Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/LxUJraHQ0a79AGMur_39NGDLHto.roa
File: LxUJraHQ0a79AGMur_39NGDLHto.roa (raw, json)
Hash identifier: 7Y01Ex9qq5/2XvmoAHoPlRFRDU/snFWoUOxXnxcFAGE=
Subject key identifier: 2F:15:09:AD:A1:D0:D1:AE:FD:00:63:2E:AF:FD:FD:34:60:CB:1E:DA
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 018CF889F846536999B900DB191DDA409D25
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/LxUJraHQ0a79AGMur_39NGDLHto.roa
Signing time: Thu 11 Jan 2024 12:40:40 +0000
ROA not before: Thu 11 Jan 2024 12:40:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 87.238.244.0/23 maxlen: 23
87.238.243.0/24 maxlen: 24
87.238.242.0/24 maxlen: 24
87.238.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:89:f8:46:53:69:99:b9:00:db:19:1d:da:40:9d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Jan 11 12:40:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f1509ada1d0d1aefd00632eaffdfd3460cb1eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:04:79:a1:3b:0b:5a:65:0d:27:03:02:2e:
55:43:09:d2:ad:e8:5a:9b:86:8c:e8:af:b9:ac:0a:
df:68:b7:8d:75:ce:a5:ee:5e:4f:ae:79:4d:e2:bd:
1d:42:c3:b8:3c:c0:ef:62:21:87:2c:ac:7f:e5:85:
bb:de:31:f8:8d:0d:50:84:44:c2:71:98:8f:b0:5e:
ba:e8:93:d9:5c:8d:57:5a:85:04:e8:e6:c6:f7:5b:
8b:50:7d:a2:64:f5:9f:62:1e:d9:b4:88:3c:3c:15:
c2:66:4f:18:e5:76:a3:25:c5:d5:4c:63:18:b4:ee:
7c:a8:66:2b:a4:19:93:a3:35:07:59:49:02:6c:49:
a9:aa:55:ea:23:da:5a:5e:ae:25:37:3f:49:5b:3f:
68:af:13:ae:ad:6e:12:47:2d:dc:da:8d:3b:12:5a:
56:50:ec:29:82:17:c0:45:c7:be:2d:99:2a:52:f4:
a1:1b:3a:58:4c:14:d0:17:c6:39:12:74:2b:28:dc:
e5:73:38:a4:b2:66:c0:16:06:68:ee:72:96:18:76:
62:1a:ef:08:a5:79:e8:db:cc:c7:b0:a4:4b:bd:f7:
3d:26:51:c4:53:74:8f:33:f6:b6:83:94:e7:cc:43:
7d:2d:8f:d2:eb:19:46:9d:14:ed:03:45:3a:18:29:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:15:09:AD:A1:D0:D1:AE:FD:00:63:2E:AF:FD:FD:34:60:CB:1E:DA
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/LxUJraHQ0a79AGMur_39NGDLHto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.241.0-87.238.245.255
Signature Algorithm: sha256WithRSAEncryption
28:35:f7:c0:26:d8:03:9f:8a:12:52:4d:c3:71:d4:5d:c6:a5:
13:ad:ad:2c:bd:b8:15:82:1a:92:eb:c9:bb:0a:dd:fa:33:5c:
e7:ae:45:c0:0d:f4:fb:6a:77:92:3e:f1:13:76:7d:f6:84:e4:
1d:3a:94:4e:b3:49:2c:fe:26:e3:b8:88:d5:aa:99:0d:d6:12:
5e:1e:4e:d3:fa:8a:e7:21:b4:a2:0d:d2:71:f7:ad:e3:2a:d1:
a5:44:c6:ec:ad:15:64:99:b6:21:f3:26:1c:7f:20:54:36:7c:
95:19:3d:88:5d:af:91:76:2e:07:8d:4f:66:d1:88:43:bd:d0:
eb:f8:52:bf:60:7e:e6:39:8f:90:38:f4:63:9d:06:4f:06:d4:
b3:9b:54:2c:14:2a:cd:4a:42:2e:7a:2a:01:1e:e8:84:c6:b3:
bf:9b:31:e2:fd:13:5e:2d:4d:27:65:47:5a:ec:a7:2e:5a:c9:
bf:a4:4b:a2:ea:de:97:78:ac:72:fa:0e:b8:30:61:1a:5b:88:
77:bb:04:c0:08:ca:55:8b:6c:1a:9f:b7:d2:72:ab:04:74:d2:
5b:b9:3c:11:50:fd:fc:c9:67:95:51:75:1f:29:28:3d:7c:cf:
91:6f:2f:a8:db:61:21:7d:a0:77:49:88:26:ad:c6:56:7b:43:
02:8d:e0:67
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYz4ifhGU2mZuQDbGR3aQJ0lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNmYxZTlmMDk1MGU0ZjM5YzljNWZlZTNmODY4YTI0ZWIz
NjFlZjEwHhcNMjQwMTExMTI0MDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjE1MDlhZGExZDBkMWFlZmQwMDYzMmVhZmZkZmQzNDYwY2IxZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwwEeaE7C1plDScDAi5VQwnSreha
m4aM6K+5rArfaLeNdc6l7l5PrnlN4r0dQsO4PMDvYiGHLKx/5YW73jH4jQ1QhETC
cZiPsF666JPZXI1XWoUE6ObG91uLUH2iZPWfYh7ZtIg8PBXCZk8Y5XajJcXVTGMY
tO58qGYrpBmTozUHWUkCbEmpqlXqI9paXq4lNz9JWz9orxOurW4SRy3c2o07ElpW
UOwpghfARce+LZkqUvShGzpYTBTQF8Y5EnQrKNzlcziksmbAFgZo7nKWGHZiGu8I
pXno28zHsKRLvfc9JlHEU3SPM/a2g5TnzEN9LY/S6xlGnRTtA0U6GCls9wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFC8VCa2h0NGu/QBjLq/9/TRgyx7aMB8GA1UdIwQY
MBaAFAtvHp8JUOTznJxf7j+GiiTrNh7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAt
MDgxYmNiYWM0ZGFmLzEvTHhVSnJhSFEwYTc5QUdNdXJfMzlOR0RMSHRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAtMDgxYmNiYWM0ZGFm
LzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABX7vED
BAFX7vQwDQYJKoZIhvcNAQELBQADggEBACg198Am2AOfihJSTcNx1F3GpROtrSy9
uBWCGpLrybsK3fozXOeuRcAN9Ptqd5I+8RN2ffaE5B06lE6zSSz+JuO4iNWqmQ3W
El4eTtP6iuchtKIN0nH3reMq0aVExuytFWSZtiHzJhx/IFQ2fJUZPYhdr5F2LgeN
T2bRiEO90Ov4Ur9gfuY5j5A49GOdBk8G1LObVCwUKs1KQi56KgEe6ITGs7+bMeL9
E14tTSdlR1rspy5ayb+kS6Lq3pd4rHL6DrgwYRpbiHe7BMAIylWLbBqft9JyqwR0
0lu5PBFQ/fzJZ5VRdR8pKD18z5FvL6jbYSF9oHdJiCatxlZ7QwKN4Gc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:17 2025 by rpki-client