Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/LD2bXclhYfZ9LWGtqvTLRpSQuWI.roa
File: LD2bXclhYfZ9LWGtqvTLRpSQuWI.roa (raw, json)
Hash identifier: s8nz/ajnkV76RqHGpkb++Cw68M9ChD5eYemPX0ouWxA=
Subject key identifier: 2C:3D:9B:5D:C9:61:61:F6:7D:2D:61:AD:AA:F4:CB:46:94:90:B9:62
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018CCA2BB615C933FF31935FD6AB14372177
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/LD2bXclhYfZ9LWGtqvTLRpSQuWI.roa
Signing time: Tue 02 Jan 2024 12:35:11 +0000
ROA not before: Tue 02 Jan 2024 12:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25506
IP address blocks: 213.189.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b6:15:c9:33:ff:31:93:5f:d6:ab:14:37:21:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 12:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c3d9b5dc96161f67d2d61adaaf4cb469490b962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e8:25:6f:87:d0:90:a7:8b:98:88:33:8a:88:
72:b5:80:d3:1c:d3:94:19:f7:db:99:d5:36:a6:c9:
9f:4f:9e:12:fd:04:05:dc:f6:0e:cd:22:71:64:7a:
0a:53:ba:77:08:71:7a:d6:94:9f:92:1b:04:b9:47:
5e:6a:c2:f9:29:d1:58:95:ed:fd:0b:ef:40:4d:a0:
16:ea:7f:18:1d:f5:0b:87:a7:5e:58:d7:a7:da:00:
da:76:30:16:91:b9:9e:80:6f:50:0c:82:86:ac:27:
99:e0:fa:40:5d:ca:65:6a:59:ce:17:b2:09:23:85:
01:52:fd:58:38:31:12:9e:17:bf:eb:76:05:7c:11:
90:f0:68:f9:d4:24:6c:cf:b0:ee:b7:c7:cd:bd:e0:
00:7a:94:d4:d9:d9:65:2f:30:0b:d1:31:17:14:b9:
74:5d:8e:f4:0b:39:b4:6b:a9:33:cf:72:cb:0c:42:
96:af:a4:42:25:ed:76:ba:33:64:11:97:6b:0a:77:
26:f8:8d:90:ae:ec:ba:51:d3:67:8e:8a:f4:00:e4:
bc:16:f9:ef:e4:aa:77:0d:b4:b1:90:04:1c:0d:cb:
af:c9:42:45:59:a2:07:cd:8e:4d:78:62:26:31:19:
14:fe:2c:a8:4b:d5:62:53:84:6f:c6:35:73:16:b2:
2c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3D:9B:5D:C9:61:61:F6:7D:2D:61:AD:AA:F4:CB:46:94:90:B9:62
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/LD2bXclhYfZ9LWGtqvTLRpSQuWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:7a:94:86:b7:1d:ae:47:77:94:f7:cf:f6:e4:c1:57:e1:a2:
64:82:4c:cc:4a:9b:07:16:11:af:90:fc:87:6e:22:a6:51:b9:
fa:25:19:0b:5f:5b:8c:a6:ed:aa:ba:4a:0a:92:ca:48:ae:ac:
46:49:b7:ff:86:86:ce:75:f7:5c:7b:28:4b:04:9e:8c:ae:5f:
01:df:20:1d:12:ac:88:12:fa:ea:e9:12:88:a4:b1:7e:ef:a2:
e9:ee:26:37:8a:6f:85:1f:55:51:8b:72:e2:ee:e7:e5:e3:8d:
40:6b:f3:18:f5:95:75:c4:f7:dd:f7:04:2c:f8:fb:33:82:d5:
77:84:f7:77:1f:cd:a9:fa:b2:23:89:54:25:49:90:81:fb:c4:
a7:63:21:31:bf:0a:c0:ba:09:ba:1e:be:be:00:5b:a8:e7:66:
3c:b0:5d:28:f7:fa:d9:9b:30:d8:d8:87:f8:4b:6a:17:44:81:
be:f1:c4:fc:c1:57:65:9d:ba:ea:c9:72:6d:ee:a4:7b:f7:df:
9d:34:be:fe:3b:88:5e:65:f3:f1:f3:e9:24:1f:3e:59:e4:f0:
c5:38:a3:0f:35:84:8c:8d:42:41:a1:0e:e1:4f:6e:9e:d3:fd:
2e:06:2a:65:9e:26:3b:e2:9f:59:f1:4f:61:10:99:be:a5:11:
19:dd:2f:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKK7YVyTP/MZNf1qsUNyF3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz
MzBjNWIwHhcNMjQwMTAyMTIzNTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzNkOWI1ZGM5NjE2MWY2N2QyZDYxYWRhYWY0Y2I0Njk0OTBiOTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieglb4fQkKeLmIgziohytYDTHNOU
GffbmdU2psmfT54S/QQF3PYOzSJxZHoKU7p3CHF61pSfkhsEuUdeasL5KdFYle39
C+9ATaAW6n8YHfULh6deWNen2gDadjAWkbmegG9QDIKGrCeZ4PpAXcplalnOF7IJ
I4UBUv1YODESnhe/63YFfBGQ8Gj51CRsz7Dut8fNveAAepTU2dllLzAL0TEXFLl0
XY70Czm0a6kzz3LLDEKWr6RCJe12ujNkEZdrCncm+I2Qruy6UdNnjor0AOS8Fvnv
5Kp3DbSxkAQcDcuvyUJFWaIHzY5NeGImMRkU/iyoS9ViU4RvxjVzFrIsrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCw9m13JYWH2fS1hrar0y0aUkLliMB8GA1UdIwQY
MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt
NWQ2NjVlOTk4ZjZhLzEvTEQyYlhjbGhZZlo5TFdHdHF2VExScFNRdVdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh
LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1b0uMA0G
CSqGSIb3DQEBCwUAA4IBAQCMepSGtx2uR3eU98/25MFX4aJkgkzMSpsHFhGvkPyH
biKmUbn6JRkLX1uMpu2qukoKkspIrqxGSbf/hobOdfdceyhLBJ6Mrl8B3yAdEqyI
Evrq6RKIpLF+76Lp7iY3im+FH1VRi3Li7ufl441Aa/MY9ZV1xPfd9wQs+PszgtV3
hPd3H82p+rIjiVQlSZCB+8SnYyExvwrAugm6Hr6+AFuo52Y8sF0o9/rZmzDY2If4
S2oXRIG+8cT8wVdlnbrqyXJt7qR799+dNL7+O4heZfPx8+kkHz5Z5PDFOKMPNYSM
jUJBoQ7hT26e0/0uBiplniY74p9Z8U9hEJm+pREZ3S/o
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:18 2025 by rpki-client