Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/lV4OCjg9F9wHbPGTQ9UxA3HJazI.roa
File: lV4OCjg9F9wHbPGTQ9UxA3HJazI.roa (raw, json)
Hash identifier: SmakrbC5OUUuJVqMJuQCMDt8FOOR+NvzCf1Dmbwhmi8=
Subject key identifier: 95:5E:0E:0A:38:3D:17:DC:07:6C:F1:93:43:D5:31:03:71:C9:6B:32
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018B4B86EF465D4727B0692A757772C70831
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/lV4OCjg9F9wHbPGTQ9UxA3HJazI.roa
Signing time: Fri 20 Oct 2023 05:20:15 +0000
ROA not before: Fri 20 Oct 2023 05:20:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9087
IP address blocks: 213.145.72.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 26 Oct 2023 13:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4b:86:ef:46:5d:47:27:b0:69:2a:75:77:72:c7:08:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 20 05:20:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=955e0e0a383d17dc076cf19343d5310371c96b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f8:d2:95:c8:82:f3:ce:47:a8:51:4c:78:bb:
61:30:87:12:4f:f1:db:29:9e:6b:78:de:76:13:5c:
f9:37:b3:6d:fb:52:67:67:50:17:be:f8:87:fa:1e:
ec:b2:3f:e6:ff:bd:98:74:de:ff:f4:24:0b:4b:35:
a0:e7:32:5b:54:9e:ae:2f:33:df:7b:5d:86:23:ca:
e9:cc:36:15:1e:7c:3b:5f:d6:10:39:9d:a0:60:1f:
29:fe:20:e9:aa:fb:37:a9:36:f7:e3:03:e4:78:4e:
09:50:b9:86:d2:bd:78:5a:ef:8d:4b:4e:40:d7:3c:
ce:d3:e9:c0:23:f1:7f:16:50:16:71:69:b3:55:14:
e5:5f:37:34:8d:21:11:93:a6:b2:6f:f4:69:36:36:
81:48:09:51:0f:42:0b:db:39:7f:e7:66:20:c4:ab:
e2:3e:10:3c:0f:05:bf:81:b8:9e:bf:65:3f:51:9c:
ce:a8:3d:a2:75:a8:b3:ba:ba:eb:73:4f:4a:a6:5a:
bd:24:18:7d:7d:66:70:dc:46:b2:27:ba:05:64:cb:
a7:26:3d:1c:d2:81:d2:61:10:ec:d2:fd:47:14:aa:
07:9b:62:e0:f9:59:0a:0e:0e:6e:17:26:7d:47:bb:
33:3f:25:4c:46:89:a1:4c:62:fd:4c:63:23:66:b3:
bd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5E:0E:0A:38:3D:17:DC:07:6C:F1:93:43:D5:31:03:71:C9:6B:32
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/lV4OCjg9F9wHbPGTQ9UxA3HJazI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.72.0/23
Signature Algorithm: sha256WithRSAEncryption
68:97:62:85:77:3b:b9:23:7d:dd:d2:62:d9:eb:9e:54:af:a4:
1b:d9:a5:5b:98:67:46:2e:bf:df:7d:c1:4e:cb:e2:bf:e2:5c:
43:7c:91:d1:20:9d:18:20:b5:98:4c:57:70:b8:33:48:71:c9:
fb:40:dd:cf:58:16:40:5a:f3:56:87:db:d9:c4:ae:6f:b3:b6:
43:3b:2c:46:10:53:ab:f2:e7:e7:12:54:a2:90:00:03:81:c0:
2f:5c:09:7b:6d:5c:53:67:94:aa:7d:6a:77:c0:57:2c:89:21:
42:1a:c4:21:6a:b3:80:87:69:b5:d4:eb:ea:59:88:ca:82:a9:
c9:e6:fd:ea:25:43:29:9a:8f:f5:3b:b9:55:86:0d:2e:27:d6:
ab:b8:57:01:af:7e:ed:f3:d6:f3:2f:51:22:e1:68:11:d6:5b:
b7:44:53:06:c0:b9:f2:a1:fc:75:9a:d4:59:c3:2e:27:44:f8:
ae:eb:d8:1b:84:af:a0:d8:1a:c7:d3:1a:64:37:15:6e:2b:bf:
9d:e4:98:a4:77:52:e6:f8:fb:02:59:07:f4:94:6f:25:b0:36:
93:b3:53:1d:9d:86:a0:c0:cd:18:39:6e:fb:11:ae:34:bc:a1:
92:ea:46:12:46:26:67:0b:14:fa:98:9b:02:f5:86:f5:e4:88:
43:ff:7c:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtLhu9GXUcnsGkqdXdyxwgxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjMxMDIwMDUyMDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTVlMGUwYTM4M2QxN2RjMDc2Y2YxOTM0M2Q1MzEwMzcxYzk2YjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/jSlciC885HqFFMeLthMIcST/Hb
KZ5reN52E1z5N7Nt+1JnZ1AXvviH+h7ssj/m/72YdN7/9CQLSzWg5zJbVJ6uLzPf
e12GI8rpzDYVHnw7X9YQOZ2gYB8p/iDpqvs3qTb34wPkeE4JULmG0r14Wu+NS05A
1zzO0+nAI/F/FlAWcWmzVRTlXzc0jSERk6ayb/RpNjaBSAlRD0IL2zl/52YgxKvi
PhA8DwW/gbiev2U/UZzOqD2idaizurrrc09Kplq9JBh9fWZw3EayJ7oFZMunJj0c
0oHSYRDs0v1HFKoHm2Lg+VkKDg5uFyZ9R7szPyVMRomhTGL9TGMjZrO9JwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJVeDgo4PRfcB2zxk0PVMQNxyWsyMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvbFY0T0NqZzlGOXdIYlBHVFE5VXhBM0hKYXpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1ZFIMA0G
CSqGSIb3DQEBCwUAA4IBAQBol2KFdzu5I33d0mLZ655Ur6Qb2aVbmGdGLr/ffcFO
y+K/4lxDfJHRIJ0YILWYTFdwuDNIccn7QN3PWBZAWvNWh9vZxK5vs7ZDOyxGEFOr
8ufnElSikAADgcAvXAl7bVxTZ5SqfWp3wFcsiSFCGsQharOAh2m11OvqWYjKgqnJ
5v3qJUMpmo/1O7lVhg0uJ9aruFcBr37t89bzL1Ei4WgR1lu3RFMGwLnyofx1mtRZ
wy4nRPiu69gbhK+g2BrH0xpkNxVuK7+d5Jikd1Lm+PsCWQf0lG8lsDaTs1MdnYag
wM0YOW77Ea40vKGS6kYSRiZnCxT6mJsC9Yb15IhD/3wf
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org