Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/lleYo60G4Hp7FuhwXOx0Zy4QLAY.roa
File: lleYo60G4Hp7FuhwXOx0Zy4QLAY.roa (raw, json)
Hash identifier: YxPOElYRuEKTHvSeH5V0MwOiJRUSYxZ2VJ7UGhGTBsc=
Subject key identifier: 96:57:98:A3:AD:06:E0:7A:7B:16:E8:70:5C:EC:74:67:2E:10:2C:06
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 01856D6F41760E363ACAAC9D084BC492CD4C
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/lleYo60G4Hp7FuhwXOx0Zy4QLAY.roa
Signing time: Sun 01 Jan 2023 13:04:45 +0000
ROA not before: Sun 01 Jan 2023 13:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50351
IP address blocks: 195.191.110.0/24 maxlen: 24
195.191.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:41:76:0e:36:3a:ca:ac:9d:08:4b:c4:92:cd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: Jan 1 13:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=965798a3ad06e07a7b16e8705cec74672e102c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:61:2a:36:27:fa:15:aa:9e:ef:49:ac:84:8f:
d3:43:95:05:c9:b2:eb:ab:a2:89:6c:36:cd:ac:48:
05:8a:8e:c5:7b:57:cc:ef:1d:80:cd:74:e4:01:e7:
08:92:27:ae:5d:ac:fa:8c:47:98:fe:bc:d3:a4:db:
36:2e:f0:b8:6d:de:fe:c9:91:c8:2d:32:13:44:2d:
5c:8e:99:b8:45:fc:73:eb:64:31:05:ff:38:d9:e8:
70:8b:d6:ef:d0:51:a1:dd:82:cf:f4:b8:6b:89:fb:
4d:a1:61:1d:c5:2d:2b:6b:bc:26:18:50:c6:1a:25:
2f:c1:94:3b:90:ac:bd:dc:e7:47:9c:a0:02:6e:64:
2f:38:9c:09:e8:e8:65:ff:1d:9a:6e:61:fe:77:72:
25:5e:76:93:b4:bf:ef:0a:76:79:f8:0e:15:cb:91:
9d:2a:ee:5e:e4:d9:4d:9c:ff:1c:a4:e5:b6:94:95:
6e:e3:7e:75:7d:a6:73:8f:c8:c1:8c:79:7e:30:16:
13:6d:a4:7b:3f:43:43:33:16:59:c3:33:e3:77:4c:
2d:86:cb:1a:0a:44:06:36:bb:f4:10:8d:f8:62:cd:
47:cf:be:c6:cd:02:fd:5c:fe:9c:40:e7:6c:17:36:
a2:84:09:d6:7f:f3:0d:90:16:a1:1a:58:73:a0:03:
f2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:57:98:A3:AD:06:E0:7A:7B:16:E8:70:5C:EC:74:67:2E:10:2C:06
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/lleYo60G4Hp7FuhwXOx0Zy4QLAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.110.0/23
Signature Algorithm: sha256WithRSAEncryption
89:5b:49:d8:42:7c:da:e4:3c:7f:1a:8f:b2:11:48:5b:7a:98:
78:43:24:bc:f1:42:01:b9:d6:f9:68:e5:f3:38:81:ea:0a:7b:
51:98:83:9e:ed:d8:14:51:5d:4c:28:a8:60:85:ba:d5:ec:a6:
ce:db:91:3f:bd:20:aa:06:9d:1b:2f:eb:b0:1c:91:32:f6:52:
9c:11:62:bb:75:ce:f3:c1:17:9a:56:d3:5c:18:41:4e:48:bc:
52:b7:75:1a:79:e3:54:e0:1e:eb:5f:35:c7:c5:99:e2:39:14:
de:88:92:79:c2:3f:52:32:58:4d:32:70:7e:48:58:0b:52:4a:
5f:d0:8d:bf:ca:7c:30:70:0f:95:1c:49:13:fb:1a:d5:46:40:
dd:ab:1f:eb:b1:a8:81:b1:05:53:5b:e7:0e:cc:93:0c:d1:38:
8d:0d:c0:d4:fa:19:13:3b:51:69:1d:63:42:56:dd:ff:53:8c:
5d:9f:9a:3f:72:82:3a:c6:65:35:60:2d:ed:23:07:cf:39:c6:
07:57:6c:e8:f7:38:b3:0e:a0:ee:23:69:d8:f1:20:3d:10:76:
70:0f:ec:d1:64:55:b8:4f:3b:05:59:ff:83:5b:f7:a1:11:82:
ed:b2:82:b5:71:a7:a7:bb:53:69:e7:92:b8:92:1e:e1:04:d9:
91:f6:3c:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtb0F2DjY6yqydCEvEks1MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMzZlOTFiNjJkM2RjN2MxMzdhMjhhYWEwMDZlZGU5Yjll
YTFmZTQwHhcNMjMwMTAxMTMwNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjU3OThhM2FkMDZlMDdhN2IxNmU4NzA1Y2VjNzQ2NzJlMTAyYzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmEqNif6Faqe70mshI/TQ5UFybLr
q6KJbDbNrEgFio7Fe1fM7x2AzXTkAecIkieuXaz6jEeY/rzTpNs2LvC4bd7+yZHI
LTITRC1cjpm4Rfxz62QxBf842ehwi9bv0FGh3YLP9LhriftNoWEdxS0ra7wmGFDG
GiUvwZQ7kKy93OdHnKACbmQvOJwJ6Ohl/x2abmH+d3IlXnaTtL/vCnZ5+A4Vy5Gd
Ku5e5NlNnP8cpOW2lJVu4351faZzj8jBjHl+MBYTbaR7P0NDMxZZwzPjd0wthssa
CkQGNrv0EI34Ys1Hz77GzQL9XP6cQOdsFzaihAnWf/MNkBahGlhzoAPyjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJZXmKOtBuB6exbocFzsdGcuECwGMB8GA1UdIwQY
MBaAFJ026Rti09x8E3ooqqAG7em56h/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jMjg0Y2QtYjJiNy00OTExLWIyMGIt
YjJjZWE3NjkwODM3LzEvbGxlWW82MEc0SHA3RnVod1hPeDBaeTRRTEFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jMjg0Y2QtYjJiNy00OTExLWIyMGItYjJjZWE3NjkwODM3
LzEvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw79uMA0G
CSqGSIb3DQEBCwUAA4IBAQCJW0nYQnza5Dx/Go+yEUhbeph4QyS88UIBudb5aOXz
OIHqCntRmIOe7dgUUV1MKKhghbrV7KbO25E/vSCqBp0bL+uwHJEy9lKcEWK7dc7z
wReaVtNcGEFOSLxSt3UaeeNU4B7rXzXHxZniORTeiJJ5wj9SMlhNMnB+SFgLUkpf
0I2/ynwwcA+VHEkT+xrVRkDdqx/rsaiBsQVTW+cOzJMM0TiNDcDU+hkTO1FpHWNC
Vt3/U4xdn5o/coI6xmU1YC3tIwfPOcYHV2zo9zizDqDuI2nY8SA9EHZwD+zRZFW4
TzsFWf+DW/ehEYLtsoK1caenu1Np55K4kh7hBNmR9jyS
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:54 2024 by rpki-client on console-ams.rpki-client.org