Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Lg6FuEkA3yNaxDJ_r4tceaXqJ5E.roa
File: Lg6FuEkA3yNaxDJ_r4tceaXqJ5E.roa (raw, json)
Hash identifier: oaMbdQ+lCdakZUbo5NhFqQlGQJMhnjs/qWJplGY4Qos=
Subject key identifier: 2E:0E:85:B8:49:00:DF:23:5A:C4:32:7F:AF:8B:5C:79:A5:EA:27:91
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018F9BE5B23722686925AD1FC5A2901FCFB9
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Lg6FuEkA3yNaxDJ_r4tceaXqJ5E.roa
Signing time: Tue 21 May 2024 16:04:32 +0000
ROA not before: Tue 21 May 2024 16:04:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214876
IP address blocks: 31.210.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:e5:b2:37:22:68:69:25:ad:1f:c5:a2:90:1f:cf:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: May 21 16:04:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e0e85b84900df235ac4327faf8b5c79a5ea2791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cf:ce:de:b4:38:50:45:fc:a5:19:8b:f6:bd:
d6:d0:99:22:56:d4:b3:d8:7c:20:f7:b2:f8:b5:38:
94:44:a5:45:26:65:24:db:be:df:d6:e4:46:93:c1:
a2:73:f4:47:28:fe:89:00:cb:cc:e2:84:76:a4:dc:
39:9b:f7:c0:15:8f:6c:13:f9:39:e6:e0:07:b3:84:
ff:6a:2e:f4:d4:cf:dc:e9:1b:21:29:8b:c4:38:11:
de:d2:ec:84:20:1c:81:c0:d6:23:f8:7c:3b:39:9b:
a5:9b:b8:8c:68:63:83:8f:d3:31:62:89:e7:92:28:
df:bb:75:29:e4:ca:d7:23:d0:70:5e:22:c8:d8:7a:
68:4b:f4:da:09:2d:b4:d2:6d:cd:55:d8:11:c1:62:
31:f8:94:66:1b:ac:b5:20:fb:a7:88:bc:db:e2:ca:
97:1e:b4:a3:cc:18:be:71:84:23:93:41:03:5d:51:
4a:a2:65:58:45:15:92:36:11:92:f1:a3:24:e9:70:
f2:dd:46:79:87:ab:25:50:98:68:e2:15:3f:36:5f:
e7:1d:75:3f:25:0a:b6:0e:fc:cf:6c:af:61:5c:a8:
f6:a9:4b:a1:09:08:4b:b4:7a:88:1b:a4:89:e0:1f:
75:c9:34:8c:48:00:96:f2:0e:0d:52:f6:f8:34:55:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0E:85:B8:49:00:DF:23:5A:C4:32:7F:AF:8B:5C:79:A5:EA:27:91
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Lg6FuEkA3yNaxDJ_r4tceaXqJ5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
Signature Algorithm: sha256WithRSAEncryption
17:87:5f:c2:31:47:94:14:33:e7:3e:d0:bf:70:78:1e:88:78:
d8:7e:8e:47:aa:b7:3e:54:f8:07:76:93:26:66:4d:a0:1d:27:
cb:12:14:37:ae:9b:20:c3:d0:e4:03:39:61:76:10:07:2b:91:
c3:d7:54:a0:a5:c7:0d:6f:9c:2e:5b:1c:f5:b3:70:57:c9:24:
ca:0c:22:d0:4b:ce:b5:4c:c7:02:29:b8:dd:a3:90:31:a1:bb:
1e:7b:c2:e1:b9:1c:74:f7:71:39:ca:46:e0:9d:b2:09:2f:d8:
07:21:05:5d:12:e4:aa:cf:39:3d:e1:5a:7e:fe:b8:6a:25:d8:
e4:3c:13:ba:be:a2:aa:94:88:ef:cd:ae:d1:04:7c:22:59:39:
eb:12:4e:b9:87:d2:78:7f:2a:0d:a5:0d:54:74:1a:f4:c2:d2:
0b:16:86:47:73:56:1f:0a:3f:72:c2:8d:a1:df:97:41:c1:47:
8a:84:f2:8b:5f:16:b2:f8:b2:0d:55:bd:44:8d:5b:b5:71:6f:
eb:c9:a4:ee:0d:48:c2:b8:8e:a9:37:82:c3:b5:e0:54:97:43:
94:35:1e:44:cb:e8:09:cd:5a:4b:9b:61:e7:81:8d:37:72:d9:
82:88:42:98:0a:b5:22:fc:09:c2:38:d6:01:0d:e3:1e:94:cc:
4a:49:8b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:53:15 2025 by rpki-client