Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/LU75a58x2MxMc4VlcY11qXXYwBk.roa
File: LU75a58x2MxMc4VlcY11qXXYwBk.roa (raw, json)
Hash identifier: yzA4AcOlo6y0KAkXzemdsp4r/60emmzF//IL8EgFNrU=
Subject key identifier: 2D:4E:F9:6B:9F:31:D8:CC:4C:73:85:65:71:8D:75:A9:75:D8:C0:19
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 018CC794AD1203201C0CBC1F74E8EB9E2C20
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/LU75a58x2MxMc4VlcY11qXXYwBk.roa
Signing time: Tue 02 Jan 2024 00:30:58 +0000
ROA not before: Tue 02 Jan 2024 00:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201814
IP address blocks: 2a12:a800:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:ad:12:03:20:1c:0c:bc:1f:74:e8:eb:9e:2c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Jan 2 00:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d4ef96b9f31d8cc4c738565718d75a975d8c019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a6:5c:38:a0:c1:22:6a:c4:87:59:03:10:69:
7c:ac:dd:b7:c8:17:39:24:a1:5c:1c:b1:c5:97:d7:
60:24:a2:b3:b8:71:9d:fb:8d:2d:4c:52:e6:ed:e0:
52:7e:15:54:0c:d5:e7:94:eb:3d:22:6d:4e:14:a2:
95:2e:c0:8d:a1:55:4f:44:8e:6c:e9:07:4a:bd:49:
25:d0:52:63:32:f4:06:2b:be:4f:22:db:33:7f:59:
fb:e7:35:ff:0e:bb:12:e6:21:be:6d:28:a3:0b:7d:
23:d2:83:98:92:32:ba:c9:eb:e7:ad:03:75:c7:35:
62:2e:37:a2:76:14:e6:dd:ba:b7:bd:9e:50:64:a4:
d7:3b:3c:87:b9:33:b5:9a:13:fc:ef:51:3d:97:86:
27:e6:37:c5:10:86:47:3a:93:29:45:10:a3:ac:21:
7b:ef:a0:a8:45:3d:84:0d:3d:5d:7a:26:75:29:6a:
99:cb:cb:cc:16:64:e5:61:92:1d:69:76:ea:e5:1b:
cf:6f:43:39:15:2a:d6:a2:b6:50:6e:e1:65:5e:f2:
bc:62:99:df:29:53:16:d2:e5:e5:b2:c7:87:fb:d4:
01:14:eb:64:78:28:ac:50:60:b9:85:80:93:0a:96:
d4:44:78:8e:b5:05:f1:77:30:11:f4:11:1f:ed:2f:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4E:F9:6B:9F:31:D8:CC:4C:73:85:65:71:8D:75:A9:75:D8:C0:19
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/LU75a58x2MxMc4VlcY11qXXYwBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a800:2::/48
Signature Algorithm: sha256WithRSAEncryption
d8:be:1b:e7:fb:b5:9d:69:23:b2:a5:34:7c:d5:37:47:45:b4:
92:14:77:d4:70:61:16:63:80:be:ec:cd:d3:9d:c1:7c:95:ab:
46:d3:91:da:f9:61:90:aa:9c:91:d9:46:dc:65:5a:70:16:b1:
c3:59:56:18:01:cd:fa:90:ee:22:0b:92:95:5e:cd:6c:48:5d:
dc:46:9f:41:38:9c:a8:45:63:8c:f3:82:d7:1a:35:bd:d6:7d:
07:48:81:af:c8:cf:da:63:64:96:af:c6:9f:80:9f:97:8d:59:
fc:a6:8a:7e:4d:73:0b:66:d1:ba:60:d7:d6:14:b2:43:ec:26:
23:d7:33:ce:96:ac:59:16:09:7a:da:08:66:df:ac:b1:0b:e6:
f9:84:75:46:78:93:3c:ac:76:75:78:36:b6:80:23:04:9f:45:
0a:a6:c7:6f:3c:7b:90:f2:11:ef:7a:8e:b6:3a:f0:0d:dd:4c:
79:eb:44:3a:11:c3:d9:7e:73:7c:09:83:1c:79:a9:b7:1a:60:
16:8d:ef:2b:ec:27:1f:0f:1a:e7:60:76:01:bd:26:26:6c:d3:
34:bb:46:a4:7b:e7:5f:49:83:be:71:3b:45:50:ce:15:bc:cb:
e6:64:8d:c5:3e:84:25:f7:1d:39:27:b2:ff:88:6f:73:f3:a4:
35:46:2f:8c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzHlK0SAyAcDLwfdOjrniwgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNWEyMGE4NjkzOWM4ZGU4YWVkYzMwNTI0M2IwZmQ0YWQ4
NjU0ZDAwHhcNMjQwMTAyMDAzMDU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDRlZjk2YjlmMzFkOGNjNGM3Mzg1NjU3MThkNzVhOTc1ZDhjMDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKZcOKDBImrEh1kDEGl8rN23yBc5
JKFcHLHFl9dgJKKzuHGd+40tTFLm7eBSfhVUDNXnlOs9Im1OFKKVLsCNoVVPRI5s
6QdKvUkl0FJjMvQGK75PItszf1n75zX/DrsS5iG+bSijC30j0oOYkjK6yevnrQN1
xzViLjeidhTm3bq3vZ5QZKTXOzyHuTO1mhP871E9l4Yn5jfFEIZHOpMpRRCjrCF7
76CoRT2EDT1deiZ1KWqZy8vMFmTlYZIdaXbq5RvPb0M5FSrWorZQbuFlXvK8Ypnf
KVMW0uXlsseH+9QBFOtkeCisUGC5hYCTCpbURHiOtQXxdzAR9BEf7S8o+QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFC1O+WufMdjMTHOFZXGNdal12MAZMB8GA1UdIwQY
MBaAFLNaIKhpOcjeiu3DBSQ7D9SthlTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAt
YTU0MjU4OTc5OWJjLzEvTFU3NWE1OHgyTXhNYzRWbGNZMTFxWFhZd0JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAtYTU0MjU4OTc5OWJj
LzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhKoAAAC
MA0GCSqGSIb3DQEBCwUAA4IBAQDYvhvn+7WdaSOypTR81TdHRbSSFHfUcGEWY4C+
7M3TncF8latG05Ha+WGQqpyR2UbcZVpwFrHDWVYYAc36kO4iC5KVXs1sSF3cRp9B
OJyoRWOM84LXGjW91n0HSIGvyM/aY2SWr8afgJ+XjVn8pop+TXMLZtG6YNfWFLJD
7CYj1zPOlqxZFgl62ghm36yxC+b5hHVGeJM8rHZ1eDa2gCMEn0UKpsdvPHuQ8hHv
eo62OvAN3Ux560Q6EcPZfnN8CYMceam3GmAWje8r7CcfDxrnYHYBvSYmbNM0u0ak
e+dfSYO+cTtFUM4VvMvmZI3FPoQl9x05J7L/iG9z86Q1Ri+M
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:12 2025 by rpki-client