Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LN4PFAcLUpbnxUdz5wJuWXw4r_E.roa
File: LN4PFAcLUpbnxUdz5wJuWXw4r_E.roa (raw, json)
Hash identifier: Lty/HL2TrYnmvCee14dt2w9e0FsF/pPHJVpYXivVV6I=
Subject key identifier: 2C:DE:0F:14:07:0B:52:96:E7:C5:47:73:E7:02:6E:59:7C:38:AF:F1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01943C2D72DAC83914C4E47D5A554CF768B3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LN4PFAcLUpbnxUdz5wJuWXw4r_E.roa
Signing time: Mon 06 Jan 2025 15:13:19 +0000
ROA not before: Mon 06 Jan 2025 15:13:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31530
IP address blocks: 5.83.156.0/24 maxlen: 24
5.231.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 10:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3c:2d:72:da:c8:39:14:c4:e4:7d:5a:55:4c:f7:68:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 6 15:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cde0f14070b5296e7c54773e7026e597c38aff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:2d:f5:bb:09:15:d9:31:a4:c5:17:46:57:
c9:fe:35:f3:ff:8a:dc:43:27:93:46:c2:3f:a8:b7:
f6:32:06:52:40:40:ef:06:aa:eb:17:86:5b:de:7e:
cf:e3:e5:b5:67:bd:14:f8:5a:a9:58:51:37:eb:30:
44:f3:ab:af:c7:32:52:0f:75:54:1e:76:89:7a:64:
03:96:4c:65:e1:35:85:f1:e9:ba:4a:de:cb:55:ba:
bd:b0:02:9c:bc:f8:cc:57:59:3e:84:a7:33:85:61:
80:0c:0d:2c:ac:45:8c:e5:27:e1:07:ff:af:a7:5b:
93:15:6c:09:6b:87:d9:9f:ef:3e:02:8a:7b:c2:61:
2f:e5:ee:12:cb:ed:f8:2c:63:db:50:5a:b5:4b:7c:
7d:27:81:3a:84:62:56:92:45:cc:71:db:27:db:2b:
eb:f8:92:3e:bc:5f:84:c6:5a:8e:27:60:d2:24:8a:
9a:5f:5e:3a:af:58:ae:fb:12:e0:71:44:68:d8:6a:
1a:dd:41:4f:e4:80:08:0d:d5:b8:cb:5a:6a:bd:89:
37:3b:72:1d:22:b5:4e:39:83:c5:b7:d3:ec:60:09:
86:cd:e9:b4:b7:2c:73:7c:c2:e9:7a:34:14:a5:93:
eb:e5:b0:05:4e:97:33:b4:c9:08:81:8f:9b:50:2d:
2e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DE:0F:14:07:0B:52:96:E7:C5:47:73:E7:02:6E:59:7C:38:AF:F1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LN4PFAcLUpbnxUdz5wJuWXw4r_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.156.0/24
5.231.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:4e:cb:68:4e:13:6f:19:f6:19:28:0f:ae:89:e1:ce:aa:a6:
74:29:7d:82:e2:84:cb:4d:5a:64:85:92:4d:9b:bb:7d:35:b3:
38:5d:31:44:23:7a:52:89:f9:82:dc:cb:82:6b:68:33:ea:cd:
06:a1:55:49:d4:cc:76:7c:96:31:11:62:d4:90:40:98:ef:c2:
ef:7c:46:29:a2:31:54:0c:9d:24:3d:1b:61:e5:88:2a:78:f5:
5d:f1:ac:a9:ad:6c:6c:c1:e0:c2:e8:41:c0:5d:29:46:e7:48:
1c:91:a5:75:bf:52:40:15:94:2c:59:32:99:1d:a2:89:af:10:
5c:97:7d:16:26:99:a0:ca:c8:55:b9:8c:07:af:5d:b3:4b:f2:
d0:d6:76:fb:3e:c0:37:61:54:45:b7:27:b8:4d:48:b1:fc:93:
22:22:40:3e:1c:3c:1c:1e:1b:b0:0d:f0:65:78:30:ce:42:f6:
b3:a0:ad:71:9f:32:74:ed:0d:27:52:48:aa:1c:f3:ae:6d:17:
72:b1:d7:bb:b6:bc:33:94:67:a7:1b:1e:a1:60:fb:4d:61:0e:
e5:ff:d3:b1:a5:2f:d0:37:be:0a:74:19:b4:f3:fe:2f:21:77:
ea:0e:fd:3d:87:67:97:a6:e5:47:a5:23:ed:c8:7b:25:dc:45:
07:66:7e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:22:46 2025 by rpki-client