Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/LFCSl2Dm-hWeoMk-cWcTvH8_89w.roa
File: LFCSl2Dm-hWeoMk-cWcTvH8_89w.roa (raw, json)
Hash identifier: A6248ItJqdS6WAj9c8BBYEWAu33wmHC3WKAyxKZ3LbU=
Subject key identifier: 2C:50:92:97:60:E6:FA:15:9E:A0:C9:3E:71:67:13:BC:7F:3F:F3:DC
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0194CCCA70010F39D8D457744BC3BC91F273
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/LFCSl2Dm-hWeoMk-cWcTvH8_89w.roa
Signing time: Mon 03 Feb 2025 17:10:06 +0000
ROA not before: Mon 03 Feb 2025 17:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 188.132.188.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.190.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 08:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:ca:70:01:0f:39:d8:d4:57:74:4b:c3:bc:91:f2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 3 17:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c50929760e6fa159ea0c93e716713bc7f3ff3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:c1:6a:6e:60:9f:60:e9:e8:41:58:1d:f5:
7c:bc:43:d3:ce:4d:ef:65:d2:7e:d6:dd:33:0e:69:
53:4c:bc:d6:b7:c3:ba:d2:21:53:c9:d8:e5:c5:c0:
74:cf:2b:13:9b:d0:20:7c:5e:3a:3d:4e:cf:e4:55:
ef:24:f2:f7:e8:cc:4a:87:71:db:8e:ca:d7:c3:c0:
19:e8:c3:1c:4e:6e:a7:b3:db:e9:a4:06:25:af:fd:
b3:e6:76:c0:e8:e0:12:f3:d1:46:88:6f:83:0c:ac:
7c:c1:53:df:70:b8:8a:49:01:65:37:00:c8:25:88:
cb:2b:16:71:4d:09:ad:c0:ed:aa:69:05:b2:38:b5:
ee:12:8f:43:dd:f7:ea:06:8c:0f:e1:bf:ee:f6:f0:
d3:ea:78:79:75:cc:46:76:15:d1:b9:9c:f9:61:94:
d4:7e:7d:ef:73:64:7d:a0:f8:a4:c7:f5:92:0f:86:
2b:a5:70:f0:d7:bf:ad:e8:04:67:5b:7a:f1:35:44:
76:00:0f:09:b9:d9:59:18:6a:34:41:2d:e7:10:82:
bf:12:26:4e:e3:7f:08:4f:80:88:50:d1:0f:33:09:
fd:a6:52:77:12:3c:b2:39:09:32:32:f8:d3:3c:ca:
39:3a:c0:f2:c0:ec:f6:6a:c8:2f:d0:09:20:80:9f:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:50:92:97:60:E6:FA:15:9E:A0:C9:3E:71:67:13:BC:7F:3F:F3:DC
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/LFCSl2Dm-hWeoMk-cWcTvH8_89w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.188.0/22
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
4d:a5:23:79:5e:5e:cf:33:ef:76:52:a1:15:d9:e3:b4:43:33:
4a:34:1c:8c:f2:2f:6a:5e:38:4b:12:5b:60:0f:1a:0f:ae:44:
18:6f:27:33:47:16:2f:6e:47:70:ee:8c:9d:92:37:96:d1:d9:
89:0c:7e:e5:82:08:e7:e0:b7:69:68:58:2d:c4:75:6f:41:92:
69:e9:69:3a:3a:17:51:c5:0b:16:76:24:01:a4:78:86:44:e5:
75:79:9d:70:73:00:a4:59:09:c3:70:79:4f:fd:6f:21:85:f1:
5b:fe:15:37:28:b8:ed:bd:fc:5f:54:d9:ea:f1:72:c0:0a:42:
b9:02:69:85:cd:dc:d7:66:b2:0e:ab:10:9e:7e:d3:81:e7:2f:
51:5b:ee:e5:b3:33:8b:d0:6e:6a:3c:14:22:23:41:7f:fb:25:
bc:b9:bb:8e:e0:d8:c1:b9:24:8d:a2:d7:52:cf:da:1f:dd:e7:
4b:75:bc:60:c2:70:74:96:7b:5b:71:5e:a2:c1:b8:cf:c6:d2:
49:f5:f6:6c:54:a1:d3:20:bb:f1:0a:c0:45:6a:3a:4b:81:cc:
af:6f:c3:d5:99:87:31:ed:08:e1:c4:a1:9d:42:2e:85:6e:5b:
af:c3:c2:40:cb:59:16:00:e3:fc:74:40:b1:25:64:4b:07:bb:
da:6a:09:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 17 06:53:46 2025 by rpki-client