Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Lo6xGqUtj45xaHNU5AluOgWnBCk.roa
File: Lo6xGqUtj45xaHNU5AluOgWnBCk.roa (raw, json)
Hash identifier: fJBmSdx/qPYdVTDKZB4Dnnv+36nTGA8gVNXM7OgOEdk=
Subject key identifier: 2E:8E:B1:1A:A5:2D:8F:8E:71:68:73:54:E4:09:6E:3A:05:A7:04:29
Certificate issuer: /CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
Certificate serial: 018A8E27886A6035B9DFC170B996E03B7E87
Authority key identifier: 62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Lo6xGqUtj45xaHNU5AluOgWnBCk.roa
Signing time: Wed 13 Sep 2023 10:47:50 +0000
ROA not before: Wed 13 Sep 2023 10:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51380
IP address blocks: 195.20.4.0/24 maxlen: 24
195.20.4.0/23 maxlen: 23
91.218.192.0/23 maxlen: 23
91.218.192.0/24 maxlen: 24
195.20.6.0/24 maxlen: 24
195.20.7.0/24 maxlen: 24
91.218.193.0/24 maxlen: 24
195.20.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:27:88:6a:60:35:b9:df:c1:70:b9:96:e0:3b:7e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
Validity
Not Before: Sep 13 10:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e8eb11aa52d8f8e71687354e4096e3a05a70429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:10:9e:92:0d:f5:06:a0:ec:27:17:cf:f5:
1e:c3:1a:6e:ed:04:3b:b7:55:c1:1c:0d:f8:a9:0c:
ff:de:71:8e:35:4c:88:33:fa:30:7e:39:26:36:96:
e6:f8:5f:1b:a6:2a:ee:94:b3:54:8a:7d:dc:20:9e:
f7:22:f6:4d:fc:e8:9b:04:80:c4:09:d0:65:92:47:
a1:d2:4e:49:83:4f:95:b9:1d:a4:00:69:2d:15:86:
de:b5:29:70:1e:2d:88:48:75:14:e4:ac:1c:dd:70:
ee:63:bb:e2:46:4e:19:9a:b1:d3:2e:46:c9:8f:05:
f7:2b:ff:f3:dd:cc:32:7a:57:71:63:fe:7a:21:c0:
ea:e8:36:58:6c:82:71:bd:97:29:7d:82:81:04:3c:
95:a9:c5:d6:4c:85:3d:a5:34:54:1b:e4:d4:a7:bc:
65:56:cf:0a:c9:e8:28:a5:d8:e1:21:5e:2a:4b:6b:
72:5c:5c:7d:16:fc:42:9a:f2:41:6c:10:07:af:e1:
96:fc:25:44:c4:c3:fa:98:80:16:ca:c7:1c:e3:fb:
85:47:48:5b:86:66:88:08:44:12:44:0e:c2:5f:d5:
04:03:8c:8e:7f:b7:45:02:85:aa:0a:db:3d:b0:c4:
5a:c6:c7:c6:9f:b9:76:30:29:ed:88:10:90:d7:32:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8E:B1:1A:A5:2D:8F:8E:71:68:73:54:E4:09:6E:3A:05:A7:04:29
X509v3 Authority Key Identifier:
keyid:62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Lo6xGqUtj45xaHNU5AluOgWnBCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.192.0/23
195.20.4.0/22
Signature Algorithm: sha256WithRSAEncryption
05:fc:45:9e:95:da:d7:c4:7a:1c:48:9a:8b:44:6d:6c:b9:25:
cb:b9:5a:fe:f2:56:29:07:78:96:7c:f7:9c:81:5a:98:6e:a8:
48:c8:7d:99:4d:b8:ef:6f:7d:62:44:fd:2d:2a:f0:ca:7d:a1:
12:0e:4b:a3:a4:83:ce:5a:5b:9c:fb:23:4b:40:e9:6c:dc:16:
3c:66:c2:a2:2c:4d:da:4d:19:a1:f8:e4:69:b2:80:31:0a:6c:
81:61:52:e0:92:ea:43:2f:7f:51:3f:b7:83:98:42:fa:f7:94:
24:6c:e3:93:f5:41:68:5c:93:24:07:32:bd:e0:75:32:51:16:
83:82:b9:02:f4:55:c1:e2:66:2c:2b:a3:db:b0:a1:7f:bf:79:
4f:d4:37:06:9d:02:db:69:db:73:ec:15:d4:d2:91:34:54:39:
26:e2:20:26:10:a8:55:31:53:b1:3a:1d:cc:6e:5e:41:68:1a:
95:e1:0f:e0:74:38:6f:19:74:50:ad:a5:ab:2e:77:99:e8:20:
b1:42:32:91:81:75:15:f5:4a:41:f0:44:97:28:4f:7b:bb:0a:
7c:f2:f2:09:5c:40:40:3c:55:fc:ee:4f:2e:90:76:b3:8d:11:
a6:27:6e:c6:b8:57:45:2a:36:2e:3a:fe:37:90:6b:d6:1d:97:
e5:c7:14:13
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYqOJ4hqYDW538FwuZbgO36HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYmQ2YzJiZGY2MWUyM2VhZmUyM2RkZTAxNmRiOGIzZTE1
OTVmNzYwHhcNMjMwOTEzMTA0NzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZThlYjExYWE1MmQ4ZjhlNzE2ODczNTRlNDA5NmUzYTA1YTcwNDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph0QnpIN9Qag7CcXz/Uewxpu7QQ7
t1XBHA34qQz/3nGONUyIM/owfjkmNpbm+F8bpirulLNUin3cIJ73IvZN/OibBIDE
CdBlkkeh0k5Jg0+VuR2kAGktFYbetSlwHi2ISHUU5Kwc3XDuY7viRk4ZmrHTLkbJ
jwX3K//z3cwyeldxY/56IcDq6DZYbIJxvZcpfYKBBDyVqcXWTIU9pTRUG+TUp7xl
Vs8KyegopdjhIV4qS2tyXFx9FvxCmvJBbBAHr+GW/CVExMP6mIAWyscc4/uFR0hb
hmaICEQSRA7CX9UEA4yOf7dFAoWqCts9sMRaxsfGn7l2MCntiBCQ1zIpVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC6OsRqlLY+OcWhzVOQJbjoFpwQpMB8GA1UdIwQY
MBaAFGK9bCvfYeI+r+I93gFtuLPhWV92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80YzlkNzMtZjgwNS00ZDcyLThhMzct
YjgyYjBlZDJkMzIzLzEvTG82eEdxVXRqNDV4YUhOVTVBbHVPZ1duQkNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80YzlkNzMtZjgwNS00ZDcyLThhMzctYjgyYjBlZDJkMzIz
LzEvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW9rAAwQC
wxQEMA0GCSqGSIb3DQEBCwUAA4IBAQAF/EWeldrXxHocSJqLRG1suSXLuVr+8lYp
B3iWfPecgVqYbqhIyH2ZTbjvb31iRP0tKvDKfaESDkujpIPOWluc+yNLQOls3BY8
ZsKiLE3aTRmh+ORpsoAxCmyBYVLgkupDL39RP7eDmEL695QkbOOT9UFoXJMkBzK9
4HUyURaDgrkC9FXB4mYsK6PbsKF/v3lP1DcGnQLbadtz7BXU0pE0VDkm4iAmEKhV
MVOxOh3Mbl5BaBqV4Q/gdDhvGXRQraWrLneZ6CCxQjKRgXUV9UpB8ESXKE97uwp8
8vIJXEBAPFX87k8ukHazjRGmJ27GuFdFKjYuOv43kGvWHZflxxQT
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:57 2024 by rpki-client on console-ams.rpki-client.org