Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/lLVfu1FgFMWCsjOd-2F5inXT1_E.roa
File: lLVfu1FgFMWCsjOd-2F5inXT1_E.roa (raw, json)
Hash identifier: jZPho5tZy/UHZOQh0w98LHL4r4J4KCtP6X/SyP4g90Y=
Subject key identifier: 94:B5:5F:BB:51:60:14:C5:82:B2:33:9D:FB:61:79:8A:75:D3:D7:F1
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 019431634D45FE7151A22393F0014988FEAE
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/lLVfu1FgFMWCsjOd-2F5inXT1_E.roa
Signing time: Sat 04 Jan 2025 12:56:18 +0000
ROA not before: Sat 04 Jan 2025 12:56:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208949
IP address blocks: 45.148.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Jan 2025 21:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:31:63:4d:45:fe:71:51:a2:23:93:f0:01:49:88:fe:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Jan 4 12:56:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94b55fbb516014c582b2339dfb61798a75d3d7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:e1:7f:fe:11:41:60:b7:7b:76:cb:50:54:
cc:e1:0d:5b:0f:7a:0b:20:08:26:a7:ff:5a:b8:b6:
39:4b:22:6a:5d:1d:81:e1:84:04:b5:a9:22:c4:a7:
b2:07:50:17:e2:01:83:32:e7:85:41:7b:5a:e8:1f:
e2:ce:85:79:13:0d:e8:3e:cc:bd:73:e5:40:29:02:
78:6a:9e:c0:ea:b3:f2:42:56:ec:b2:1a:7b:7f:28:
dd:99:71:d2:79:c6:a6:bf:40:48:93:db:18:40:eb:
0d:ba:99:b0:53:cd:89:b5:02:89:6b:ef:7e:78:ba:
86:95:8d:28:e0:dc:cc:f8:d8:b4:0d:ad:5b:25:e5:
40:e6:df:1c:5c:00:88:f1:d5:81:db:45:f3:60:7a:
7b:c3:ba:b2:1e:7e:ca:7f:9b:bb:c5:91:23:e9:5e:
b7:b4:0b:9c:22:4e:1f:fc:ca:7e:94:47:95:4b:b9:
6d:10:a4:97:a1:85:14:1f:52:88:fa:7e:77:40:83:
ad:7e:8c:ee:97:55:3d:06:b1:eb:56:68:d1:68:cf:
fb:6e:31:4c:f6:91:97:ff:d8:a5:0e:45:40:3a:ac:
79:59:a1:37:09:fa:20:2c:ac:e7:08:55:a8:10:b3:
bd:27:c3:47:a8:70:31:c8:b6:c8:be:5e:7a:65:26:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B5:5F:BB:51:60:14:C5:82:B2:33:9D:FB:61:79:8A:75:D3:D7:F1
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/lLVfu1FgFMWCsjOd-2F5inXT1_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.146.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:7e:b1:19:b9:7f:b6:68:9e:24:1a:f5:ae:0a:26:80:42:cb:
39:73:e2:46:76:75:e4:3c:8e:12:8b:ae:1f:4c:65:4a:eb:25:
3b:bd:39:b7:78:40:98:fc:bd:92:62:4e:9b:06:b2:b1:84:fe:
0c:48:5a:c2:73:4d:93:2a:3a:ff:6a:ee:80:b4:f7:1d:d5:a4:
7c:98:74:d2:69:32:71:e6:80:af:0a:2b:24:13:2c:92:ed:4d:
51:3c:93:a4:c1:81:90:3f:a0:f2:c8:a8:70:e1:07:25:1e:22:
f7:2b:ec:8c:f9:06:9e:6f:19:5e:7c:f9:a4:0c:6e:bf:d8:ee:
71:a7:a0:69:9d:16:18:2b:71:b0:86:e8:14:c6:93:21:ab:81:
6d:91:96:e6:c7:4e:c3:cd:65:9f:fe:73:f5:88:66:65:f8:a8:
8e:91:a2:19:b9:25:48:5f:11:7c:ee:b6:cc:87:45:79:b4:8b:
4e:3c:f5:00:15:51:8c:ef:fb:7c:54:66:be:78:92:f1:df:9e:
88:01:0e:aa:9f:29:da:ae:db:6b:48:27:14:d2:f9:a8:15:f9:
dc:b3:6c:95:5c:6e:f5:a0:09:72:72:a0:bc:b7:c3:7d:fd:1a:
ae:62:ca:ed:aa:0a:e7:4d:90:1b:4e:08:b5:d4:0a:ed:82:61:
a1:a2:5b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:47:56 2025 by rpki-client