Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/LZsPGsxs6YeveDE_cOLvWKZV0Ak.roa
File: LZsPGsxs6YeveDE_cOLvWKZV0Ak.roa (raw, json)
Hash identifier: +UcMa2OJDY0jHjIVnq13uID3s47LitbanrJtl3pdV28=
Subject key identifier: 2D:9B:0F:1A:CC:6C:E9:87:AF:78:31:3F:70:E2:EF:58:A6:55:D0:09
Certificate issuer: /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial: 018CC9BC51FA48A3849116E38334210EDFEC
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/LZsPGsxs6YeveDE_cOLvWKZV0Ak.roa
Signing time: Tue 02 Jan 2024 10:33:31 +0000
ROA not before: Tue 02 Jan 2024 10:33:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48716
IP address blocks: 185.253.8.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:51:fa:48:a3:84:91:16:e3:83:34:21:0e:df:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Validity
Not Before: Jan 2 10:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d9b0f1acc6ce987af78313f70e2ef58a655d009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7c:8b:78:a3:81:4a:e7:a2:9d:bc:65:36:28:
94:c6:1b:83:6e:f6:b7:4e:bf:9d:c3:6d:cd:fd:24:
37:08:a9:e4:1d:cd:bd:fd:6c:8a:06:33:da:9a:6d:
44:5e:1e:d3:97:c9:51:05:d3:25:3b:6b:b2:d7:50:
6f:55:c2:86:e3:32:66:71:0a:33:45:7f:78:ea:96:
34:40:b6:67:e1:c6:dc:1c:d7:d9:3f:8a:6d:6f:6b:
c6:44:d4:53:91:b0:51:cc:a5:e4:28:35:f5:93:32:
e2:16:07:46:5e:44:d0:93:6a:56:98:ee:f6:96:2f:
50:be:aa:29:cb:ac:d6:60:5d:7b:c2:22:2e:87:1f:
45:2f:92:50:cf:9c:83:4f:8c:41:07:83:0c:0d:65:
8c:f9:ac:90:6c:d7:ed:9c:9c:df:1c:58:cc:c6:91:
99:5a:24:a8:f7:f4:cb:c5:d6:10:8c:88:30:12:5b:
b1:3d:8a:91:d4:75:d8:b2:2d:ae:9d:75:8a:71:cc:
4f:81:ac:8d:48:6f:b3:42:b6:c3:fc:51:bb:48:46:
b5:9e:e0:90:83:24:a1:32:35:b3:b2:ca:ad:99:9a:
bc:14:94:f0:f8:90:19:70:f3:a7:64:97:63:3c:db:
51:53:b7:f7:dd:9b:11:bc:da:a0:89:68:9a:2e:ac:
2f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9B:0F:1A:CC:6C:E9:87:AF:78:31:3F:70:E2:EF:58:A6:55:D0:09
X509v3 Authority Key Identifier:
keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/LZsPGsxs6YeveDE_cOLvWKZV0Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.8.0/24
Signature Algorithm: sha256WithRSAEncryption
93:4b:37:92:6f:73:49:5b:01:2c:e3:31:00:45:67:e5:98:9d:
c6:aa:4b:5e:75:f0:7b:2b:58:0a:6d:6b:3c:0c:0e:f9:a1:5f:
ce:59:43:61:63:74:31:42:3c:22:ed:35:37:b4:88:89:c3:9f:
d3:6d:a3:ef:7a:c3:8a:1b:9d:35:8b:98:a9:8a:c6:c2:2b:82:
a1:27:58:35:fa:2c:49:28:f6:5d:d5:e8:d3:2d:ad:c3:33:f3:
16:2b:d4:7f:cc:63:48:1e:12:ec:87:06:e9:fc:13:11:3f:7e:
cd:49:a2:81:84:fc:79:82:fb:d7:c8:9f:87:ab:5f:02:46:55:
c5:19:d9:dc:2e:bd:fc:69:e0:77:4c:76:32:a0:4d:b6:84:bf:
41:b8:8b:27:24:be:91:29:98:70:14:e4:29:f7:d0:3c:95:16:
af:8d:a6:0d:db:4f:ec:ca:b3:00:71:5d:f1:13:b0:77:b6:6b:
79:b8:f9:09:ba:ac:80:30:72:be:39:9a:a6:6c:7c:9c:9d:b2:
f8:f8:e3:b1:5e:a2:13:10:21:96:a4:c2:98:13:7d:4f:b6:a2:
02:f5:37:2b:5a:06:78:db:6e:2f:d6:b9:25:00:82:37:ed:36:
67:2c:5e:8f:1f:c1:c4:75:d0:1c:2c:e3:49:8b:77:8b:41:f6:
7a:50:2a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:06:11 2025 by rpki-client