Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/LNCu0afsSg0irr8e97SLCbe0YqA.roa
File: LNCu0afsSg0irr8e97SLCbe0YqA.roa (raw, json)
Hash identifier: kT/LJw9ANn/4uZ/rRYZikHVbhN/oecQEGTgEkouCIWY=
Subject key identifier: 2C:D0:AE:D1:A7:EC:4A:0D:22:AE:BF:1E:F7:B4:8B:09:B7:B4:62:A0
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0195B38BABAD09B777C58C1EF09C08297E19
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/LNCu0afsSg0irr8e97SLCbe0YqA.roa
Signing time: Thu 20 Mar 2025 12:33:49 +0000
ROA not before: Thu 20 Mar 2025 12:33:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211507
IP address blocks: 2a13:e040::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 22 Mar 2025 18:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:8b:ab:ad:09:b7:77:c5:8c:1e:f0:9c:08:29:7e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 20 12:33:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cd0aed1a7ec4a0d22aebf1ef7b48b09b7b462a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:70:0f:c7:1c:d8:a1:2c:db:2d:4e:cb:cc:
3f:d5:a3:4d:b7:4e:1b:21:29:e5:7c:3c:e3:85:31:
0e:63:4a:92:7d:c4:90:ec:82:48:25:46:08:15:ed:
91:8d:12:a2:af:22:cc:0f:f7:9a:30:ab:de:b2:a7:
66:2a:fa:a4:c5:c4:26:c4:69:c9:f9:d7:b3:97:36:
30:ec:7f:9d:5a:bf:7d:71:17:ee:50:e8:f8:a7:a5:
28:3b:20:68:da:89:b2:f9:de:40:58:3d:bd:7a:4b:
1c:31:82:eb:19:45:e4:d5:8a:27:13:4d:dd:e1:1e:
7b:73:da:75:4d:2e:cc:63:ef:cd:d5:b1:7e:7a:4f:
ad:ae:91:64:45:62:04:ec:58:b6:14:5e:30:55:67:
ed:43:e5:a8:91:26:59:0f:71:7f:72:9d:45:ab:1c:
3a:d2:5f:73:17:21:48:fc:7a:3e:0d:cf:c7:4b:2e:
e0:81:62:26:19:95:9c:d3:36:a7:ee:24:08:84:cf:
ce:41:5e:6d:21:64:64:f6:f4:92:f3:54:e2:26:8e:
84:15:07:73:eb:f9:b4:16:b2:1c:a2:60:95:f2:99:
c2:a6:f5:1d:ab:e9:c6:bf:f7:9a:ba:7b:73:0c:e1:
76:88:ed:81:da:f6:42:ef:dd:c1:1e:67:d1:6c:a0:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D0:AE:D1:A7:EC:4A:0D:22:AE:BF:1E:F7:B4:8B:09:B7:B4:62:A0
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/LNCu0afsSg0irr8e97SLCbe0YqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e040::/29
Signature Algorithm: sha256WithRSAEncryption
0e:d8:39:60:10:bf:4a:be:5c:8b:7f:14:76:b4:4f:e1:55:eb:
ed:63:8e:2d:ae:13:51:91:17:e7:5c:a2:6f:28:ff:28:92:a0:
34:a6:04:76:da:fd:88:9a:f5:94:27:d4:61:69:75:59:bc:ee:
66:9b:de:d0:6f:09:86:fd:a3:ee:60:3b:9a:49:f5:05:86:34:
b8:f7:13:a8:85:ae:da:35:2f:a8:d8:45:5b:d7:97:c8:05:bd:
4e:3e:af:fa:d9:a4:5d:5e:af:61:3e:18:4e:0d:3e:4b:8e:21:
41:8f:04:37:d0:e1:3f:2d:83:fd:4c:c5:e5:81:3e:52:76:e5:
4e:be:58:90:6c:62:5e:d0:07:cf:66:fc:93:9c:94:0a:84:42:
47:4d:59:d9:d9:54:db:63:96:4b:97:c7:a7:bd:c9:a7:c2:a2:
8d:d7:19:54:a3:44:a0:a1:33:f2:c0:13:dd:5a:67:88:0b:b3:
e7:37:a2:d0:b5:b0:f5:b9:5c:c2:52:d0:84:73:c7:8d:cd:45:
d0:29:2c:78:5c:94:55:84:7b:08:9e:60:30:5e:60:9b:04:c0:
97:9e:f7:66:33:11:cd:39:92:34:a8:b8:86:40:96:74:02:00:
f9:0c:3c:08:ae:92:f8:bf:6d:ce:46:32:b0:47:0d:64:92:ae:
27:bb:6c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:56:35 2025 by rpki-client