Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/LuXOKdpNGVb28Dolrmc3yc5TAkE.roa
File: LuXOKdpNGVb28Dolrmc3yc5TAkE.roa (raw, json)
Hash identifier: F0Rj6Cjo2dXSgWoLsU9iB6+d5u6k4SjOvgQBzvHY1Z0=
Subject key identifier: 2E:E5:CE:29:DA:4D:19:56:F6:F0:3A:25:AE:67:37:C9:CE:53:02:41
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0193E60EA68D7605CD623668A5A598E86151
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/LuXOKdpNGVb28Dolrmc3yc5TAkE.roa
Signing time: Fri 20 Dec 2024 21:52:19 +0000
ROA not before: Fri 20 Dec 2024 21:52:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16125
IP address blocks: 5.144.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e6:0e:a6:8d:76:05:cd:62:36:68:a5:a5:98:e8:61:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Dec 20 21:52:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ee5ce29da4d1956f6f03a25ae6737c9ce530241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:dc:47:4e:28:e0:98:cc:f1:4e:9d:c1:79:
87:98:0f:80:ac:9d:2a:2b:a8:8d:90:53:8b:f0:34:
e1:0d:2d:18:16:84:f4:20:cb:dd:29:5f:36:e7:1d:
b5:8c:85:bd:c4:21:b0:3b:c4:ff:df:4b:5d:08:91:
6f:e2:3e:5f:9e:7a:5e:57:5f:02:2f:4d:98:76:2c:
db:c2:84:71:ad:11:90:f8:32:cd:06:05:7f:9c:9d:
ac:df:11:b1:d6:b4:fe:1a:e1:cf:5a:8b:7a:fc:ff:
41:77:a7:72:68:98:2e:03:d7:9e:cf:68:31:3a:24:
22:8a:a4:80:bd:25:b7:91:5f:48:97:9a:3c:08:da:
54:d4:bb:3d:37:fd:51:e0:7d:8f:9b:2a:ee:09:03:
5b:8b:a0:41:e5:e3:87:1e:2b:18:24:7c:18:ad:a3:
a8:63:3a:1c:de:17:2a:95:8c:6c:80:68:39:19:fd:
d5:59:ea:ad:0d:2d:69:9d:32:7c:03:d9:d6:71:5a:
c6:f3:75:ba:e4:b1:af:2d:de:fd:44:be:e8:00:bf:
99:85:4c:1a:73:44:3d:ee:72:67:14:3a:0e:c7:55:
3f:85:a4:1a:26:9c:e2:ba:8d:08:92:a3:39:07:32:
66:d4:12:a4:26:32:ea:64:fe:df:7e:b1:10:07:5e:
3e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E5:CE:29:DA:4D:19:56:F6:F0:3A:25:AE:67:37:C9:CE:53:02:41
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/LuXOKdpNGVb28Dolrmc3yc5TAkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.180.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:b6:28:e9:48:dd:6b:bc:30:16:a2:d3:18:fa:8f:58:3b:af:
5d:03:96:90:41:c7:93:d0:61:11:8f:1a:31:f4:48:71:0c:5b:
ef:77:3f:b3:61:a3:3e:47:e8:27:c2:ed:c6:5c:e5:e9:12:6a:
dc:6d:b2:4c:d9:ea:d6:7a:33:b5:03:4c:4f:a1:5e:fb:4f:87:
d5:f3:5b:42:a4:be:c5:45:52:50:af:29:8a:64:f1:a5:58:87:
4c:32:af:47:d3:24:ed:2c:fe:56:6a:c9:76:0b:87:e5:3a:5b:
ad:9c:a2:23:29:4d:a5:e5:84:3e:7c:89:64:3f:d5:3c:cd:66:
dc:01:1c:12:1d:8f:0d:01:8a:b8:1d:fd:5f:53:0f:ec:15:3b:
84:e6:d1:5c:e9:63:52:92:69:f3:6a:73:97:3e:3e:b3:fd:22:
20:d8:e0:09:42:b2:c7:46:eb:9e:c7:4f:ce:bf:4d:70:d5:d2:
3c:6c:aa:60:92:1c:f2:f4:2b:6a:85:bc:ad:c0:2b:7d:57:a4:
ca:dd:14:13:5b:3c:65:f6:0c:43:02:40:f0:a2:30:a2:79:69:
38:9b:45:cb:69:34:a6:5e:e9:06:45:70:d5:05:96:a8:7f:80:
3e:06:be:4a:13:b1:ca:cc:3f:9e:19:d1:f8:33:79:06:42:be:
ee:52:5a:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPmDqaNdgXNYjZopaWY6GFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5
M2U0NmIwHhcNMjQxMjIwMjE1MjE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWU1Y2UyOWRhNGQxOTU2ZjZmMDNhMjVhZTY3MzdjOWNlNTMwMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgncR04o4JjM8U6dwXmHmA+ArJ0q
K6iNkFOL8DThDS0YFoT0IMvdKV825x21jIW9xCGwO8T/30tdCJFv4j5fnnpeV18C
L02YdizbwoRxrRGQ+DLNBgV/nJ2s3xGx1rT+GuHPWot6/P9Bd6dyaJguA9eez2gx
OiQiiqSAvSW3kV9Il5o8CNpU1Ls9N/1R4H2PmyruCQNbi6BB5eOHHisYJHwYraOo
Yzoc3hcqlYxsgGg5Gf3VWeqtDS1pnTJ8A9nWcVrG83W65LGvLd79RL7oAL+ZhUwa
c0Q97nJnFDoOx1U/haQaJpziuo0IkqM5BzJm1BKkJjLqZP7ffrEQB14+aQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC7lzinaTRlW9vA6Ja5nN8nOUwJBMB8GA1UdIwQY
MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt
Y2Q2MTUyMjYxYzZmLzEvTHVYT0tkcE5HVmIyOERvbHJtYzN5YzVUQWtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm
LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZC0MA0G
CSqGSIb3DQEBCwUAA4IBAQC8tijpSN1rvDAWotMY+o9YO69dA5aQQceT0GERjxox
9EhxDFvvdz+zYaM+R+gnwu3GXOXpEmrcbbJM2erWejO1A0xPoV77T4fV81tCpL7F
RVJQrymKZPGlWIdMMq9H0yTtLP5Wasl2C4flOlutnKIjKU2l5YQ+fIlkP9U8zWbc
ARwSHY8NAYq4Hf1fUw/sFTuE5tFc6WNSkmnzanOXPj6z/SIg2OAJQrLHRuuex0/O
v01w1dI8bKpgkhzy9CtqhbytwCt9V6TK3RQTWzxl9gxDAkDwojCieWk4m0XLaTSm
XukGRXDVBZaof4A+Br5KE7HKzD+eGdH4M3kGQr7uUlpb
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:17:35 2025 by rpki-client