Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Lrde6IElP0CSEoisBkdbFRn1Kvg.roa
File: Lrde6IElP0CSEoisBkdbFRn1Kvg.roa (raw, json)
Hash identifier: S1Ejvu5mUx3O2HNLevwYbMtSa47JSlrxSb9nKBIq43Q=
Subject key identifier: 2E:B7:5E:E8:81:25:3F:40:92:12:88:AC:06:47:5B:15:19:F5:2A:F8
Certificate issuer: /CN=464d733de81fbd486d442358e0c15370520f9312
Certificate serial: 01971C723079EAA8B5464AFA786C049A4C4B
Authority key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Lrde6IElP0CSEoisBkdbFRn1Kvg.roa
Signing time: Thu 29 May 2025 14:28:54 +0000
ROA not before: Thu 29 May 2025 14:28:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8241
IP address blocks: 195.146.64.0/19 maxlen: 19
213.181.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 29 May 2025 14:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:72:30:79:ea:a8:b5:46:4a:fa:78:6c:04:9a:4c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d733de81fbd486d442358e0c15370520f9312
Validity
Not Before: May 29 14:28:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2eb75ee881253f40921288ac06475b1519f52af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:8c:f2:6e:6b:57:19:85:d3:9a:a8:ce:15:
ea:6e:50:5b:2a:e8:b5:a6:67:95:3e:c3:80:11:60:
cf:35:60:b3:77:47:ad:a5:93:d6:48:0c:cc:30:5c:
c6:f3:32:6d:f8:8e:75:3d:8b:16:56:cd:1e:0b:dd:
b5:37:4e:3e:11:4b:9c:3f:04:89:92:3c:8b:4f:49:
0e:a5:3d:4c:5f:3f:fa:d2:a0:63:56:03:c8:dd:3d:
18:a7:8b:68:8e:53:27:49:8f:1c:b0:4d:2d:f0:5c:
e1:b3:e3:94:21:eb:38:80:2b:af:79:28:c3:67:49:
68:03:ed:fa:74:bb:7b:0f:1b:56:f1:f4:fc:b4:95:
91:5c:be:f1:af:28:84:24:82:9a:b7:e0:1a:d1:86:
f8:ff:df:df:df:47:95:ae:3d:ec:3d:35:6d:6f:95:
d0:52:d2:4e:f8:ff:d7:b6:f9:ed:c5:9e:47:7e:0d:
b8:18:56:a1:ff:6b:0b:8a:55:bf:1b:22:7e:53:8c:
5f:f0:c8:67:b4:e2:9b:ce:95:63:f0:81:ef:f4:34:
c8:bf:4f:47:5f:73:42:c0:2b:18:3d:3c:db:e9:86:
fe:7e:fc:e4:9f:f0:01:8d:96:26:e3:74:22:f0:16:
59:b7:b0:23:4b:2c:31:56:17:73:9a:4f:eb:0a:d4:
2e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B7:5E:E8:81:25:3F:40:92:12:88:AC:06:47:5B:15:19:F5:2A:F8
X509v3 Authority Key Identifier:
keyid:46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Lrde6IElP0CSEoisBkdbFRn1Kvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.146.64.0/19
213.181.16.0/22
Signature Algorithm: sha256WithRSAEncryption
59:c4:fd:95:05:91:27:e1:11:1f:29:2d:74:df:87:17:23:ca:
19:98:33:bf:c4:5d:3e:97:f4:64:9b:5f:b8:4b:b5:2f:b0:68:
51:fb:e1:84:ad:e6:33:e8:3d:c4:8f:f5:dd:e5:0c:32:2c:a6:
4f:f8:10:04:09:5f:97:6f:15:b4:cf:50:e2:27:36:f7:8f:d0:
df:b8:d2:b0:3c:d2:70:c1:c4:6a:ca:ff:78:f8:12:39:ae:67:
53:76:21:ed:ae:1c:c9:f7:9e:96:2f:02:7d:10:75:b2:88:9f:
c9:57:f1:70:70:c3:53:ac:25:b5:f0:a4:96:a8:eb:44:36:ba:
06:25:b2:3b:e5:ac:39:61:78:db:51:a1:df:ce:ce:df:30:01:
10:33:a1:8e:08:60:26:83:ab:0c:04:b1:8b:2d:0f:68:b7:e7:
24:ce:a2:e9:4c:ab:17:2a:76:0c:b7:5c:44:c2:fd:c6:f6:f9:
df:de:f2:10:28:75:44:19:d0:69:52:fd:76:ec:07:64:dd:ea:
68:c3:91:ed:96:0d:56:80:b6:e7:af:b7:db:51:4f:98:7a:67:
77:bc:db:c8:76:b8:d0:1e:34:a8:3f:62:70:7a:9a:2d:d0:e8:
ed:26:d6:54:48:c0:a0:f6:59:12:79:8b:6f:81:11:b2:ba:58:
ea:25:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:53:15 2025 by rpki-client