Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/la_iUSEzaglFOHIKvjabo5rTor0.roa
File: la_iUSEzaglFOHIKvjabo5rTor0.roa (raw, json)
Hash identifier: ebJtVfYl6dqE34uV2ythtRTa8Qm5dJYHs6CPGTYarqI=
Subject key identifier: 95:AF:E2:51:21:33:6A:09:45:38:72:0A:BE:36:9B:A3:9A:D3:A2:BD
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 01856ECB8B26622A426ECDF1A18EC9A0BF17
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/la_iUSEzaglFOHIKvjabo5rTor0.roa
Signing time: Sun 01 Jan 2023 19:25:11 +0000
ROA not before: Sun 01 Jan 2023 19:25:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 185.239.245.0/24 maxlen: 24
185.254.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:8b:26:62:2a:42:6e:cd:f1:a1:8e:c9:a0:bf:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 1 19:25:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95afe25121336a094538720abe369ba39ad3a2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:7e:d6:7d:f0:61:27:76:d5:8a:47:6f:e4:
4c:33:2b:b3:bc:d3:1e:3a:f2:0f:90:95:70:37:97:
4c:89:9c:b3:0f:02:31:ee:ed:12:a5:77:d7:2e:8e:
91:c6:b4:62:bb:f9:30:01:b6:e6:60:6f:85:83:08:
6d:69:dd:1d:56:11:f9:c2:cc:6a:b4:42:1b:e2:ba:
93:4b:64:8b:71:e3:be:7d:8c:bc:4a:40:56:2d:ed:
64:0d:f5:d3:90:cf:23:21:1b:c9:93:24:0b:7f:2d:
9f:28:30:21:5a:22:3d:07:73:88:99:a9:4b:8a:31:
a1:30:d8:1c:a5:21:83:00:12:69:f9:3e:ff:b6:67:
63:51:91:85:bb:6f:a6:f1:88:2e:11:b0:de:60:08:
30:27:da:9a:37:ea:10:50:d5:3d:dd:70:83:f1:24:
0a:c5:d2:20:2b:cc:53:35:b0:ae:3d:55:36:b0:6b:
6a:e7:e5:b7:a4:75:3f:8f:a6:d2:c1:73:9c:63:1b:
97:fe:82:cb:6d:d4:fa:08:9a:19:94:6b:de:a0:76:
60:ff:ef:6c:ea:09:7c:8e:c1:a1:d9:6e:d8:31:6d:
63:b9:ac:78:23:04:39:76:63:3f:58:82:df:45:e1:
9e:1e:2d:9e:eb:b7:c1:11:57:9b:07:dd:db:e9:cb:
0d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AF:E2:51:21:33:6A:09:45:38:72:0A:BE:36:9B:A3:9A:D3:A2:BD
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/la_iUSEzaglFOHIKvjabo5rTor0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.245.0/24
185.254.19.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3f:0a:8f:6e:5d:4b:df:d0:66:03:b4:a5:16:7e:57:e3:5c:
70:fc:e4:fd:28:f1:62:7b:b4:13:05:6e:3a:0c:9c:37:f3:4c:
06:f9:11:b0:c7:a3:c6:a9:dc:77:21:7d:f6:79:ab:50:66:ee:
94:d5:9a:54:b0:37:78:bb:10:70:2a:ac:98:36:31:af:a2:c1:
71:0e:14:b6:81:91:2b:c6:68:0b:7b:14:0c:25:d6:f8:6e:c5:
55:6b:4c:d6:56:1f:b0:f4:7b:ff:2b:2e:b5:d3:64:38:8d:b9:
e9:4a:36:dd:63:08:72:14:aa:a2:2e:96:b2:68:82:f6:2d:95:
da:54:ea:cd:b6:38:67:56:90:73:85:4a:5f:8f:e3:1f:b9:00:
81:1f:1d:e1:ed:bd:26:53:5b:e6:02:14:94:84:4c:83:a5:ae:
54:1f:1e:79:e1:70:9c:dd:43:d2:12:06:00:0d:65:7f:bf:a3:
94:5b:29:0f:f3:7e:67:2e:0f:da:b3:78:f8:8d:c8:2b:dc:76:
45:32:85:84:c8:5b:ea:60:60:9b:a1:60:e2:ce:51:b6:1e:c3:
fa:44:96:fe:21:f1:60:aa:8d:60:0f:81:77:b1:dc:4b:90:af:
f9:c0:88:9d:bd:2e:76:aa:dc:af:da:7d:2c:50:f7:f2:a0:41:
be:b4:58:36
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVuy4smYipCbs3xoY7JoL8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTQ1YThiZGYyYmNhMTUwZjI1ZWQ1NGEyNzdiOGY2NTNl
ZmRiM2UwHhcNMjMwMTAxMTkyNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWFmZTI1MTIxMzM2YTA5NDUzODcyMGFiZTM2OWJhMzlhZDNhMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ5+1n3wYSd21YpHb+RMMyuzvNMe
OvIPkJVwN5dMiZyzDwIx7u0SpXfXLo6RxrRiu/kwAbbmYG+Fgwhtad0dVhH5wsxq
tEIb4rqTS2SLceO+fYy8SkBWLe1kDfXTkM8jIRvJkyQLfy2fKDAhWiI9B3OImalL
ijGhMNgcpSGDABJp+T7/tmdjUZGFu2+m8YguEbDeYAgwJ9qaN+oQUNU93XCD8SQK
xdIgK8xTNbCuPVU2sGtq5+W3pHU/j6bSwXOcYxuX/oLLbdT6CJoZlGveoHZg/+9s
6gl8jsGh2W7YMW1juax4IwQ5dmM/WILfReGeHi2e67fBEVebB93b6csNnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJWv4lEhM2oJRThyCr42m6Oa06K9MB8GA1UdIwQY
MBaAFCsUWovfK8oVDyXtVKJ3uPZT79s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMt
MzA0MGJlZDNjY2NkLzEvbGFfaVVTRXphZ2xGT0hJS3ZqYWJvNXJUb3IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMtMzA0MGJlZDNjY2Nk
LzEvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAue/1AwQA
uf4TMA0GCSqGSIb3DQEBCwUAA4IBAQCJPwqPbl1L39BmA7SlFn5X41xw/OT9KPFi
e7QTBW46DJw380wG+RGwx6PGqdx3IX32eatQZu6U1ZpUsDd4uxBwKqyYNjGvosFx
DhS2gZErxmgLexQMJdb4bsVVa0zWVh+w9Hv/Ky6102Q4jbnpSjbdYwhyFKqiLpay
aIL2LZXaVOrNtjhnVpBzhUpfj+MfuQCBHx3h7b0mU1vmAhSUhEyDpa5UHx554XCc
3UPSEgYADWV/v6OUWykP835nLg/as3j4jcgr3HZFMoWEyFvqYGCboWDizlG2HsP6
RJb+IfFgqo1gD4F3sdxLkK/5wIidvS52qtyv2n0sUPfyoEG+tFg2
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:34 2023 by rpki-client on console.sobornost.net