Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/LGAoZjYbvaqlJEIupRQLp0smGGU.roa
File: LGAoZjYbvaqlJEIupRQLp0smGGU.roa (raw, json)
Hash identifier: ThZT8LycI2iD7tGrYFMKEALAbG1Hzmar6aKPWS/9oHs=
Subject key identifier: 2C:60:28:66:36:1B:BD:AA:A5:24:42:2E:A5:14:0B:A7:4B:26:18:65
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0193C0A29CBC4803B9D500480212E41A96B8
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/LGAoZjYbvaqlJEIupRQLp0smGGU.roa
Signing time: Fri 13 Dec 2024 15:28:22 +0000
ROA not before: Fri 13 Dec 2024 15:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215664
IP address blocks: 5.182.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:a2:9c:bc:48:03:b9:d5:00:48:02:12:e4:1a:96:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Dec 13 15:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c602866361bbdaaa524422ea5140ba74b261865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:a1:5a:bb:bb:64:e1:3c:fa:1c:85:b6:1c:
5e:94:57:c8:0a:60:72:ff:56:7f:f2:98:ad:62:eb:
f0:8c:90:6a:55:a8:75:37:0e:93:82:37:a6:8a:c4:
12:a7:a6:d4:c3:3e:79:06:d3:dc:21:49:e3:62:a7:
17:8a:5d:e2:ef:c6:64:6c:83:e8:4c:a5:00:e9:db:
d5:cc:9e:3b:10:8b:43:0b:77:5c:0d:01:b2:49:c6:
1d:b4:d8:ea:8b:e3:29:6d:2f:d8:cb:12:cb:b9:d1:
b1:07:52:4f:f9:e4:85:b5:51:ef:ef:df:45:2e:92:
2f:c6:b5:7b:ff:a2:5c:bb:7f:fa:98:0c:a4:d6:1a:
14:c6:fe:ee:64:63:ab:1f:c0:9e:70:79:58:0c:64:
7b:16:7b:4a:fe:d7:54:0a:3b:e5:09:87:8c:05:d9:
6b:15:80:ae:31:53:f6:15:3d:bb:4e:af:28:fa:6e:
75:cb:e8:c5:a1:e4:46:1c:ec:4d:29:51:75:12:a0:
c1:70:c1:a2:1c:ee:21:4c:67:36:42:4d:66:5b:07:
64:0c:91:d3:6f:9f:21:d1:72:45:d3:8c:1f:61:cf:
7d:b1:c3:5f:3e:75:57:64:2e:88:18:65:b3:51:21:
73:71:d0:ce:5b:8d:8b:b7:9b:e3:0d:ab:e1:13:bd:
f6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:60:28:66:36:1B:BD:AA:A5:24:42:2E:A5:14:0B:A7:4B:26:18:65
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/LGAoZjYbvaqlJEIupRQLp0smGGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.48.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:14:2a:57:44:31:15:09:c6:6f:58:84:b9:11:fe:aa:06:64:
ec:03:86:3d:09:72:46:24:98:b6:7b:7d:95:29:8a:a4:d8:f1:
26:3b:89:1d:a1:16:cd:fa:1d:a7:88:54:52:ad:d1:f8:59:4c:
99:6f:42:11:0b:8d:37:44:97:e2:6f:b8:30:71:5d:6c:ed:e2:
b2:23:32:e1:52:c0:06:ac:66:fa:0c:d2:f3:30:5d:79:7d:8f:
80:3f:11:db:5f:9b:4d:c6:fb:90:96:0b:96:00:39:e6:47:6a:
51:8f:60:9c:e2:f7:0a:7b:28:bd:51:cf:97:1d:37:04:f6:13:
0d:a0:42:f8:40:2b:fa:7a:60:10:2d:48:8e:d1:e3:29:14:ae:
fe:81:05:85:7c:da:e9:be:f5:cf:e8:06:9b:f8:17:15:2e:f1:
da:a8:02:9a:0d:ea:41:f7:ae:8d:fa:30:7f:cd:01:f7:70:80:
94:c8:9d:e1:34:84:b4:74:e0:bf:e3:2d:a5:a7:21:77:c6:c0:
d5:19:e8:41:0d:5e:95:f7:95:5c:df:4f:1f:1e:b0:e0:31:76:
26:56:26:36:0e:19:58:93:90:5c:86:c5:77:3c:63:4e:2b:a0:
a2:db:6a:2a:97:1d:56:2b:cc:e5:2e:55:3c:b4:3d:5d:50:e4:
24:fa:b8:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPAopy8SAO51QBIAhLkGpa4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjQxMjEzMTUyODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzYwMjg2NjM2MWJiZGFhYTUyNDQyMmVhNTE0MGJhNzRiMjYxODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx+hWru7ZOE8+hyFthxelFfICmBy
/1Z/8pitYuvwjJBqVah1Nw6TgjemisQSp6bUwz55BtPcIUnjYqcXil3i78ZkbIPo
TKUA6dvVzJ47EItDC3dcDQGyScYdtNjqi+MpbS/YyxLLudGxB1JP+eSFtVHv799F
LpIvxrV7/6Jcu3/6mAyk1hoUxv7uZGOrH8CecHlYDGR7FntK/tdUCjvlCYeMBdlr
FYCuMVP2FT27Tq8o+m51y+jFoeRGHOxNKVF1EqDBcMGiHO4hTGc2Qk1mWwdkDJHT
b58h0XJF04wfYc99scNfPnVXZC6IGGWzUSFzcdDOW42Lt5vjDavhE732sQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCxgKGY2G72qpSRCLqUUC6dLJhhlMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvTEdBb1pqWWJ2YXFsSkVJdXBSUUxwMHNtR0dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbYwMA0G
CSqGSIb3DQEBCwUAA4IBAQDZFCpXRDEVCcZvWIS5Ef6qBmTsA4Y9CXJGJJi2e32V
KYqk2PEmO4kdoRbN+h2niFRSrdH4WUyZb0IRC403RJfib7gwcV1s7eKyIzLhUsAG
rGb6DNLzMF15fY+APxHbX5tNxvuQlguWADnmR2pRj2Cc4vcKeyi9Uc+XHTcE9hMN
oEL4QCv6emAQLUiO0eMpFK7+gQWFfNrpvvXP6Aab+BcVLvHaqAKaDepB966N+jB/
zQH3cICUyJ3hNIS0dOC/4y2lpyF3xsDVGehBDV6V95Vc308fHrDgMXYmViY2DhlY
k5BchsV3PGNOK6Ci22oqlx1WK8zlLlU8tD1dUOQk+rjN
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:05:56 2025 by rpki-client