Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/L-78DacFmE-t1GWPKIp1oRBfOQM.roa
File: L-78DacFmE-t1GWPKIp1oRBfOQM.roa (raw, json)
Hash identifier: UPqCwqkD/fGOc6vU8SkC/Ec+SY9NDCgleHwKXHPS6Rk=
Subject key identifier: 2F:EE:FC:0D:A7:05:98:4F:AD:D4:65:8F:28:8A:75:A1:10:5F:39:03
Certificate issuer: /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Certificate serial: 0191E1E6DB6BA1F8F631389218D7361B664E
Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/L-78DacFmE-t1GWPKIp1oRBfOQM.roa
Signing time: Wed 11 Sep 2024 16:24:48 +0000
ROA not before: Wed 11 Sep 2024 16:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214239
IP address blocks: 185.210.54.0/25 maxlen: 25
Validation: Failed, certificate revoked on Tue 17 Sep 2024 14:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:e6:db:6b:a1:f8:f6:31:38:92:18:d7:36:1b:66:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Validity
Not Before: Sep 11 16:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2feefc0da705984fadd4658f288a75a1105f3903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:70:79:1d:a1:4b:86:9a:4d:48:d5:39:cb:88:
8a:cf:ea:c9:b4:ca:78:f9:e0:8f:f9:a0:57:fe:92:
6f:04:d0:94:e0:b9:87:9c:a9:11:ae:e1:7e:e1:cc:
50:52:95:7c:69:a7:a2:df:c5:60:68:7c:b4:0f:46:
7b:4b:18:f0:8e:d1:ce:07:c0:4c:c0:a2:87:1a:bd:
ff:8d:19:42:3f:86:00:72:27:f6:e8:c5:9f:f1:9f:
c4:a2:a9:a5:cb:94:7f:b1:e8:b1:02:96:c3:89:cd:
a2:cc:2a:88:e3:fe:52:70:a2:18:0c:af:7d:dc:51:
ce:3a:83:9e:ac:83:99:46:cf:13:18:3a:18:89:b4:
37:d0:ef:d9:2a:fe:c5:b6:87:b3:50:35:03:f5:ca:
74:30:6d:89:d4:13:fd:12:64:6e:f4:e2:18:46:27:
7d:76:e5:c5:30:8f:e6:89:a5:6f:f0:63:e2:64:b4:
93:b1:e1:ea:33:3e:86:96:f4:c1:b3:b1:ff:db:0c:
d4:2c:64:45:8f:5f:41:70:6b:6d:04:3a:7a:13:ab:
db:4a:c7:cf:81:d7:5d:db:87:e3:1a:f7:af:fe:7d:
30:b8:af:ff:e0:48:07:2a:47:9a:72:d6:62:9b:30:
04:7e:52:f3:b2:5e:cf:75:98:c1:75:5e:ab:97:b4:
69:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EE:FC:0D:A7:05:98:4F:AD:D4:65:8F:28:8A:75:A1:10:5F:39:03
X509v3 Authority Key Identifier:
keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/L-78DacFmE-t1GWPKIp1oRBfOQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.54.0/25
Signature Algorithm: sha256WithRSAEncryption
58:32:04:db:c0:a8:62:2f:53:9c:4b:3e:91:78:74:1b:c9:5b:
9d:93:1b:33:2e:81:29:95:3f:7b:4b:63:0c:5a:42:31:ce:52:
9b:1f:9e:00:1e:bb:6a:0e:69:b5:88:d8:49:ae:74:32:90:9c:
25:c6:e4:77:d7:23:8a:4f:cb:10:e2:e8:c8:8a:d8:08:7d:a9:
7f:c7:c7:aa:7f:f9:ce:ab:45:53:99:94:17:f3:41:93:52:d9:
a5:d8:49:3b:ab:88:b9:02:26:ce:df:13:fb:e5:76:55:c9:20:
b6:d5:fd:c4:ed:e9:d9:a1:3b:b7:47:a9:37:c1:db:62:90:ca:
02:b0:17:61:5d:9b:e4:80:da:9b:12:a1:44:51:47:70:67:68:
ba:c5:9a:1c:26:e1:d3:03:82:49:42:95:1c:ee:32:32:72:a3:
39:29:24:39:42:85:43:10:31:d9:71:a9:5c:35:09:47:40:d0:
93:51:85:f7:01:8c:46:8b:f4:cf:62:c0:ca:6a:fb:bc:6a:ce:
c2:c4:43:ad:14:30:47:cb:e5:45:1b:85:0e:c5:62:34:cd:58:
22:5e:9d:a6:5b:ac:af:e8:31:39:98:9a:cc:ea:b3:a9:91:b3:
ad:78:7b:5c:88:ca:ec:82:d8:79:b7:63:85:47:69:13:5c:c1:
d2:91:cf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:49 2025 by rpki-client