Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/LX1xewrDRYmNkRd_zmjyKbjGBSQ.roa
File: LX1xewrDRYmNkRd_zmjyKbjGBSQ.roa (raw, json)
Hash identifier: oTN9mdUblZTDh62TXTCRuh5/p56Dsq7Hk0Ffam60yfg=
Subject key identifier: 2D:7D:71:7B:0A:C3:45:89:8D:91:17:7F:CE:68:F2:29:B8:C6:05:24
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 0193D487B07AFF6AD615B30C56117698FF90
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/LX1xewrDRYmNkRd_zmjyKbjGBSQ.roa
Signing time: Tue 17 Dec 2024 12:11:22 +0000
ROA not before: Tue 17 Dec 2024 12:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12794
IP address blocks: 217.169.192.0/20 maxlen: 24
217.169.192.0/21 maxlen: 21
217.169.192.0/22 maxlen: 22
217.169.192.0/24 maxlen: 24
217.169.193.0/24 maxlen: 24
217.169.194.0/24 maxlen: 24
217.169.195.0/24 maxlen: 24
217.169.196.0/24 maxlen: 24
217.169.197.0/24 maxlen: 24
217.169.198.0/24 maxlen: 24
217.169.199.0/24 maxlen: 24
217.169.200.0/24 maxlen: 24
217.169.201.0/24 maxlen: 24
217.169.203.0/24 maxlen: 24
217.169.204.0/24 maxlen: 24
217.169.205.0/24 maxlen: 24
217.169.206.0/24 maxlen: 24
217.169.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:87:b0:7a:ff:6a:d6:15:b3:0c:56:11:76:98:ff:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Dec 17 12:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d7d717b0ac345898d91177fce68f229b8c60524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:b8:4c:46:95:fe:a5:65:77:86:9e:82:5b:
9f:e9:b6:6e:d7:82:93:e7:a2:23:a6:a8:d0:d9:23:
9a:e0:05:c1:e4:5d:f8:69:de:a6:62:35:6c:14:a7:
a1:dc:e8:32:0f:d6:e5:5b:bf:28:0b:0b:06:b9:03:
f5:b3:fa:a3:7c:bc:be:42:89:f2:a4:8b:3e:74:c8:
4e:cf:6c:b9:2b:99:7c:a9:83:10:49:4a:83:9c:32:
82:96:d3:4c:89:5b:a4:e8:32:99:c7:bc:ad:9a:8a:
31:f0:27:aa:21:8a:f8:a2:81:39:1d:cb:2d:31:fb:
fd:49:f2:0e:05:87:64:1d:d6:6a:22:6a:69:01:6c:
44:f2:6f:18:14:af:f2:b3:e3:aa:f4:d8:f8:e6:69:
d0:15:40:8a:5e:af:2e:91:59:3a:a7:4e:10:93:cb:
41:b1:c8:2a:39:5c:3f:ce:91:30:39:57:50:31:09:
d8:cf:fe:29:91:6b:b3:92:6a:f3:fd:77:26:0c:fd:
2a:e2:02:f0:4a:12:99:d2:bb:65:4e:fc:02:d5:2b:
9a:76:5d:b2:5e:fa:56:1e:cd:28:1c:33:d5:1b:8a:
1a:0a:8f:56:c3:11:12:56:ea:7b:4f:38:cb:6f:55:
b9:d3:a4:a0:b4:1f:0f:a2:29:84:f5:6c:fa:39:77:
c7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7D:71:7B:0A:C3:45:89:8D:91:17:7F:CE:68:F2:29:B8:C6:05:24
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/LX1xewrDRYmNkRd_zmjyKbjGBSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.192.0/20
Signature Algorithm: sha256WithRSAEncryption
05:29:b0:f5:cd:93:15:1f:11:eb:21:c7:06:93:22:03:61:4e:
ff:31:55:78:e9:18:24:5c:ec:d4:58:85:cf:81:2d:a3:b6:37:
4f:0a:d6:23:2b:90:9c:69:be:4d:d5:45:17:de:64:87:ee:b3:
c9:3c:3b:66:6c:5d:93:74:ba:71:ef:61:27:53:f7:02:ee:2d:
9d:7e:41:0c:17:bd:ba:11:0a:59:c7:1d:6d:f7:bf:23:6d:e7:
1f:bb:3b:f7:28:2a:2e:f5:0a:e1:21:4c:ea:63:d5:a3:b6:2c:
a2:9b:a8:9a:14:29:69:d3:be:10:68:91:4b:fe:d3:27:10:92:
93:32:92:c5:5e:11:99:b8:cc:53:1c:a2:f8:16:b4:19:72:1d:
be:fe:df:bd:d4:9a:4e:8f:75:51:f9:17:cc:78:ba:3a:4a:1d:
2b:63:4a:c0:0f:f2:8e:9b:25:26:aa:ab:df:58:d6:bb:38:19:
73:07:86:c4:4c:8b:0e:98:d3:0f:4f:ba:21:37:6a:52:55:42:
4e:87:ec:e5:84:00:8a:40:fe:fa:43:04:60:c5:03:a2:33:a9:
56:5c:c6:b8:89:57:d5:86:cf:e3:77:a1:59:87:ba:7f:b3:1b:
49:ce:2a:98:65:33:1e:38:ec:c4:48:9b:5b:67:0d:8a:bf:3d:
9b:97:1c:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPUh7B6/2rWFbMMVhF2mP+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMGY0MTNmYjBhZjBiZDhmZTEzMDgyMGQzMDQ5ZDBlNzFl
ZDRiYjAwHhcNMjQxMjE3MTIxMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDdkNzE3YjBhYzM0NTg5OGQ5MTE3N2ZjZTY4ZjIyOWI4YzYwNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfy4TEaV/qVld4aegluf6bZu14KT
56IjpqjQ2SOa4AXB5F34ad6mYjVsFKeh3OgyD9blW78oCwsGuQP1s/qjfLy+Qony
pIs+dMhOz2y5K5l8qYMQSUqDnDKCltNMiVuk6DKZx7ytmoox8CeqIYr4ooE5Hcst
Mfv9SfIOBYdkHdZqImppAWxE8m8YFK/ys+Oq9Nj45mnQFUCKXq8ukVk6p04Qk8tB
scgqOVw/zpEwOVdQMQnYz/4pkWuzkmrz/XcmDP0q4gLwShKZ0rtlTvwC1Suadl2y
XvpWHs0oHDPVG4oaCo9WwxESVup7TzjLb1W506SgtB8PoimE9Wz6OXfHCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC19cXsKw0WJjZEXf85o8im4xgUkMB8GA1UdIwQY
MBaAFCIPQT+wrwvY/hMIINMEnQ5x7UuwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjM1N2QtYjE3MC00MGE1LWE2Njkt
ODJlYmEwY2IzYjBkLzEvTFgxeGV3ckRSWW1Oa1JkX3ptanlLYmpHQlNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYjM1N2QtYjE3MC00MGE1LWE2NjktODJlYmEwY2IzYjBk
LzEvSWc5QlA3Q3ZDOWotRXdnZzB3U2REbkh0UzdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2anAMA0G
CSqGSIb3DQEBCwUAA4IBAQAFKbD1zZMVHxHrIccGkyIDYU7/MVV46RgkXOzUWIXP
gS2jtjdPCtYjK5Ccab5N1UUX3mSH7rPJPDtmbF2TdLpx72EnU/cC7i2dfkEMF726
EQpZxx1t978jbecfuzv3KCou9QrhIUzqY9Wjtiyim6iaFClp074QaJFL/tMnEJKT
MpLFXhGZuMxTHKL4FrQZch2+/t+91JpOj3VR+RfMeLo6Sh0rY0rAD/KOmyUmqqvf
WNa7OBlzB4bETIsOmNMPT7ohN2pSVUJOh+zlhACKQP76QwRgxQOiM6lWXMa4iVfV
hs/jd6FZh7p/sxtJziqYZTMeOOzESJtbZw2Kvz2blxx2
-----END CERTIFICATE-----
Generated at Mon Apr 14 21:11:44 2025 by rpki-client