Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/lmIFPPZgvocbLaeCaIaXSKzlVPY.roa
File: lmIFPPZgvocbLaeCaIaXSKzlVPY.roa (raw, json)
Hash identifier: LpyuwoqKmpzMmBb9OJ4UGS5b/yaYPoS1ZzpMzpqtrO4=
Subject key identifier: 96:62:05:3C:F6:60:BE:87:1B:2D:A7:82:68:86:97:48:AC:E5:54:F6
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 018572B42E6173782A03F7C741D3A364AF4B
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/lmIFPPZgvocbLaeCaIaXSKzlVPY.roa
Signing time: Mon 02 Jan 2023 13:38:09 +0000
ROA not before: Mon 02 Jan 2023 13:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39830
IP address blocks: 83.173.124.0/23 maxlen: 24
83.173.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:2e:61:73:78:2a:03:f7:c7:41:d3:a3:64:af:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Jan 2 13:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9662053cf660be871b2da78268869748ace554f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:26:fa:69:94:3f:4f:21:54:0e:a9:99:60:
d2:c1:af:f6:c3:7d:82:bc:7d:5a:fb:1f:08:c4:be:
48:15:b4:f0:5a:0d:b5:f3:f2:6e:e6:14:3d:ad:be:
66:97:4b:61:de:9b:88:be:83:ab:12:70:53:78:a5:
f2:87:18:1e:06:02:3c:54:ed:98:43:0f:48:00:e0:
22:e4:af:b6:a2:de:66:8c:21:d8:48:79:af:c9:c3:
25:de:78:09:81:0e:73:d9:f9:c0:8f:af:bc:39:41:
82:5e:97:65:37:d3:67:fa:71:de:9b:55:dc:c1:b7:
48:53:bd:5f:13:c9:87:a1:b1:64:f5:b7:bd:49:53:
8a:5a:17:bf:bb:bf:17:01:9b:04:f3:7f:18:47:2b:
dc:9f:b0:20:5f:58:8b:fb:d0:95:8f:20:e7:81:63:
07:d7:ab:a1:95:09:fe:fe:6c:86:c0:c2:a0:0a:bf:
a9:86:99:a8:d6:d1:03:8a:2a:fe:fd:24:d1:aa:4c:
56:5c:b3:37:14:e4:4d:77:93:38:b6:f7:92:64:83:
25:9b:69:18:93:6b:74:3a:72:46:9a:be:28:68:5f:
5a:d0:a5:28:7f:a7:26:30:c3:40:d3:f6:15:dd:25:
28:4a:30:4b:84:11:76:99:bf:a0:af:a6:83:a6:c2:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:62:05:3C:F6:60:BE:87:1B:2D:A7:82:68:86:97:48:AC:E5:54:F6
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/lmIFPPZgvocbLaeCaIaXSKzlVPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.173.124.0-83.173.126.255
Signature Algorithm: sha256WithRSAEncryption
78:05:5a:00:e4:82:cc:a9:2b:71:c0:23:76:69:e3:9e:69:72:
68:dd:11:7c:27:8d:b8:37:d9:69:d2:cb:16:3e:1f:a9:73:e4:
ce:d6:ad:6d:0d:a7:df:b0:43:d0:3a:04:aa:c9:ca:5a:17:94:
31:81:08:e4:10:ec:aa:29:9a:e3:49:5a:b3:62:ca:61:b6:c5:
3d:73:65:50:8b:01:5d:63:29:65:7f:b5:a1:d7:dd:45:9c:59:
70:52:76:24:6b:47:df:12:09:5d:4c:1d:2d:28:5b:89:84:6b:
44:b2:c7:84:a1:3c:8f:44:09:19:52:a0:d0:6c:97:94:0a:2f:
f1:c1:ad:57:48:de:24:d2:32:f4:e0:2a:b0:c8:b7:57:2f:0a:
4f:80:68:9b:b7:9f:16:1e:bb:fb:c8:0e:29:6d:c3:4a:b5:df:
0e:a8:ad:97:b0:9d:70:c8:f3:89:4e:2f:f2:30:7b:c8:dd:93:
93:08:7c:02:64:a6:75:4d:17:d7:d4:d0:40:ab:d4:26:5e:19:
be:a2:09:40:4e:58:1e:3d:a8:06:05:8f:6b:f4:89:04:0e:82:
5c:25:1e:b1:b4:d7:9e:3a:0d:9d:e9:3d:ca:df:3d:7e:73:a6:
92:14:d1:ee:bf:8c:11:49:3a:d3:71:71:c0:2e:26:14:d5:3b:
83:1c:fe:c2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVytC5hc3gqA/fHQdOjZK9LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YjMzMmQ1N2NlMTRmYWIxZWJkNzQ2ODE3ZGQ3MDEwNjJj
NzRhODgwHhcNMjMwMTAyMTMzODA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjYyMDUzY2Y2NjBiZTg3MWIyZGE3ODI2ODg2OTc0OGFjZTU1NGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9sm+mmUP08hVA6pmWDSwa/2w32C
vH1a+x8IxL5IFbTwWg218/Ju5hQ9rb5ml0th3puIvoOrEnBTeKXyhxgeBgI8VO2Y
Qw9IAOAi5K+2ot5mjCHYSHmvycMl3ngJgQ5z2fnAj6+8OUGCXpdlN9Nn+nHem1Xc
wbdIU71fE8mHobFk9be9SVOKWhe/u78XAZsE838YRyvcn7AgX1iL+9CVjyDngWMH
16uhlQn+/myGwMKgCr+phpmo1tEDiir+/STRqkxWXLM3FORNd5M4tveSZIMlm2kY
k2t0OnJGmr4oaF9a0KUof6cmMMNA0/YV3SUoSjBLhBF2mb+gr6aDpsKfpwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJZiBTz2YL6HGy2ngmiGl0is5VT2MB8GA1UdIwQY
MBaAFImzMtV84U+rHr10aBfdcBBix0qIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQt
NDZhMGRmNzc0ZmUxLzEvbG1JRlBQWmd2b2NiTGFlQ2FJYVhTS3psVlBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQtNDZhMGRmNzc0ZmUx
LzEvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJTrXwD
BABTrX4wDQYJKoZIhvcNAQELBQADggEBAHgFWgDkgsypK3HAI3Zp455pcmjdEXwn
jbg32WnSyxY+H6lz5M7WrW0Np9+wQ9A6BKrJyloXlDGBCOQQ7KopmuNJWrNiymG2
xT1zZVCLAV1jKWV/taHX3UWcWXBSdiRrR98SCV1MHS0oW4mEa0Syx4ShPI9ECRlS
oNBsl5QKL/HBrVdI3iTSMvTgKrDIt1cvCk+AaJu3nxYeu/vIDiltw0q13w6orZew
nXDI84lOL/Iwe8jdk5MIfAJkpnVNF9fU0ECr1CZeGb6iCUBOWB49qAYFj2v0iQQO
glwlHrG01546DZ3pPcrfPX5zppIU0e6/jBFJOtNxccAuJhTVO4Mc/sI=
Generated at Mon Dec 11 09:17:44 2023 by rpki-client on console-fra.rpki-client.org