc:cd:8d:
7c:a7:ed:6b:0d:ed:92:2e:50:f0:5b:34:7d:92:0f:bb:f9:dd:
d2:b0:f9:0d:64:95:35:a8:c4:d1:6d:5d:4e:db:a2:fc:de:82:
20:c8:d4:d8:e0:1c:d1:23:7a:22:7a:61:f7:6f:83:cd:65:0b:
71:64:da:7e:6b:9e:e3:08:de:a8:e6:d9:41:24:5b:94:ab:05:
65:62:e1:72:95:32:9e:e3:7a:ca:21:b3:ae:aa:47:3e:69:8d:
72:f9:7c:85:7c:db:2e:75:64:bb:e8:c6:18:f7:9b:69:30:23:
e0:ed:e2:50:e6:75:3c:30:0d:69:a0:02:65:b3:d1:e5:82:e3:
37:8e:0f:86:4b:f3:fc:cf:84:98:31:f7:6a:ac:33:93:49:cf:
dd:aa:1e:ed:e6:b2:51:c7:e4:db:ba:73:37:4f:39:0e:94:3b:
5a:36:3c:cd:89:43:d4:37:61:62:f0:f9:60:d4:d4:2a:51:17:
3b:15:04:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxufuRDs4F/nGnN6vm4fBZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YWFiY2RhYzNhZDlmYjMyZDI0YWQ2MGM4YTI2Y2I5ZWFi
OGQ1ODUwHhcNMjMwMTAyMDkwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDI5NDc4MTc4MTQwNjBmMzQwZDI0YWIwODZmMTBmMGQ3YmU5NjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllyRyJ0k6mpkG9Mcpjzbu8g9o73z
U2dJh5tNozrXKQ336brp0pnzS129GABzoj7AM+eWEtvgb4coa+0EYnYva5KK6BHm
M7WyLClC3G+hYmDWpWHaRxSzxqMbXewd6k2vfkcITF02kOeE/QaR6q5T/STT+smk
y/XK109GKYfK8km2HvlekgCRrjf63fIqJqSKbK73uPwIU5O4bUY83khN6SbAAFy7
fB7xIeH+zl3OI+6DYn9xA4Vjo8fFO0u73L7DQaYtmkUMlteBasTLK1ZvZtoVMaTR
jgzLD7M6+IQz2Yqneufy6+f90pQgPCDfbr77Zq0/ZM1sXVquq6UOT5Po9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJQpR4F4FAYPNA0kqwhvEPDXvpYYMB8GA1UdIwQY
MBaAFOeqvNrDrZ+zLSStYMiibLnquNWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTZxODJzT3RuN010SksxZ3lLSnN1ZXE0MVlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81ZDkzYmEtYmY1OS00ZTc4LWE0YTIt
ZTM2ZDBiOWI2NDVkLzEvbENsSGdYZ1VCZzgwRFNTckNHOFE4TmUtbGhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81ZDkzYmEtYmY1OS00ZTc4LWE0YTItZTM2ZDBiOWI2NDVk
LzEvNTZxODJzT3RuN010SksxZ3lLSnN1ZXE0MVlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUxwMA0G
CSqGSIb3DQEBCwUAA4IBAQC5/QkEP474w6EAxIZO6DLcj0ozUJY94NWO81WftxbD
fsLdx5sY/DOow6uDh3xnzlDeFrDgl6sTdHlBfzBsPVyD+9N717jMzY18p+1rDe2S
LlDwWzR9kg+7+d3SsPkNZJU1qMTRbV1O26L83oIgyNTY4BzRI3oiemH3b4PNZQtx
ZNp+a57jCN6o5tlBJFuUqwVlYuFylTKe43rKIbOuqkc+aY1y+XyFfNsudWS76MYY
95tpMCPg7eJQ5nU8MA1poAJls9HlguM3jg+GS/P8z4SYMfdqrDOTSc/dqh7t5rJR
x+TbunM3TzkOlDtaNjzNiUPUN2Fi8Plg1NQqURc7FQSD
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:30 2024 by rpki-client on console-ams.rpki-client.org