Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LTEdiPOzFoZsVluG2w9jdjfnF5M.roa
File: LTEdiPOzFoZsVluG2w9jdjfnF5M.roa (raw, json)
Hash identifier: KkcKj8CtoniEPJQhgL/8Kg5lLLL/y730h1htLNRhBEU=
Subject key identifier: 2D:31:1D:88:F3:B3:16:86:6C:56:5B:86:DB:0F:63:76:37:E7:17:93
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0193F81E2695F4263D04FAA031043AFC99F4
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LTEdiPOzFoZsVluG2w9jdjfnF5M.roa
Signing time: Tue 24 Dec 2024 10:02:25 +0000
ROA not before: Tue 24 Dec 2024 10:02:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.45.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Dec 2024 09:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:1e:26:95:f4:26:3d:04:fa:a0:31:04:3a:fc:99:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Dec 24 10:02:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d311d88f3b316866c565b86db0f637637e71793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:21:90:88:19:08:a3:dc:62:fa:3a:59:31:
67:79:87:15:53:40:a5:33:e7:5d:05:65:ce:47:50:
2a:7b:de:87:db:d5:91:02:3c:9e:23:59:b8:86:7f:
8a:99:4a:24:fc:63:89:a5:50:2b:f8:80:f1:bc:0d:
7e:c4:ad:b5:61:75:f6:7b:70:7d:d0:94:cd:2c:0b:
54:3e:bd:60:1a:90:b2:66:aa:2e:cd:4b:30:7f:4e:
da:5e:c5:1f:71:ab:40:3e:ca:9a:9c:ab:ff:1b:43:
cd:d0:f4:fb:51:3b:3f:77:af:ad:0b:8b:7e:2b:7b:
24:1a:4d:dd:3d:42:8e:a3:38:69:10:3f:09:4e:76:
c8:a3:b8:b9:4f:ab:2d:fe:d9:95:55:c5:04:43:1c:
bb:32:92:52:41:d7:60:95:05:26:f1:16:90:dc:52:
49:45:ec:f2:0f:02:5d:0e:af:1b:54:91:f1:6a:47:
e9:c5:46:50:3c:15:1a:51:d9:35:ea:0d:1f:b7:64:
aa:37:ce:46:24:0f:f0:c3:5d:7b:f4:21:36:e2:8a:
2c:e8:17:55:14:41:f1:43:48:a1:00:41:d7:de:d6:
9d:d2:0b:6f:8e:5c:ee:a0:54:86:8d:94:27:0f:8c:
23:09:8c:42:56:c4:62:60:8d:88:d3:1b:9f:fa:42:
0b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:31:1D:88:F3:B3:16:86:6C:56:5B:86:DB:0F:63:76:37:E7:17:93
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/LTEdiPOzFoZsVluG2w9jdjfnF5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.45.0-109.122.46.255
Signature Algorithm: sha256WithRSAEncryption
7d:f7:10:bb:0c:5f:bc:9e:64:6f:3c:9d:e9:d9:98:12:b5:ea:
43:b1:7c:3e:93:21:ec:f8:2a:07:da:df:62:91:89:92:5d:2c:
4d:53:4e:ec:e5:2e:29:3c:e5:14:6d:92:e0:f8:25:59:07:cb:
2a:80:47:8c:68:64:65:a1:24:80:aa:b0:49:a9:27:a6:90:17:
ce:05:a9:63:3b:cf:db:36:7e:96:df:3f:81:12:b9:9d:f3:ac:
7b:6e:e8:56:00:f7:d4:cd:b4:b0:4e:3c:e2:e3:4f:4d:4a:45:
0a:da:ae:1e:d9:a4:d1:6a:36:18:56:74:4e:0b:ad:6f:ba:86:
02:b5:de:02:0b:ef:d8:0b:f3:69:3f:16:c8:56:6e:15:22:06:
f0:ec:03:1c:f1:76:c2:f5:06:b4:2f:e6:2e:c8:18:1a:7d:44:
dd:0b:7c:5c:46:a6:f8:84:4b:e0:7d:9e:8c:53:b8:f5:4c:ca:
39:c8:f0:e4:19:ec:4d:38:4d:bb:73:7f:2e:75:8d:2b:4f:71:
58:bf:e8:32:6d:cc:96:d5:14:0a:6a:f4:e2:cf:d7:c1:d3:03:
49:ad:06:58:b7:9b:d0:d6:1e:4e:f3:1e:c9:e6:94:d2:db:44:
c2:a7:82:90:67:d3:1a:6d:a7:27:f9:17:77:7c:65:9c:d0:f7:
5d:5a:74:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:06:33 2025 by rpki-client