Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/LI3W9bAGcJfYeSECRSILu1bw8kk.roa
File: LI3W9bAGcJfYeSECRSILu1bw8kk.roa (raw, json)
Hash identifier: Wl5pxXd1n1csv2tQU5l7gpWl7BWI1Z8ORecwJV0UFps=
Subject key identifier: 2C:8D:D6:F5:B0:06:70:97:D8:79:21:02:45:22:0B:BB:56:F0:F2:49
Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial: 01942445187E879A69150B4E354C7BC62DD2
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/LI3W9bAGcJfYeSECRSILu1bw8kk.roa
Signing time: Wed 01 Jan 2025 23:48:15 +0000
ROA not before: Wed 01 Jan 2025 23:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198560
IP address blocks: 91.236.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 09:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:18:7e:87:9a:69:15:0b:4e:35:4c:7b:c6:2d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Validity
Not Before: Jan 1 23:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c8dd6f5b0067097d879210245220bbb56f0f249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:c3:a6:8a:6a:5d:d4:be:c2:c3:86:59:10:
c6:cd:3e:8c:76:14:0b:79:bd:e1:78:39:57:fe:58:
dd:2c:c9:2c:0a:1a:54:8a:01:4d:0e:fa:50:2b:47:
49:0d:97:a1:a4:28:ec:f2:b2:da:ad:b1:e1:2d:e6:
71:f6:1e:00:ef:1d:41:a0:7e:af:d5:69:79:a3:1e:
a3:a1:47:e7:e1:8a:51:1b:68:34:72:a0:9b:e9:71:
e2:d2:8c:6c:2a:35:55:56:de:5c:f2:6d:6d:6c:bc:
60:61:37:4c:e7:ad:b9:94:b4:38:42:69:e8:c7:b4:
fb:78:0f:d8:08:63:41:0f:ca:e3:9f:3c:ce:b3:bc:
3b:24:d7:bb:f7:76:3b:74:db:40:78:3a:06:0a:a6:
52:30:ce:62:f1:90:9e:61:4f:ad:8e:d4:b7:55:c0:
86:fc:0e:c7:ce:fb:7d:12:92:a5:c5:64:f6:75:14:
cf:f1:e9:a0:0c:bb:53:5d:fa:45:cb:6d:33:7f:1e:
85:6b:8f:02:11:2b:c7:2c:1c:77:83:29:5c:c1:55:
8d:1b:1a:95:55:02:d2:a7:90:41:a4:42:2e:86:56:
9d:ae:ce:bf:32:60:54:41:3e:52:3b:c0:57:b1:1b:
85:81:e1:c0:3a:27:4c:4e:95:44:9b:53:30:0f:f8:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8D:D6:F5:B0:06:70:97:D8:79:21:02:45:22:0B:BB:56:F0:F2:49
X509v3 Authority Key Identifier:
keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/LI3W9bAGcJfYeSECRSILu1bw8kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:21:59:7d:8f:f3:b7:de:1b:7d:92:87:82:d4:ab:ba:f7:8e:
d3:27:a9:7a:cf:ac:84:a1:a0:33:ac:6e:1b:ff:53:56:b8:65:
e2:f8:de:b9:9e:9a:b4:d4:4b:1b:bf:24:e2:4a:ec:3d:4d:65:
1f:29:7c:1a:bf:31:c4:f9:d5:57:d6:64:6c:56:c7:60:57:bb:
bd:e4:42:43:a2:1c:d1:8c:37:9d:15:7a:66:0e:68:2a:8d:08:
27:0f:56:74:ba:95:e5:57:fe:b8:5a:2d:a3:c5:1f:e0:d5:1d:
32:4b:c9:5a:73:67:0a:51:da:47:1c:64:3d:86:81:23:98:07:
8d:39:8c:d1:0d:74:8d:ea:6a:81:ed:d2:7e:7b:20:e2:d1:e4:
55:fc:07:22:72:f7:4c:b3:c8:1a:fa:8f:04:7f:b8:0e:7e:e1:
ff:c7:64:6c:68:e7:66:06:21:21:6e:96:0f:b1:44:30:44:bf:
99:09:78:fb:8e:a8:10:13:c7:f4:d1:f6:bf:82:a3:e2:7d:a7:
9a:15:32:51:03:18:be:39:4d:f5:11:ac:85:fe:f7:28:d5:18:
3c:0c:53:f2:f6:a2:a6:15:47:8e:60:7b:28:17:32:14:bd:5e:
d2:e3:fc:94:14:73:0e:87:5c:83:c0:8a:66:b3:aa:74:bb:5e:
05:a5:52:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:32:25 2025 by rpki-client