Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/LaSjyNgLET1CflLjPxaMaMrHzZk.roa
File: LaSjyNgLET1CflLjPxaMaMrHzZk.roa (raw, json)
Hash identifier: tRL29yiYKMJyvy3pqiUiGYvPwVxJMBo6ugydejSwlM0=
Subject key identifier: 2D:A4:A3:C8:D8:0B:11:3D:42:7E:52:E3:3F:16:8C:68:CA:C7:CD:99
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0194274739C1A4F3FD2850616956A0EBE902
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/LaSjyNgLET1CflLjPxaMaMrHzZk.roa
Signing time: Thu 02 Jan 2025 13:49:26 +0000
ROA not before: Thu 02 Jan 2025 13:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215073
IP address blocks: 185.254.29.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
194.62.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:39:c1:a4:f3:fd:28:50:61:69:56:a0:eb:e9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2da4a3c8d80b113d427e52e33f168c68cac7cd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1d:71:ce:c6:f2:cd:83:ff:a4:73:e4:0e:ae:
b7:e5:2d:3e:83:4c:56:37:6c:bf:01:c0:81:69:b4:
b4:41:81:21:92:06:ae:c9:4b:39:01:2f:00:f6:50:
57:59:80:ed:88:b5:44:72:31:7a:01:fe:6e:9d:ed:
f1:47:07:77:bb:71:be:dc:eb:96:19:3b:bc:e5:64:
2f:e4:0e:56:34:cb:7b:fb:1b:9d:6c:b0:fb:5f:ba:
a2:8b:13:74:44:d6:f7:bf:39:51:3c:a0:1f:e1:3f:
ac:40:0c:e8:1c:f3:2b:73:df:91:be:16:a3:88:d5:
36:ba:15:b3:82:ae:f9:53:11:44:9f:28:f6:99:a2:
dc:79:7f:3d:c3:ad:d8:9b:fd:24:a3:2a:18:fc:9b:
8f:7e:24:8a:7b:19:3b:3e:9b:e2:61:19:a1:25:e7:
35:a7:33:7b:54:3f:20:2b:83:cf:60:34:3c:31:8d:
31:bb:b7:87:76:9f:74:68:3a:88:50:7a:70:c7:7a:
ca:3b:a7:5d:e0:14:b8:d3:b5:3a:c1:64:c6:45:2d:
62:86:fa:75:5b:44:7c:89:7f:e4:48:e7:2f:fb:42:
41:6b:d0:9b:e9:d7:e1:7b:b1:4f:5f:f9:87:0e:05:
dc:dc:21:21:4f:d8:3c:df:f4:4e:2d:8e:f8:cd:04:
97:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A4:A3:C8:D8:0B:11:3D:42:7E:52:E3:3F:16:8C:68:CA:C7:CD:99
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/LaSjyNgLET1CflLjPxaMaMrHzZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.29.0/24
185.254.239.0/24
193.35.152.0/24
193.160.143.0/24
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:6a:90:58:db:2f:cd:f5:45:a0:60:f5:26:41:b4:ac:0e:50:
d0:f5:4b:8b:e2:e7:3c:fc:00:9f:c1:0a:a2:17:75:5d:5c:77:
73:33:fb:30:39:7b:be:e6:3f:dd:ef:53:26:7b:4f:1d:76:37:
4c:d2:bf:37:1f:24:fa:33:3e:4f:eb:09:29:57:0c:6e:ff:5f:
4c:be:de:b1:ba:cf:fe:57:d5:48:3c:b3:9e:00:e0:c5:bd:e6:
cb:02:59:15:ea:73:08:9a:19:d0:25:02:6b:89:53:be:32:eb:
8c:b9:fa:1b:1f:f4:82:ce:ef:5f:ce:64:ea:29:8e:81:68:fa:
7e:fb:cf:64:ba:ad:5e:13:3f:36:65:71:d5:a8:a4:37:85:89:
ad:d1:e5:c7:22:48:eb:6f:bd:a0:84:4a:51:e5:b9:75:34:a4:
22:5d:2f:f4:d8:51:77:28:b2:b9:1b:26:ad:93:9e:d1:c3:42:
61:d5:1f:8c:c6:ed:78:f2:1c:4a:58:76:36:df:71:30:58:5d:
d4:fd:89:41:38:ef:d8:62:6c:2e:4e:2d:a1:9a:43:b2:5d:e8:
63:d4:d5:30:6c:12:a2:db:a4:89:d0:b5:3b:63:21:7a:b7:73:
53:b0:38:a9:82:4e:d9:b2:8f:f6:16:b9:cb:8e:3c:b5:c5:b9:
e4:f4:af:8b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQnRznBpPP9KFBhaVag6+kCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjUwMTAyMTM0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGE0YTNjOGQ4MGIxMTNkNDI3ZTUyZTMzZjE2OGM2OGNhYzdjZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB1xzsbyzYP/pHPkDq635S0+g0xW
N2y/AcCBabS0QYEhkgauyUs5AS8A9lBXWYDtiLVEcjF6Af5une3xRwd3u3G+3OuW
GTu85WQv5A5WNMt7+xudbLD7X7qiixN0RNb3vzlRPKAf4T+sQAzoHPMrc9+Rvhaj
iNU2uhWzgq75UxFEnyj2maLceX89w63Ym/0koyoY/JuPfiSKexk7PpviYRmhJec1
pzN7VD8gK4PPYDQ8MY0xu7eHdp90aDqIUHpwx3rKO6dd4BS407U6wWTGRS1ihvp1
W0R8iX/kSOcv+0JBa9Cb6dfhe7FPX/mHDgXc3CEhT9g83/ROLY74zQSXqQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFC2ko8jYCxE9Qn5S4z8WjGjKx82ZMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvTGFTanlOZ0xFVDFDZmxMalB4YU1hTXJIelprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAuf4dAwQA
uf7vAwQAwSOYAwQAwaCPAwQAwj42MA0GCSqGSIb3DQEBCwUAA4IBAQCoapBY2y/N
9UWgYPUmQbSsDlDQ9UuL4uc8/ACfwQqiF3VdXHdzM/swOXu+5j/d71Mme08ddjdM
0r83HyT6Mz5P6wkpVwxu/19Mvt6xus/+V9VIPLOeAODFvebLAlkV6nMImhnQJQJr
iVO+MuuMufobH/SCzu9fzmTqKY6BaPp++89kuq1eEz82ZXHVqKQ3hYmt0eXHIkjr
b72ghEpR5bl1NKQiXS/02FF3KLK5Gyatk57Rw0Jh1R+Mxu148hxKWHY233EwWF3U
/YlBOO/YYmwuTi2hmkOyXehj1NUwbBKi26SJ0LU7YyF6t3NTsDipgk7Zso/2FrnL
jjy1xbnk9K+L
-----END CERTIFICATE-----
Generated at Thu Apr 10 16:06:23 2025 by rpki-client