Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/lp_uiNVBrI0BeR5YW_EhO4nbcuI.roa
File: lp_uiNVBrI0BeR5YW_EhO4nbcuI.roa (raw, json)
Hash identifier: oF+rhfagTY50FMSVNDMZg3vV+06ncw6zXn0ailCXd4I=
Subject key identifier: 96:9F:EE:88:D5:41:AC:8D:01:79:1E:58:5B:F1:21:3B:89:DB:72:E2
Certificate issuer: /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial: 01856C25BD633963829052841ACE903E0976
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/lp_uiNVBrI0BeR5YW_EhO4nbcuI.roa
Signing time: Sun 01 Jan 2023 07:04:50 +0000
ROA not before: Sun 01 Jan 2023 07:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212152
IP address blocks: 198.205.14.0/24 maxlen: 24
198.205.13.0/24 maxlen: 24
198.205.12.0/24 maxlen: 24
198.62.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:bd:63:39:63:82:90:52:84:1a:ce:90:3e:09:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Validity
Not Before: Jan 1 07:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=969fee88d541ac8d01791e585bf1213b89db72e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:35:29:c0:cb:0a:f0:3c:ba:d8:29:8e:04:
dc:25:e8:6e:55:79:ca:d8:da:06:f1:74:0a:63:49:
93:5d:f5:c9:e2:e0:56:df:fc:41:3a:68:65:3b:f1:
e0:bb:16:e4:80:d2:a0:4e:64:57:0f:e4:a8:e8:94:
5c:e8:3a:1e:e1:35:f3:c9:6f:23:9c:f7:dc:9f:77:
58:d1:40:5b:6f:df:22:c9:e9:07:48:49:a4:b9:d5:
64:6e:75:df:13:b5:79:2c:28:e0:da:40:65:f9:a8:
bd:10:7d:50:03:2c:5f:62:31:35:b8:a1:a6:04:eb:
b4:8e:5e:b1:75:d5:d5:a2:cb:f1:0a:50:94:e0:df:
9e:10:24:f2:39:ab:30:4b:94:38:eb:46:52:cd:13:
70:71:42:38:35:7c:20:c8:22:07:77:b8:65:60:45:
cc:bd:db:18:9e:bd:31:2c:8b:58:e0:f7:86:5f:f7:
07:38:9a:cf:43:7c:05:91:03:d4:7e:61:4c:fc:6b:
2b:3b:36:2a:28:4b:20:08:da:38:9b:a2:54:74:62:
a4:d5:fe:82:81:43:66:e9:54:d8:c3:3a:30:4e:7c:
32:a7:21:f3:b0:65:2a:77:77:85:d8:74:9f:14:d6:
b1:cf:98:e2:44:b1:46:b9:ce:27:9a:0a:c3:01:d8:
b7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9F:EE:88:D5:41:AC:8D:01:79:1E:58:5B:F1:21:3B:89:DB:72:E2
X509v3 Authority Key Identifier:
keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/lp_uiNVBrI0BeR5YW_EhO4nbcuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.62.104.0/24
198.205.12.0-198.205.14.255
Signature Algorithm: sha256WithRSAEncryption
38:68:da:6d:e1:50:bd:5d:ed:12:1d:22:f4:f0:13:04:93:ce:
35:dc:11:3b:39:cc:70:d1:70:0d:0a:61:15:2e:55:0c:fb:86:
63:f3:bc:d8:0f:56:91:a9:17:48:fd:f2:74:02:a0:5b:3d:a2:
47:57:1d:68:06:ae:8d:7d:24:58:15:8e:8b:ea:f2:c7:75:94:
49:21:66:62:ae:94:23:fd:81:ef:16:8c:36:47:1b:fe:d7:85:
6e:a3:8c:3c:a8:d2:0f:22:8e:b6:cf:80:f7:c8:b2:ee:50:8b:
af:e9:3a:32:f2:c0:b7:1e:8d:fa:5d:37:43:42:70:53:1e:3e:
63:73:5f:bb:f1:24:99:24:90:94:83:9c:f4:e2:16:dd:6f:6a:
15:c9:d6:36:cc:d9:a8:72:7a:27:63:78:3a:8a:d0:e0:b3:a8:
2e:fd:3c:df:76:34:f9:c0:0d:c8:55:da:57:2b:be:05:44:31:
90:6f:21:a5:2e:c7:50:ea:cc:54:67:6c:4c:4b:19:9c:12:c2:
e0:ec:c8:c3:a0:6e:52:0e:80:49:ae:5b:0c:62:21:79:40:a1:
fc:2c:75:ce:fd:ea:2d:f6:88:71:a7:17:d6:3d:d1:6b:a7:09:
50:ab:fd:83:81:37:2c:a9:b4:d7:00:fd:e6:33:5a:07:26:b6:
a4:d1:f9:dc
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVsJb1jOWOCkFKEGs6QPgl2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTEyZTg5OTNiMDBiZGEyYjRlOWMwMmFjNTc4Mzc0MDBh
YWM0MDQwHhcNMjMwMTAxMDcwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjlmZWU4OGQ1NDFhYzhkMDE3OTFlNTg1YmYxMjEzYjg5ZGI3MmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVc1KcDLCvA8utgpjgTcJehuVXnK
2NoG8XQKY0mTXfXJ4uBW3/xBOmhlO/HguxbkgNKgTmRXD+So6JRc6Doe4TXzyW8j
nPfcn3dY0UBbb98iyekHSEmkudVkbnXfE7V5LCjg2kBl+ai9EH1QAyxfYjE1uKGm
BOu0jl6xddXVosvxClCU4N+eECTyOaswS5Q460ZSzRNwcUI4NXwgyCIHd7hlYEXM
vdsYnr0xLItY4PeGX/cHOJrPQ3wFkQPUfmFM/GsrOzYqKEsgCNo4m6JUdGKk1f6C
gUNm6VTYwzowTnwypyHzsGUqd3eF2HSfFNaxz5jiRLFGuc4nmgrDAdi3lQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJaf7ojVQayNAXkeWFvxITuJ23LiMB8GA1UdIwQY
MBaAFNkRLomTsAvaK06cAqxXg3QAqsQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYt
NTE3YTY2MWFlNmJkLzEvbHBfdWlOVkJySTBCZVI1WVdfRWhPNG5iY3VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYtNTE3YTY2MWFlNmJk
LzEvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAxj5oMAwD
BALGzQwDBADGzQ4wDQYJKoZIhvcNAQELBQADggEBADho2m3hUL1d7RIdIvTwEwST
zjXcETs5zHDRcA0KYRUuVQz7hmPzvNgPVpGpF0j98nQCoFs9okdXHWgGro19JFgV
jovq8sd1lEkhZmKulCP9ge8WjDZHG/7XhW6jjDyo0g8ijrbPgPfIsu5Qi6/pOjLy
wLcejfpdN0NCcFMePmNzX7vxJJkkkJSDnPTiFt1vahXJ1jbM2ahyeidjeDqK0OCz
qC79PN92NPnADchV2lcrvgVEMZBvIaUux1DqzFRnbExLGZwSwuDsyMOgblIOgEmu
WwxiIXlAofwsdc796i32iHGnF9Y90WunCVCr/YOBNyyptNcA/eYzWgcmtqTR+dw=
-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:53 2024 by rpki-client on console-fra.rpki-client.org