Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LGOehu9_YyfeUSJNZi7Cgk0FQqk.roa
File: LGOehu9_YyfeUSJNZi7Cgk0FQqk.roa (raw, json)
Hash identifier: F4cvHxpqpW/dQYikpYl1PyrnOv3m6fTBVjMNSC0jTA4=
Subject key identifier: 2C:63:9E:86:EF:7F:63:27:DE:51:22:4D:66:2E:C2:82:4D:05:42:A9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01957603922187F28198AF6D18625D42FD95
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LGOehu9_YyfeUSJNZi7Cgk0FQqk.roa
Signing time: Sat 08 Mar 2025 13:48:20 +0000
ROA not before: Sat 08 Mar 2025 13:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 82.152.131.0/24 maxlen: 24
82.153.50.0/24 maxlen: 24
213.218.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 21:15:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:76:03:92:21:87:f2:81:98:af:6d:18:62:5d:42:fd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 8 13:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c639e86ef7f6327de51224d662ec2824d0542a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a6:c6:16:38:d2:08:38:21:ea:0a:88:f3:b3:
15:d7:ca:7d:a3:31:33:5e:cc:4c:bf:73:00:e2:2b:
2b:5a:3a:1a:f2:ae:d6:0a:e4:a3:ff:01:88:83:4e:
08:ff:3a:88:e2:49:ab:78:4e:dd:8a:4d:ef:9b:38:
32:3a:5e:c0:99:6d:e9:b6:57:5d:a5:52:b3:d2:7b:
de:4b:0c:16:2f:96:d4:6a:ff:5d:0c:1b:87:d8:62:
5a:7d:b5:49:15:23:82:6e:7a:61:37:cd:de:3a:eb:
7d:79:b7:72:69:dd:81:77:61:9d:ad:6a:09:d6:5e:
bb:82:71:76:2f:3a:5e:2b:3b:d7:bb:cc:1b:37:71:
15:51:f5:28:98:fd:43:76:33:ad:43:fd:d1:c7:58:
89:5c:56:b7:26:e2:0c:79:fb:3a:33:61:d4:20:74:
19:7e:71:ec:c6:e4:77:11:1f:0a:0f:f0:d6:0b:c9:
38:59:7d:b8:b5:eb:04:eb:67:c2:0a:c9:4c:43:6d:
d7:b9:73:11:9e:94:e3:7b:25:e6:3f:85:17:d4:0b:
5d:0e:b7:c9:08:01:46:0c:f6:43:63:77:bb:3f:2d:
a3:0b:f0:9b:04:33:76:8a:72:86:c7:b7:f9:0a:95:
38:84:95:b8:4a:45:f9:1c:5d:08:39:12:a6:57:b5:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:63:9E:86:EF:7F:63:27:DE:51:22:4D:66:2E:C2:82:4D:05:42:A9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LGOehu9_YyfeUSJNZi7Cgk0FQqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.131.0/24
82.153.50.0/24
213.218.248.0/24
Signature Algorithm: sha256WithRSAEncryption
75:62:a6:2f:9c:cb:c6:73:16:b5:34:29:ed:dc:84:2b:19:b9:
42:9b:4d:f9:d9:d1:1b:6c:1e:66:aa:e4:c5:bf:14:4f:8b:83:
b8:81:5b:3b:91:5b:11:bd:84:61:fa:c9:3e:75:92:28:6d:b9:
1b:ff:c6:4f:09:82:73:e6:da:0b:f2:09:47:48:6f:79:af:8a:
13:81:78:e9:7b:8e:c3:8b:3b:8a:25:8f:e9:2a:2b:ce:3b:d0:
79:f1:81:9a:25:bb:0c:12:3a:7c:46:15:17:8c:2e:ea:22:78:
89:e3:d3:c7:cc:ed:3a:37:65:26:3d:a4:50:ed:fc:5c:04:8d:
45:1d:7e:0b:74:b7:1f:bd:a2:31:bb:1c:be:d4:4b:c7:f6:ac:
be:ff:cb:54:a1:94:a1:22:1f:13:26:39:d6:e6:d7:f8:55:2d:
ba:12:e5:8b:05:05:15:56:7d:a4:cf:0a:eb:a6:c9:c3:59:87:
c4:0b:43:b5:fb:71:ee:0b:c8:e9:2c:1c:f5:bc:00:58:59:5d:
01:09:6a:e0:c7:1a:0f:14:75:86:30:56:d7:e5:2e:42:9d:35:
4b:30:48:d3:f1:c5:41:bd:95:21:da:6a:01:00:41:33:86:71:
e2:8f:81:41:ac:f9:24:2e:e6:63:0e:d1:ad:85:03:87:90:44:
1a:80:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:28:59 2025 by rpki-client