Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/LjjeUG_rSGbULAsiyoqkVFPwb58.roa
File: LjjeUG_rSGbULAsiyoqkVFPwb58.roa (raw, json)
Hash identifier: M/h6Np1/Dl6toCGQFe4WJOKC3IyDUYXGMy/fEdwcEmM=
Subject key identifier: 2E:38:DE:50:6F:EB:48:66:D4:2C:0B:22:CA:8A:A4:54:53:F0:6F:9F
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 0193CFC34AC357B8A89AA9EE7018281A01A2
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/LjjeUG_rSGbULAsiyoqkVFPwb58.roa
Signing time: Mon 16 Dec 2024 13:58:22 +0000
ROA not before: Mon 16 Dec 2024 13:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48753
IP address blocks: 193.84.71.0/24 maxlen: 24
195.20.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:c3:4a:c3:57:b8:a8:9a:a9:ee:70:18:28:1a:01:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Dec 16 13:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e38de506feb4866d42c0b22ca8aa45453f06f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:7e:21:8c:e9:77:03:57:be:7b:f6:5d:d4:
9e:89:ea:57:0d:14:fb:6b:d3:3d:1a:68:de:1c:7e:
48:01:be:11:bf:f3:d2:b3:5f:e7:f8:f4:ab:25:73:
3f:0b:29:3e:37:ff:46:19:34:ec:69:38:98:0a:02:
48:3e:17:5e:10:86:40:9b:37:24:45:67:2b:6f:9f:
cc:85:54:b4:1e:2c:8f:2e:33:a5:69:df:98:1b:7c:
e8:3c:a6:66:46:b1:7e:81:f5:5b:cc:0c:33:64:fc:
b7:88:7d:96:e9:64:26:0f:ee:25:aa:08:fe:40:a3:
60:b9:b3:a5:d6:3d:d8:36:8e:14:9d:f9:ac:12:1e:
b0:33:3e:c2:c0:f1:bb:4b:cb:54:05:82:4e:9a:e6:
03:08:e5:9e:9c:52:a5:1f:67:02:f4:39:dc:6c:60:
aa:a7:9b:9b:a0:8f:c9:14:94:45:5d:75:1c:c4:3a:
3f:21:c4:16:35:47:47:9f:c3:1b:e2:a0:4e:67:2a:
9f:64:18:90:43:61:ba:30:c1:9a:8d:74:34:a9:7a:
01:a3:b0:db:f3:d0:ac:e5:b4:a3:13:66:a7:3d:f0:
67:48:eb:55:03:ff:b4:15:77:8d:09:6f:3b:21:6c:
7d:f0:4a:c0:83:09:73:ab:5d:da:d2:94:75:f9:55:
0a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:38:DE:50:6F:EB:48:66:D4:2C:0B:22:CA:8A:A4:54:53:F0:6F:9F
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/LjjeUG_rSGbULAsiyoqkVFPwb58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.71.0/24
195.20.18.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:82:7a:85:b4:5c:79:5c:89:38:3c:ab:f2:76:2f:df:2b:18:
0f:b4:01:83:92:73:0a:a6:84:d6:51:4e:4b:4e:ed:20:25:64:
95:b9:34:11:3f:85:7c:e7:17:f6:0a:27:9e:27:04:b5:19:a9:
4c:83:9a:1b:8a:d7:63:df:2a:40:1d:8e:c6:57:02:48:22:0f:
d9:b6:3d:0d:aa:36:e6:d7:99:91:6b:15:a7:44:9f:49:d4:76:
39:99:c1:14:40:13:53:77:64:63:19:ea:d7:9c:7b:ca:9a:1c:
a6:86:cd:90:52:c9:af:58:d6:85:4e:bd:35:d7:55:59:e2:d4:
3c:03:06:5c:ec:c7:3c:34:29:09:7d:45:06:f5:49:62:0c:bf:
c0:7c:48:90:e4:0a:30:13:e1:18:c0:ae:3f:e3:05:fa:08:20:
aa:f2:d2:c9:6e:b9:b5:ed:89:d2:a0:b8:96:9c:13:f0:e6:46:
06:12:74:f8:6d:95:e9:c5:db:47:03:85:19:e2:b2:3b:85:e3:
63:50:12:df:04:29:fc:09:53:6f:6e:10:96:e0:7e:1a:d7:86:
be:e8:98:0a:28:8d:13:2f:0a:d8:6a:56:d2:c9:43:5f:ea:5c:
df:1c:cc:f7:e0:8c:91:af:7a:6b:b1:85:f7:0f:a0:34:39:12:
10:0c:ca:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:48:17 2025 by rpki-client