Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lAcsayjplI2fYgaIVGpLjoGgd_g.roa
File: lAcsayjplI2fYgaIVGpLjoGgd_g.roa (raw, json)
Hash identifier: 27690v7jj31VwJHMZ/6CcrsVfEAEHh6t+lJgaSwcZyw=
Subject key identifier: 94:07:2C:6B:28:E9:94:8D:9F:62:06:88:54:6A:4B:8E:81:A0:77:F8
Certificate issuer: /CN=97242dba26ed882b380dabebab3c5f3942006ecc
Certificate serial: 0188B3485BB055B9B7F33C7BA4ED0E14C16F
Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lAcsayjplI2fYgaIVGpLjoGgd_g.roa
Signing time: Tue 13 Jun 2023 05:44:03 +0000
ROA not before: Tue 13 Jun 2023 05:44:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49283
IP address blocks: 178.21.192.0/21 maxlen: 21
89.18.224.0/19 maxlen: 19
109.68.248.0/21 maxlen: 21
2a00:17b8::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:48:5b:b0:55:b9:b7:f3:3c:7b:a4:ed:0e:14:c1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc
Validity
Not Before: Jun 13 05:44:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94072c6b28e9948d9f620688546a4b8e81a077f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0f:63:48:bc:e2:73:6d:1e:59:f0:22:1e:8a:
bf:2e:32:4c:fa:a6:52:0e:79:fd:54:38:76:be:db:
42:9b:2c:de:e6:1e:46:b0:06:34:c3:27:51:96:e7:
70:9a:fd:46:3f:2e:8c:ed:f8:81:80:bd:5f:66:e8:
ec:93:78:ac:dd:5c:41:99:db:0f:ac:58:e9:6a:f1:
88:e3:9b:a0:11:aa:52:45:d1:89:77:3d:9f:25:bd:
47:f1:d5:04:19:13:38:aa:87:df:64:8a:ca:61:05:
19:44:54:01:ef:b7:cb:7e:99:83:3e:00:6f:1d:07:
8d:e5:69:46:9c:0e:ad:6a:ec:f2:16:7a:85:8e:67:
8c:00:a1:4f:20:1a:ad:7c:14:e5:2a:06:1f:f1:0c:
ee:ae:30:ce:58:30:4a:c1:ec:35:0a:8d:cc:3f:a2:
74:d6:4f:b5:a3:31:8c:3a:03:f0:6a:04:3e:e9:f3:
2f:a5:29:89:a6:dd:ad:e8:e1:19:66:9f:68:ee:d3:
9e:34:dd:dd:4c:82:ac:68:79:66:ba:2d:7e:57:6f:
8d:c2:93:38:a1:3e:df:a8:60:ba:bd:18:fa:ea:db:
8f:ea:50:2a:38:8c:53:b8:ff:d0:16:86:4c:83:f4:
b3:63:b7:47:e2:30:53:23:fd:aa:4c:41:19:91:43:
e7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:07:2C:6B:28:E9:94:8D:9F:62:06:88:54:6A:4B:8E:81:A0:77:F8
X509v3 Authority Key Identifier:
keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lAcsayjplI2fYgaIVGpLjoGgd_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.224.0/19
109.68.248.0/21
178.21.192.0/21
IPv6:
2a00:17b8::/29
Signature Algorithm: sha256WithRSAEncryption
23:dd:26:c3:c8:c7:a2:53:6c:58:c4:cf:70:f9:9a:73:27:6d:
4d:43:5f:0d:0b:8c:b0:fc:49:fd:a3:8e:0a:0a:d3:ef:e9:05:
82:86:d3:33:ca:89:c4:de:d9:d3:4d:52:7d:4a:02:ff:90:c4:
ef:bd:ca:44:33:17:cf:51:30:c4:c7:bd:86:19:05:16:a5:47:
ef:65:fe:28:c0:89:c7:97:1e:b7:d4:ed:4c:b2:ca:36:38:65:
e7:a6:f2:e5:c0:12:00:f4:38:ed:cc:c9:e6:35:b3:9b:8a:80:
7e:64:76:6b:99:a9:f1:02:ac:a3:c2:16:79:f9:14:bf:3a:8e:
4f:b9:35:61:08:41:40:53:78:d4:43:a0:c6:fd:1e:b0:e0:b8:
77:85:2b:64:7f:82:bf:3d:7c:a5:d2:61:37:3f:88:ae:33:2e:
d7:fa:f1:6e:a6:44:4f:28:f8:09:58:e9:f6:e9:0b:b0:80:61:
32:c3:3f:83:ec:39:5b:25:0d:c3:d8:74:82:99:f4:c7:94:ab:
aa:8b:3d:ed:96:a8:de:f7:19:22:29:27:c2:15:94:9d:c8:f9:
9c:73:be:5a:70:55:a7:a7:c4:b2:bf:69:10:8f:50:c6:68:f9:
b9:70:6d:f8:7b:be:02:d5:74:e8:36:72:8f:f5:4a:24:4a:7b:
8b:09:11:0a
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYizSFuwVbm38zx7pO0OFMFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MjQyZGJhMjZlZDg4MmIzODBkYWJlYmFiM2M1ZjM5NDIw
MDZlY2MwHhcNMjMwNjEzMDU0NDAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDA3MmM2YjI4ZTk5NDhkOWY2MjA2ODg1NDZhNGI4ZTgxYTA3N2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ9jSLzic20eWfAiHoq/LjJM+qZS
Dnn9VDh2vttCmyze5h5GsAY0wydRludwmv1GPy6M7fiBgL1fZujsk3is3VxBmdsP
rFjpavGI45ugEapSRdGJdz2fJb1H8dUEGRM4qoffZIrKYQUZRFQB77fLfpmDPgBv
HQeN5WlGnA6tauzyFnqFjmeMAKFPIBqtfBTlKgYf8QzurjDOWDBKwew1Co3MP6J0
1k+1ozGMOgPwagQ+6fMvpSmJpt2t6OEZZp9o7tOeNN3dTIKsaHlmui1+V2+NwpM4
oT7fqGC6vRj66tuP6lAqOIxTuP/QFoZMg/SzY7dH4jBTI/2qTEEZkUPnGwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFJQHLGso6ZSNn2IGiFRqS46BoHf4MB8GA1UdIwQY
MBaAFJckLbom7YgrOA2r66s8XzlCAG7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80Y2I2ODctODdmZC00YWYwLWEzNmIt
NjA3MjcyZDczN2NiLzEvbEFjc2F5anBsSTJmWWdhSVZHcExqb0dnZF9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy80Y2I2ODctODdmZC00YWYwLWEzNmItNjA3MjcyZDczN2Ni
LzEvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFWRLgAwQD
bUT4AwQDshXAMA0EAgACMAcDBQMqABe4MA0GCSqGSIb3DQEBCwUAA4IBAQAj3SbD
yMeiU2xYxM9w+ZpzJ21NQ18NC4yw/En9o44KCtPv6QWChtMzyonE3tnTTVJ9SgL/
kMTvvcpEMxfPUTDEx72GGQUWpUfvZf4owInHlx631O1Msso2OGXnpvLlwBIA9Djt
zMnmNbObioB+ZHZrmanxAqyjwhZ5+RS/Oo5PuTVhCEFAU3jUQ6DG/R6w4Lh3hStk
f4K/PXyl0mE3P4iuMy7X+vFupkRPKPgJWOn26QuwgGEywz+D7DlbJQ3D2HSCmfTH
lKuqiz3tlqje9xkiKSfCFZSdyPmcc75acFWnp8Syv2kQj1DGaPm5cG34e74C1XTo
NnKP9UokSnuLCREK
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:04 2024 by rpki-client on console-fra.rpki-client.org