Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/lnZwXP4NEuizga_As9mosq3xDOQ.roa
File: lnZwXP4NEuizga_As9mosq3xDOQ.roa (raw, json)
Hash identifier: 3ifP/z33F6G980FZoVFJX9GtiqpjfzvDAaQoxb81Hu8=
Subject key identifier: 96:76:70:5C:FE:0D:12:E8:B3:81:AF:C0:B3:D9:A8:B2:AD:F1:0C:E4
Certificate issuer: /CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Certificate serial: 018CC94E55EA98A8D5C63EFEB6C39D69DBE8
Authority key identifier: 8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/lnZwXP4NEuizga_As9mosq3xDOQ.roa
Signing time: Tue 02 Jan 2024 08:33:23 +0000
ROA not before: Tue 02 Jan 2024 08:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206114
IP address blocks: 87.255.160.0/19 maxlen: 19
2a04:2800::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:55:ea:98:a8:d5:c6:3e:fe:b6:c3:9d:69:db:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d62ddbdf958bb4b983da962ecf03beaee38d449
Validity
Not Before: Jan 2 08:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9676705cfe0d12e8b381afc0b3d9a8b2adf10ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:4f:cf:61:51:08:6b:61:f0:06:19:65:4a:
3c:a0:db:dc:8c:36:6b:07:6e:4b:ca:86:57:2d:0e:
df:1d:9d:2f:c2:04:7b:00:a2:45:ca:7a:76:a9:4f:
c9:3f:21:f5:67:6e:84:0f:92:61:24:ce:ff:f7:34:
e6:47:18:b1:53:6e:12:95:62:d8:cc:c6:75:2d:01:
9d:5c:24:f5:18:1d:06:cc:23:12:59:ca:08:0e:b5:
b4:ef:43:6f:03:88:9c:ab:a5:49:4c:2d:06:e3:f6:
ec:61:98:b1:f9:2a:87:75:4e:49:01:6e:7b:12:b1:
b2:11:13:cd:a7:b2:9c:63:c7:19:f0:fa:12:40:0b:
d9:05:8d:bb:7a:2c:2d:ff:f4:b4:8b:67:33:a2:f0:
7f:34:4a:66:9e:78:68:b0:d7:0d:2d:8e:93:75:d8:
a8:14:40:4a:4b:43:67:37:6f:f8:ff:07:47:c7:1d:
13:bb:ec:61:e7:25:5e:e7:e6:33:11:d6:60:65:2d:
32:19:95:87:5e:8f:c4:fa:0c:ce:18:76:93:73:c1:
fe:0e:5c:17:d9:fd:47:91:11:2f:98:68:4c:eb:26:
be:53:c9:0e:d3:36:25:db:ff:54:14:9a:9c:6a:eb:
86:54:35:a3:be:af:16:df:22:f3:92:91:a3:39:4a:
4c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:76:70:5C:FE:0D:12:E8:B3:81:AF:C0:B3:D9:A8:B2:AD:F1:0C:E4
X509v3 Authority Key Identifier:
keyid:8D:62:DD:BD:F9:58:BB:4B:98:3D:A9:62:EC:F0:3B:EA:EE:38:D4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWLdvflYu0uYPali7PA76u441Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/lnZwXP4NEuizga_As9mosq3xDOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b20bec-3846-4bd1-812f-06e00a3ea062/1/jWLdvflYu0uYPali7PA76u441Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.255.160.0/19
IPv6:
2a04:2800::/29
Signature Algorithm: sha256WithRSAEncryption
ae:a2:77:3a:b4:f0:c6:ae:84:49:61:5d:74:5c:f2:dd:ba:34:
57:e6:6a:02:21:5a:be:ea:8d:43:06:1e:36:02:ef:c9:4c:49:
15:e0:79:e1:50:41:eb:3a:4e:87:53:22:16:9c:c0:2c:ad:c6:
11:b7:39:98:84:02:f7:2e:09:e5:7f:71:97:7b:42:1f:bd:5a:
f5:49:c5:0a:65:ce:de:6f:39:a6:07:82:43:79:f9:0a:8f:3a:
3b:27:b7:8b:c0:5d:ec:ec:05:a5:d7:ac:10:f5:e0:db:8f:5d:
5c:8c:a8:5a:3f:99:2d:ae:9e:c4:14:0e:46:70:86:d9:6d:5c:
a4:12:50:86:46:d2:9a:74:d3:31:25:95:ac:c0:77:62:7b:4e:
4d:5c:dc:b8:53:e6:7c:f5:ca:36:5f:8b:da:ce:a9:e1:d8:66:
24:fd:4c:93:0b:2d:a8:98:96:df:8e:7c:c8:3b:55:4b:ef:56:
9b:64:4f:4e:89:5d:f1:96:70:12:98:67:6f:c5:20:c6:16:f9:
37:3c:70:09:aa:dd:75:02:12:91:37:22:03:30:0c:3c:ea:8a:
67:9a:4a:92:c3:3b:69:4b:cf:2c:b6:9f:ec:6b:77:97:d4:7e:
18:50:b9:9e:6b:d2:4f:99:c8:06:d5:a5:ee:67:56:7b:60:9a:
8c:8b:8b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:27:50 2025 by rpki-client