Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LK-_iKbSfdf1thUMOZc7qCkPRho.roa
File: LK-_iKbSfdf1thUMOZc7qCkPRho.roa (raw, json)
Hash identifier: QTAMULf0XOqUdd66S0ykfKeY2FN8o142i0LCQD/4Ick=
Subject key identifier: 2C:AF:BF:88:A6:D2:7D:D7:F5:B6:15:0C:39:97:3B:A8:29:0F:46:1A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428247C99536795B2CD6DFFBB7152305B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LK-_iKbSfdf1thUMOZc7qCkPRho.roa
Signing time: Thu 02 Jan 2025 17:51:07 +0000
ROA not before: Thu 02 Jan 2025 17:51:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 45.149.242.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
93.123.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 10:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:7c:99:53:67:95:b2:cd:6d:ff:bb:71:52:30:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cafbf88a6d27dd7f5b6150c39973ba8290f461a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:c0:7d:ba:fd:64:a6:19:65:3a:27:db:ef:
12:15:ae:ae:39:8d:91:a9:8b:14:f1:13:de:d6:94:
cc:8e:82:9c:ae:9c:f9:88:c7:f8:fd:e9:34:dd:f9:
3c:73:a1:db:eb:d1:1a:70:31:1a:95:91:a4:6c:fc:
53:6f:35:83:43:4f:d7:5e:e9:0c:35:f4:b5:47:ee:
99:99:33:c1:cc:0a:8d:68:51:35:d9:3e:fc:c1:03:
c5:4c:76:ff:49:24:4b:7b:d3:28:ca:36:44:85:b4:
33:b5:e2:d2:df:46:48:8a:7b:26:59:2c:18:b8:fe:
0c:5d:6c:ac:93:a4:ce:44:74:35:ca:b2:11:87:ae:
40:58:c3:e0:57:02:87:32:0d:d0:42:76:00:00:61:
a0:80:fa:6a:41:a7:04:64:c8:c0:04:d7:1c:bc:3b:
60:69:fb:2d:43:a9:d6:00:8d:67:e5:79:d0:bb:25:
83:9c:60:94:bc:20:11:69:43:bf:db:81:74:f8:cb:
dc:18:1d:e9:a0:c3:d9:bf:3f:88:45:f7:6e:29:46:
71:f9:e1:d9:63:78:05:8a:78:a7:65:c2:90:61:45:
8f:64:de:cc:0f:04:03:f7:4e:aa:88:7f:49:65:7f:
01:23:83:c4:a7:33:97:15:ca:01:d8:fe:f4:cb:c3:
73:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AF:BF:88:A6:D2:7D:D7:F5:B6:15:0C:39:97:3B:A8:29:0F:46:1A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LK-_iKbSfdf1thUMOZc7qCkPRho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.242.0/24
87.121.103.0/24
93.123.24.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3c:42:3e:fa:b2:bc:f2:3c:c8:ed:fc:cd:81:41:30:96:d9:
08:38:40:70:c1:19:da:fd:59:0b:61:0e:d3:1f:40:e4:f9:92:
10:76:dd:4b:69:36:6a:e5:a8:28:b3:25:35:93:eb:f4:0d:24:
75:cf:eb:93:b0:6a:a9:7c:bf:99:1d:78:35:fa:83:50:f2:78:
e3:6b:2e:d3:85:3b:01:d1:fb:94:dc:b0:53:a2:21:c1:96:8a:
b5:d2:b9:5a:8a:54:92:b5:cb:a7:e3:cb:de:87:4f:24:ab:50:
ad:96:da:ac:53:d3:30:17:a2:ba:44:c9:d7:1a:d6:03:2f:8c:
76:92:94:a4:e2:23:6d:f8:88:32:65:c3:a9:3f:45:23:19:39:
16:54:a7:a0:58:2e:00:9d:97:6a:52:02:b5:7b:1a:5d:cd:b5:
7e:aa:13:cb:16:3c:ad:a8:1d:bf:c1:34:cc:c3:fb:f3:a2:73:
df:09:ba:e6:b4:f2:46:c7:c6:fb:46:98:79:70:73:96:7b:6a:
84:b0:58:30:2a:07:71:cc:b3:e5:20:3b:ef:0a:c3:57:d2:18:
19:02:fd:1a:42:9c:4d:15:12:87:48:8e:8b:16:1f:8c:ee:e8:
5f:47:a8:01:43:f1:d8:bb:b7:b1:65:a5:ec:6b:b5:34:9e:bb:
cb:1b:d0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:22:05 2025 by rpki-client