Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LohrkElwQGPJiG2hdCydeDt7A3E.roa
File: LohrkElwQGPJiG2hdCydeDt7A3E.roa (raw, json)
Hash identifier: zO4z8PJPZZJOpiyiD5n2yv1/bFXnl4MdeDexgo+mGkI=
Subject key identifier: 2E:88:6B:90:49:70:40:63:C9:88:6D:A1:74:2C:9D:78:3B:7B:03:71
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0193AFBAEAE8876CE81AF04B82B7DF943BB8
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LohrkElwQGPJiG2hdCydeDt7A3E.roa
Signing time: Tue 10 Dec 2024 08:41:22 +0000
ROA not before: Tue 10 Dec 2024 08:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39312
IP address blocks: 80.96.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:af:ba:ea:e8:87:6c:e8:1a:f0:4b:82:b7:df:94:3b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Dec 10 08:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e886b9049704063c9886da1742c9d783b7b0371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6d:cc:96:04:a0:44:25:c2:18:1e:be:e9:ba:
3d:f4:b8:44:65:a8:ec:1c:d3:81:f4:a5:2c:ca:e8:
59:3f:85:ed:57:ea:6e:db:cd:9f:68:98:3c:5d:fc:
38:c5:30:e3:32:92:8e:52:ca:ee:4b:43:2b:5f:f7:
84:bb:41:6e:77:94:f3:aa:82:72:09:c1:33:29:f3:
8f:d2:fe:9d:e2:50:ae:3a:9b:2b:33:25:46:64:f2:
52:af:09:68:5b:9b:68:ce:3f:73:ea:e7:eb:65:f9:
fb:4f:94:8d:9d:1b:51:06:c6:01:9a:87:00:36:28:
7a:f3:25:c4:d4:78:76:35:60:f1:69:20:d6:2d:dc:
91:b3:cf:ab:b2:57:19:a0:c8:18:80:a1:44:8c:85:
c3:d0:dc:d7:a3:12:25:2d:ad:5d:d4:1b:2c:29:22:
f9:0b:44:75:a8:95:c5:d6:af:80:21:f5:d2:15:d4:
33:f7:28:3c:01:89:70:91:9d:46:5c:13:e0:cd:5a:
d6:9c:13:97:26:34:a9:c8:87:c5:b8:e6:63:e5:30:
6e:0f:87:32:1f:83:d6:b3:49:36:c4:44:c2:da:48:
96:47:32:73:05:08:a5:ac:d4:0f:61:0e:b6:c8:8b:
8b:a4:41:0d:9c:5b:f9:a4:97:4b:e4:08:bd:56:59:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:88:6B:90:49:70:40:63:C9:88:6D:A1:74:2C:9D:78:3B:7B:03:71
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LohrkElwQGPJiG2hdCydeDt7A3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.82.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ef:60:62:f2:3e:29:78:91:6b:c0:06:c7:af:68:37:76:b8:
3d:20:a6:f8:98:5c:cd:4d:85:48:86:c4:d3:68:ac:10:47:ff:
0c:52:2d:30:49:36:6a:3d:56:09:8f:b3:50:2b:df:26:18:d4:
18:89:10:c5:24:e3:e7:b8:46:d3:19:c6:97:b2:b5:ce:3b:8c:
f7:38:29:41:6e:79:58:27:b0:dd:c6:4f:ba:eb:a8:c7:89:52:
e5:2f:8e:ec:c4:b2:1a:17:0d:db:a1:87:5c:b1:f4:6c:1a:95:
df:0d:27:24:34:2a:ea:f0:26:c3:66:3a:f1:90:92:c2:03:80:
19:8c:61:81:68:73:03:dd:ab:b6:50:fd:80:36:4d:ed:28:8f:
fb:46:2b:a0:82:ec:87:21:56:b1:a6:f3:6e:09:8f:a2:ee:c0:
33:00:e3:a1:50:a8:8c:d5:d9:76:19:09:a9:1f:ee:7a:7d:2a:
47:d4:6e:ee:fe:ed:e3:ca:73:21:62:77:23:ec:35:00:c0:6a:
fd:8c:a0:8c:40:a8:a6:e1:4c:fb:59:aa:db:3e:91:0c:0a:7e:
c1:11:1e:31:50:a9:ec:30:ed:c4:b1:76:79:7d:cd:49:2f:62:
81:b9:84:b1:66:f7:53:be:a4:6c:10:7b:05:a8:ce:10:0e:f1:
7d:7d:4a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:24 2025 by rpki-client