Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/LIgmne7s4GwgYepFvJctTIvc9P0.roa
File: LIgmne7s4GwgYepFvJctTIvc9P0.roa (raw, json)
Hash identifier: Cqm3HAKtis65YuvSLlTjOaYg9lyJ0TNa2BJgWMVROLw=
Subject key identifier: 2C:88:26:9D:EE:EC:E0:6C:20:61:EA:45:BC:97:2D:4C:8B:DC:F4:FD
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0193861CBB3885BE82084B3F03495F7D73F4
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/LIgmne7s4GwgYepFvJctTIvc9P0.roa
Signing time: Mon 02 Dec 2024 06:44:10 +0000
ROA not before: Mon 02 Dec 2024 06:44:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45054
IP address blocks: 31.184.228.0/23 maxlen: 24
45.159.200.0/22 maxlen: 22
46.161.16.0/22 maxlen: 22
46.161.42.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:1c:bb:38:85:be:82:08:4b:3f:03:49:5f:7d:73:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Dec 2 06:44:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c88269deeece06c2061ea45bc972d4c8bdcf4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:76:37:c9:4e:63:b6:73:f9:50:48:ca:64:5b:
66:04:e1:28:15:c0:1e:97:b3:0a:48:4d:d2:41:b8:
e8:79:b6:8b:86:2f:08:3b:c5:30:03:09:71:c6:c2:
0d:80:0e:de:43:1b:e5:f6:0f:fb:03:a9:6c:bb:f3:
14:f5:94:38:ea:29:48:c9:0f:39:9c:85:c7:5e:c7:
73:2a:8a:4b:60:0a:6f:bf:7e:09:da:63:91:83:59:
37:8c:44:d0:63:ba:3f:50:d1:8b:e1:fb:94:d8:f3:
ea:ce:fc:1b:15:58:c3:d0:7c:e0:f1:48:92:64:2d:
4a:27:93:b3:56:64:75:46:52:7c:4d:86:f3:4a:53:
32:8a:a3:4c:e1:7f:40:9b:58:ba:27:a9:af:7a:25:
f3:f1:58:a4:3f:aa:77:36:04:9f:f1:92:03:8d:dd:
87:b7:5c:17:14:84:b6:46:f6:95:a2:bb:33:d9:c0:
5c:3a:3b:31:7c:75:b0:53:c1:40:b2:af:71:f9:f7:
36:df:11:76:5f:89:6a:00:3f:90:d2:a2:26:97:42:
bf:f6:47:4a:9c:a0:bf:69:3f:28:c9:e6:dd:f7:8a:
7c:60:6b:00:8f:d5:1e:1a:e5:74:73:21:cb:23:a9:
4a:47:46:61:f9:c9:57:80:b3:51:f8:90:82:90:d0:
18:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:88:26:9D:EE:EC:E0:6C:20:61:EA:45:BC:97:2D:4C:8B:DC:F4:FD
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/LIgmne7s4GwgYepFvJctTIvc9P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.228.0/23
45.159.200.0/22
46.161.16.0/22
46.161.42.0/23
Signature Algorithm: sha256WithRSAEncryption
32:b3:01:fe:44:e3:0e:f2:b4:8e:ec:b3:9b:2c:e9:ff:7c:06:
b4:93:1d:34:26:de:7b:0c:bc:fe:28:26:b5:eb:62:ae:7a:ca:
11:13:c0:b5:8a:8e:97:7c:60:bb:75:30:ff:b7:06:c8:6e:d0:
fe:37:52:22:f1:7f:ea:3b:ce:8b:fd:b8:25:09:6d:57:cf:d4:
3f:73:c7:95:a6:88:89:d6:39:09:0c:24:8e:23:e2:bb:2e:32:
82:41:60:61:85:1d:9a:a0:f4:ab:bd:c3:2b:bd:09:f3:e3:5b:
56:b1:f0:2f:51:0c:4c:08:9c:a3:34:84:a2:72:5d:5e:22:cd:
2c:d0:4c:2c:71:4d:e6:88:b4:75:37:54:99:86:8b:05:3e:5c:
72:79:2c:50:90:c0:79:8b:ea:5f:77:54:2d:59:3b:82:d3:59:
98:79:aa:e6:24:5f:cc:dd:6d:2e:34:e9:09:55:d2:61:d6:23:
cf:95:ed:36:e1:77:be:5c:26:f0:ef:7a:46:5b:6b:ca:b3:6b:
b6:6d:a1:93:6d:47:89:aa:e5:a6:5b:23:ed:f7:06:14:8d:a2:
9e:ca:d4:c8:6c:30:df:2f:a4:96:ab:d8:54:0f:8e:dd:ad:1f:
29:28:bd:5b:e5:2b:3e:2e:db:6f:78:89:d1:c8:7d:ce:8f:64:
e3:6e:6f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:01:00 2025 by rpki-client