Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LLq5ASUX-RKy0dvBIho1RvZU-pc.roa
File: LLq5ASUX-RKy0dvBIho1RvZU-pc.roa (raw, json)
Hash identifier: elqAK1FbEEqQjHTGe90TCQ3H3M5nDllBB5iBpbvTuPE=
Subject key identifier: 2C:BA:B9:01:25:17:F9:12:B2:D1:DB:C1:22:1A:35:46:F6:54:FA:97
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29F733BFB6A7191FC9D271C692D01B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LLq5ASUX-RKy0dvBIho1RvZU-pc.roa
Signing time: Tue 02 Jan 2024 12:33:16 +0000
ROA not before: Tue 02 Jan 2024 12:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44405
IP address blocks: 146.120.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:f7:33:bf:b6:a7:19:1f:c9:d2:71:c6:92:d0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cbab9012517f912b2d1dbc1221a3546f654fa97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0a:82:02:61:3c:9c:09:a0:a7:ec:5f:23:0f:
3e:af:f5:e9:62:77:63:df:ce:f5:ba:be:4e:c8:1c:
79:6b:03:d2:4f:e7:e6:e7:0f:7a:7b:a0:ea:98:ce:
2c:1d:1c:ad:ee:42:85:ee:f3:b1:02:75:93:26:8c:
9f:b2:76:f8:1f:1e:a7:bf:d4:52:18:fb:b1:f9:2d:
27:0e:ca:55:4c:f0:b3:5b:ca:f6:ae:39:20:b8:2b:
fe:95:3d:e5:2f:91:5b:6a:8d:d8:42:cd:f3:eb:59:
c9:99:5b:cc:a8:e8:88:87:92:37:52:1c:d7:37:4d:
55:0d:f4:56:d6:7c:4a:55:11:61:23:6a:b5:72:85:
0a:04:9c:b0:f8:41:9f:ec:cc:71:f3:f1:01:d7:56:
de:58:d0:09:7c:43:8a:a7:19:c5:0b:c5:e1:6c:3c:
23:cb:6a:08:02:4f:ed:21:c9:07:70:4f:2f:73:fd:
11:da:f9:36:4d:b8:a2:35:75:77:9c:28:ee:92:bb:
ea:a1:47:a0:3b:87:8b:f9:88:be:6f:f5:df:78:4d:
6a:bd:23:3f:a8:e0:6d:90:c3:54:46:b1:45:35:34:
81:11:81:55:f6:22:44:68:1e:58:8d:cd:c4:24:81:
0a:aa:ae:69:7a:86:9f:62:8c:53:3f:c0:fc:8c:e2:
d5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BA:B9:01:25:17:F9:12:B2:D1:DB:C1:22:1A:35:46:F6:54:FA:97
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LLq5ASUX-RKy0dvBIho1RvZU-pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.184.0/24
Signature Algorithm: sha256WithRSAEncryption
97:83:99:0c:fb:d8:9a:c9:f5:f6:1e:34:de:70:07:67:01:33:
62:1d:1f:5b:b8:7b:cd:97:7c:d7:e9:55:ca:2d:43:06:4e:42:
1e:ba:aa:7d:fa:03:30:28:6c:e7:31:bd:bc:76:0a:3e:43:75:
23:b0:72:54:94:9b:92:ac:ff:a7:bc:e3:57:c9:6e:f2:db:c9:
97:b6:3d:25:38:dc:dc:c0:f6:c0:e7:98:b1:49:3f:35:d0:c9:
81:2d:2a:8d:14:1f:10:78:41:7f:3a:26:f2:85:64:04:e4:a2:
0f:db:da:29:ce:b8:08:1b:7e:eb:70:4b:b1:67:91:88:19:12:
aa:9e:cb:63:38:ad:f4:6f:cf:64:3d:3f:51:a1:35:34:1c:da:
c2:08:5d:e2:a2:18:e3:57:da:08:ac:2c:e8:ae:28:cd:a3:bd:
12:25:5e:7c:07:7d:f2:7c:7a:59:98:6e:b3:97:c9:4d:96:67:
66:e6:6f:15:ed:8e:73:86:3d:d8:e2:f8:4f:0d:df:a2:87:c4:
da:a6:ea:b0:34:44:48:95:db:9c:ff:0c:30:22:86:50:83:08:
ac:4e:63:39:18:ee:86:9e:9e:6e:ea:9f:47:ba:1e:4e:e2:7b:
0c:c8:a3:ef:e7:95:5f:93:5a:90:b9:4f:b4:0c:bc:f7:9f:58:
9f:b4:c8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:52 2025 by rpki-client