Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/LnoTLU-2qD_u3zyXKrhosahLPtI.roa
File: LnoTLU-2qD_u3zyXKrhosahLPtI.roa (raw, json)
Hash identifier: PKgom5Zh54mYOR1MyzYuW56XlEvLuk2y4oKnl7sauc4=
Subject key identifier: 2E:7A:13:2D:4F:B6:A8:3F:EE:DF:3C:97:2A:B8:68:B1:A8:4B:3E:D2
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018D5E6342292A2AE27D63AAC0E1454BDBAF
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/LnoTLU-2qD_u3zyXKrhosahLPtI.roa
Signing time: Wed 31 Jan 2024 07:19:39 +0000
ROA not before: Wed 31 Jan 2024 07:19:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397630
IP address blocks: 85.115.208.0/24 maxlen: 24
213.145.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 08:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:63:42:29:2a:2a:e2:7d:63:aa:c0:e1:45:4b:db:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 31 07:19:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e7a132d4fb6a83feedf3c972ab868b1a84b3ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:62:d2:b0:a1:cf:f5:37:38:93:a7:fb:65:ec:
36:b5:f1:58:c3:a0:96:a3:db:e9:e9:5e:64:39:ff:
cd:32:f1:ca:14:23:67:76:11:ef:7e:5e:2b:10:27:
d3:84:a3:e9:62:9b:b0:fa:2b:7d:76:f5:e2:61:48:
ac:ef:3a:11:1a:5b:0d:b2:b2:cd:14:2f:f0:f4:e4:
c6:a6:37:c9:c4:ec:17:46:da:be:96:31:cd:40:b3:
b5:b6:54:81:25:3c:b5:33:ee:d3:f6:e7:a3:55:30:
43:7c:36:a8:29:f9:38:f1:21:a1:b6:17:fb:f7:15:
c1:a0:6c:80:dd:9c:89:de:1f:58:91:06:80:1f:d1:
a8:57:22:db:04:9f:fa:bd:0b:91:69:d7:28:f0:43:
1c:5c:c2:f9:da:6b:98:3b:60:8a:00:a4:e1:92:c0:
6b:e4:ae:5b:12:0d:bc:b7:6d:89:e2:d5:0f:f6:28:
13:59:91:1f:b5:0a:20:71:14:13:b1:83:77:cf:c9:
56:71:7d:c3:8b:57:2a:ab:9a:b0:35:f6:e9:35:98:
19:e5:12:2d:f3:8e:10:4d:ce:52:60:8a:c2:65:ae:
fa:8f:2a:db:fb:d5:5d:80:09:90:0d:68:f9:f8:da:
38:70:c1:1b:31:a3:d2:3b:ea:d9:f0:af:48:f0:fe:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7A:13:2D:4F:B6:A8:3F:EE:DF:3C:97:2A:B8:68:B1:A8:4B:3E:D2
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/LnoTLU-2qD_u3zyXKrhosahLPtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/24
213.145.74.0/24
Signature Algorithm: sha256WithRSAEncryption
50:9d:0c:e3:03:9b:4f:12:2e:11:a7:7a:ac:91:96:cd:7c:52:
b4:c2:f4:b8:6b:b2:c6:42:33:94:35:6b:c6:56:97:ac:a0:bf:
db:e3:05:dc:de:5c:b4:85:fc:05:36:a4:2f:a9:9d:d0:8c:11:
06:88:fa:65:19:71:98:41:a5:a2:cb:7d:81:b6:ac:5f:9f:c3:
75:79:ad:e1:b3:09:b8:90:24:c2:52:43:95:f1:02:cf:c0:5a:
4b:ca:e8:be:5d:9c:3c:09:45:35:0d:ae:9c:81:04:21:ae:97:
0c:77:db:8d:21:3c:db:d1:31:79:7a:cc:60:e4:c5:f4:dd:44:
67:29:f9:0c:dd:f8:d0:66:fb:85:53:1a:a1:26:0d:98:27:67:
d1:27:be:7a:d4:7d:df:27:79:9e:f8:29:9d:f6:df:b7:94:1f:
9c:8d:d4:11:37:d5:84:60:a2:40:08:28:af:66:86:ad:12:06:
4e:0a:da:f9:dd:43:42:6b:fe:32:45:32:d9:f3:e1:d3:21:17:
aa:52:fd:3c:7c:e1:ab:82:26:54:2f:d2:c0:52:f3:bf:13:50:
46:44:9b:eb:f8:40:49:40:42:65:82:6d:27:77:e1:23:2f:32:
ba:cf:25:27:fc:db:33:be:f6:92:74:7c:32:5d:fd:31:34:9b:
e9:e6:58:6d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY1eY0IpKirifWOqwOFFS9uvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjQwMTMxMDcxOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTdhMTMyZDRmYjZhODNmZWVkZjNjOTcyYWI4NjhiMWE4NGIzZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmLSsKHP9Tc4k6f7Zew2tfFYw6CW
o9vp6V5kOf/NMvHKFCNndhHvfl4rECfThKPpYpuw+it9dvXiYUis7zoRGlsNsrLN
FC/w9OTGpjfJxOwXRtq+ljHNQLO1tlSBJTy1M+7T9uejVTBDfDaoKfk48SGhthf7
9xXBoGyA3ZyJ3h9YkQaAH9GoVyLbBJ/6vQuRadco8EMcXML52muYO2CKAKThksBr
5K5bEg28t22J4tUP9igTWZEftQogcRQTsYN3z8lWcX3Di1cqq5qwNfbpNZgZ5RIt
844QTc5SYIrCZa76jyrb+9VdgAmQDWj5+No4cMEbMaPSO+rZ8K9I8P4dzQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC56Ey1Ptqg/7t88lyq4aLGoSz7SMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvTG5vVExVLTJxRF91M3p5WEtyaG9zYWhMUHRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVXPQAwQA
1ZFKMA0GCSqGSIb3DQEBCwUAA4IBAQBQnQzjA5tPEi4Rp3qskZbNfFK0wvS4a7LG
QjOUNWvGVpesoL/b4wXc3ly0hfwFNqQvqZ3QjBEGiPplGXGYQaWiy32Btqxfn8N1
ea3hswm4kCTCUkOV8QLPwFpLyui+XZw8CUU1Da6cgQQhrpcMd9uNITzb0TF5esxg
5MX03URnKfkM3fjQZvuFUxqhJg2YJ2fRJ7561H3fJ3me+Cmd9t+3lB+cjdQRN9WE
YKJACCivZoatEgZOCtr53UNCa/4yRTLZ8+HTIReqUv08fOGrgiZUL9LAUvO/E1BG
RJvr+EBJQEJlgm0nd+EjLzK6zyUn/NszvvaSdHwyXf0xNJvp5lht
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org