Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LTrw5_3VWQpHtR_rbRruIgqqDqk.roa
File: LTrw5_3VWQpHtR_rbRruIgqqDqk.roa (raw, json)
Hash identifier: J5HjvTsj/8ID9L/i/VCbk08HelFTyXUIirqVwYPSi7M=
Subject key identifier: 2D:3A:F0:E7:FD:D5:59:0A:47:B5:1F:EB:6D:1A:EE:22:0A:AA:0E:A9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01915138737CD4AFFED68E99806B221CBBAC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LTrw5_3VWQpHtR_rbRruIgqqDqk.roa
Signing time: Wed 14 Aug 2024 14:08:59 +0000
ROA not before: Wed 14 Aug 2024 14:08:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151487
IP address blocks: 213.218.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 12:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:51:38:73:7c:d4:af:fe:d6:8e:99:80:6b:22:1c:bb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 14 14:08:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d3af0e7fdd5590a47b51feb6d1aee220aaa0ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:94:83:cc:c0:7b:79:c4:38:27:d8:22:54:
a5:a5:4f:57:4a:e1:99:a3:a2:e0:8d:3e:64:46:23:
c3:31:58:e8:bc:40:43:d4:c5:4f:0e:7d:e2:d4:cc:
f3:bc:78:53:d9:91:4f:2f:99:80:f2:e3:70:57:b9:
58:c6:d5:41:47:b4:e9:e9:94:28:b1:e3:13:65:7b:
60:e6:25:f9:71:da:51:26:53:ea:48:b4:5a:7a:11:
10:d0:7e:bb:09:8a:4d:a4:36:93:cf:87:43:db:cb:
4b:30:ec:63:43:89:3c:af:17:eb:c0:d7:37:59:37:
13:b5:d2:f6:e7:bc:e3:6c:95:92:66:c2:93:c7:94:
41:3b:73:2f:eb:39:48:2d:74:a8:24:93:35:b0:d7:
ce:76:c9:46:d2:4c:b5:ae:a3:d7:31:4e:24:bc:5f:
a2:7e:76:ba:5a:c9:98:9c:2d:3c:f1:24:0a:7e:49:
5e:85:72:c2:a7:2f:d7:c8:5f:c9:12:d0:7e:d5:78:
6b:b0:5f:dd:60:35:7d:8c:51:6b:52:a4:32:32:9c:
c2:c0:37:b5:e4:b2:5d:9c:76:d2:86:5f:e3:64:0d:
dd:3d:37:12:45:d2:00:6e:8e:f8:8a:94:8a:0c:64:
8c:af:e9:2c:bf:14:32:19:37:be:c3:09:4f:af:75:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3A:F0:E7:FD:D5:59:0A:47:B5:1F:EB:6D:1A:EE:22:0A:AA:0E:A9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LTrw5_3VWQpHtR_rbRruIgqqDqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.238.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:75:7e:2c:dc:35:25:5f:71:c2:48:f2:be:5b:0e:7f:b9:08:
07:7d:ad:08:17:d6:00:d9:d2:47:9e:b1:ff:f5:ea:c9:61:ad:
96:53:7d:6a:ef:c7:88:e5:30:00:4e:37:8f:ea:42:da:a1:bd:
07:69:3c:d8:5e:f0:b8:c8:f8:bf:dc:6d:21:58:a4:2f:52:b1:
d4:71:21:8e:02:11:07:70:bf:fc:04:ca:7a:64:7d:3c:30:3c:
00:a3:ec:42:df:ce:f9:89:37:57:97:94:22:ca:bf:08:73:6b:
8a:eb:ba:5a:09:d3:8f:01:de:12:02:e4:41:1b:76:5f:8a:8a:
2b:f4:ed:d6:7a:c9:62:54:a2:7c:b4:c3:09:97:f1:fa:37:de:
ce:03:c0:dc:81:a9:c4:18:cd:56:ab:de:4e:46:9f:ed:44:b1:
05:1f:f1:ff:96:c8:8c:10:24:01:9c:c2:a8:9b:17:47:cb:f1:
3f:25:bd:69:83:57:4b:29:5f:2d:80:d1:f9:22:5f:cc:1b:d3:
93:58:e1:8e:60:b9:f9:16:d1:e4:3d:d5:2b:6a:58:e3:d0:2d:
37:75:a2:56:3a:29:51:f6:8a:be:56:7f:88:f7:ec:44:e6:a3:
0b:b9:e7:ca:ee:20:69:8d:62:fc:d1:b3:23:25:01:5a:e7:4d:
46:c7:83:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:18:16 2025 by rpki-client