Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/LxSHxQIlfeEefhqaKN8gUNbUz9E.roa
File: LxSHxQIlfeEefhqaKN8gUNbUz9E.roa (raw, json)
Hash identifier: Tsf+nYBgm1MymC+sGKs8/bfnmCfps+d1aHIF6Shvf3Q=
Subject key identifier: 2F:14:87:C5:02:25:7D:E1:1E:7E:1A:9A:28:DF:20:50:D6:D4:CF:D1
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC8578E8BCB0FB1B28F284CD862B14
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/LxSHxQIlfeEefhqaKN8gUNbUz9E.roa
Signing time: Thu 02 Jan 2025 07:48:13 +0000
ROA not before: Thu 02 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215081
IP address blocks: 188.253.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 13:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:85:78:e8:bc:b0:fb:1b:28:f2:84:cd:86:2b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f1487c502257de11e7e1a9a28df2050d6d4cfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:09:97:71:d3:64:07:ef:45:05:79:0b:a0:
20:d8:cd:10:e7:b9:69:78:1b:ab:5e:54:7b:31:f3:
dd:ac:cf:20:91:cd:1e:c5:5c:75:60:46:df:4a:79:
6e:f0:71:3b:62:28:5e:68:2c:5a:f6:25:3a:ba:56:
6e:eb:5c:54:ac:25:d7:f4:c0:3d:3c:6e:ab:20:4a:
13:b2:06:48:01:d4:cd:9c:a0:76:f7:46:84:ae:40:
66:2f:f8:80:6f:5f:00:f1:7d:47:0d:cf:76:fd:62:
4f:ab:20:76:72:dd:6e:2b:7b:16:dc:1c:1b:3e:dc:
8e:73:92:11:8c:23:07:51:67:06:f7:77:db:1f:ee:
c0:53:d3:27:96:34:43:a0:7f:d6:76:8d:1e:e1:33:
f0:ed:9b:67:9c:0d:08:89:0b:8d:27:97:25:cd:ed:
fa:72:4c:49:c6:cc:44:6a:23:be:95:5a:4e:9a:6c:
47:a4:cc:a0:4b:ec:6b:b2:6e:ff:e6:1c:56:c2:bf:
32:cd:b1:39:de:ce:21:a3:96:49:31:76:a4:13:ca:
d9:bd:f7:fe:95:4e:67:86:39:b7:90:85:cb:79:c3:
d0:93:b8:10:eb:80:2a:00:07:f1:b0:ba:6d:3e:17:
9b:93:19:c7:89:9a:f4:57:85:52:b1:25:a2:22:c4:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:14:87:C5:02:25:7D:E1:1E:7E:1A:9A:28:DF:20:50:D6:D4:CF:D1
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/LxSHxQIlfeEefhqaKN8gUNbUz9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.9.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:c2:a7:0b:6f:30:97:8a:a3:26:5f:7e:c1:91:db:e5:ee:67:
f6:60:6c:aa:5c:6f:af:89:3a:6d:79:43:8d:f9:a5:16:a6:08:
83:0a:0f:f7:19:f4:a3:71:89:27:f7:04:05:2e:fe:89:ee:28:
b3:d7:00:b7:e6:5e:0b:53:f8:18:07:66:25:a2:34:ae:7b:bc:
28:4a:01:4c:5d:65:15:b8:03:b7:85:84:5d:89:f2:34:93:7b:
3a:d3:2c:7e:b0:11:3e:8c:a8:63:95:ba:5b:39:6e:ab:71:db:
b7:c5:96:d4:fd:cb:91:f4:17:06:6f:3b:56:ce:b8:22:d1:af:
c4:70:74:86:d8:76:38:be:02:c8:ad:26:4e:fb:6b:7c:f3:03:
f1:17:3b:bb:a4:14:eb:ae:f2:0c:f7:0e:36:4a:cb:f9:04:2e:
eb:04:bf:cd:05:1d:36:6f:ef:64:44:54:ad:36:96:90:d6:bf:
e6:b4:6b:2e:9d:e6:ab:e2:6d:7d:c5:c4:84:9e:e8:a6:e7:eb:
5d:f6:a3:89:10:c6:49:6f:81:3c:5b:4a:58:eb:41:39:f3:a8:
fb:d5:5a:df:5e:f5:5a:5f:33:cf:d6:53:6a:d3:fa:cc:7f:7c:
89:8b:7c:19:f1:b8:a1:ac:9f:36:6a:24:f5:87:96:df:2f:c9:
16:11:c7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:54:23 2025 by rpki-client