Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/lPr8ffRxsFkeErgCTAksae7j5_8.roa
File: lPr8ffRxsFkeErgCTAksae7j5_8.roa (raw, json)
Hash identifier: v2dmbIePJiAtep1B+4TykktUOcfyrxBWWU75RDqfT64=
Subject key identifier: 94:FA:FC:7D:F4:71:B0:59:1E:12:B8:02:4C:09:2C:69:EE:E3:E7:FF
Certificate issuer: /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Certificate serial: 018CC3B7058CF580E59BD8C955A7A9ABC9AD
Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/lPr8ffRxsFkeErgCTAksae7j5_8.roa
Signing time: Mon 01 Jan 2024 06:30:00 +0000
ROA not before: Mon 01 Jan 2024 06:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61423
IP address blocks: 194.124.145.0/24 maxlen: 24
194.124.146.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:05:8c:f5:80:e5:9b:d8:c9:55:a7:a9:ab:c9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Validity
Not Before: Jan 1 06:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94fafc7df471b0591e12b8024c092c69eee3e7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:55:34:2d:57:f9:34:88:66:18:ed:2b:d2:
35:c5:da:c1:0d:8f:13:8c:b1:cd:a1:89:de:5e:e6:
8d:f5:fb:40:ab:ee:44:21:62:17:2d:85:13:39:25:
79:23:4e:51:58:69:3d:2a:30:26:56:ce:77:fe:7b:
9e:1f:a0:d9:c0:81:90:9d:de:d7:8e:39:06:ff:0f:
17:c6:a1:42:29:88:02:9b:e0:ad:d3:9e:64:9c:98:
87:d2:b2:67:40:a2:7b:01:b4:70:0c:a7:fe:4f:76:
e7:c6:eb:05:0e:d8:c2:da:be:c4:e7:78:ee:74:36:
35:bb:c2:5f:ec:11:da:19:ba:f6:39:ae:38:8e:6f:
42:6f:75:69:68:07:c2:58:5b:34:11:99:56:bf:e5:
82:0a:3c:cc:ac:40:d1:4e:99:93:cd:aa:59:68:0a:
5c:bd:88:f9:c0:49:aa:74:1d:d4:9f:48:64:97:7f:
a6:cf:10:3c:c4:75:24:5e:9a:ad:47:39:21:d5:85:
2b:e3:3b:c0:9a:2e:f2:ff:07:af:87:f9:5d:f0:c4:
2f:e0:cf:f2:86:bf:0a:44:d1:a7:9a:03:78:3f:d4:
d9:ca:1e:16:08:d7:d9:69:63:7e:d6:f2:5b:06:b9:
3f:62:cb:a0:33:5d:21:b7:7c:70:36:36:2a:21:dd:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FA:FC:7D:F4:71:B0:59:1E:12:B8:02:4C:09:2C:69:EE:E3:E7:FF
X509v3 Authority Key Identifier:
keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/lPr8ffRxsFkeErgCTAksae7j5_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.145.0-194.124.147.255
Signature Algorithm: sha256WithRSAEncryption
85:4c:81:c0:7b:e5:b7:7b:09:6b:8d:95:fb:69:e6:9f:d1:12:
74:18:96:48:c1:86:e9:af:17:90:0b:49:f8:d8:b6:83:72:9f:
a3:bd:02:53:3d:0f:11:7a:f5:7e:08:15:75:ea:24:70:9e:88:
a3:fb:49:66:e6:30:b4:34:06:63:97:b4:d9:c6:b8:36:ba:49:
fb:58:bd:98:e4:81:8e:16:19:27:88:c7:6f:3c:00:ea:8a:ed:
04:f1:7c:8b:e5:89:78:9c:81:8b:20:99:8d:32:d8:ac:94:c9:
43:c1:9f:21:f3:ff:1b:15:b2:6a:9f:66:5d:58:9f:62:9e:76:
91:d6:ef:5d:73:75:50:d7:61:7b:fe:ce:54:26:1f:c1:07:dd:
02:20:3a:02:37:63:a8:9f:d3:52:49:b5:47:ec:e7:fe:2b:f3:
06:53:84:a3:2c:73:25:c3:b9:ee:dd:04:5b:12:ce:4b:02:9f:
dd:bc:e1:3d:c3:41:c8:b3:53:96:92:85:d3:0f:22:e8:86:90:
b4:3b:93:c3:1b:95:1f:32:4e:76:12:c7:81:13:1d:62:f0:17:
72:1b:5d:fc:9f:c7:e0:f1:1f:74:78:9e:14:c0:a9:54:42:91:
45:16:9b:f1:ac:f9:31:83:b2:5a:80:7b:e7:37:87:b9:01:00:
4a:e1:36:aa
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzDtwWM9YDlm9jJVaepq8mtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTE3ZWQ0MDc0MzJjNDE4YjFjOWVhZjYxZmQxY2ExY2Jm
ZjZhNzQwHhcNMjQwMTAxMDYzMDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGZhZmM3ZGY0NzFiMDU5MWUxMmI4MDI0YzA5MmM2OWVlZTNlN2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsdVNC1X+TSIZhjtK9I1xdrBDY8T
jLHNoYneXuaN9ftAq+5EIWIXLYUTOSV5I05RWGk9KjAmVs53/nueH6DZwIGQnd7X
jjkG/w8XxqFCKYgCm+Ct055knJiH0rJnQKJ7AbRwDKf+T3bnxusFDtjC2r7E53ju
dDY1u8Jf7BHaGbr2Oa44jm9Cb3VpaAfCWFs0EZlWv+WCCjzMrEDRTpmTzapZaApc
vYj5wEmqdB3Un0hkl3+mzxA8xHUkXpqtRzkh1YUr4zvAmi7y/wevh/ld8MQv4M/y
hr8KRNGnmgN4P9TZyh4WCNfZaWN+1vJbBrk/YsugM10ht3xwNjYqId1cSwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJT6/H30cbBZHhK4AkwJLGnu4+f/MB8GA1UdIwQY
MBaAFCqhftQHQyxBixyer2H9HKHL/2p0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81NGQ0MzctYTI3Ny00MWJkLTk4OGYt
OTUwZjBhMDEwMWE5LzEvbFByOGZmUnhzRmtlRXJnQ1RBa3NhZTdqNV84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni81NGQ0MzctYTI3Ny00MWJkLTk4OGYtOTUwZjBhMDEwMWE5
LzEvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCfJED
BALCfJAwDQYJKoZIhvcNAQELBQADggEBAIVMgcB75bd7CWuNlftp5p/REnQYlkjB
humvF5ALSfjYtoNyn6O9AlM9DxF69X4IFXXqJHCeiKP7SWbmMLQ0BmOXtNnGuDa6
SftYvZjkgY4WGSeIx288AOqK7QTxfIvliXicgYsgmY0y2KyUyUPBnyHz/xsVsmqf
Zl1Yn2KedpHW711zdVDXYXv+zlQmH8EH3QIgOgI3Y6if01JJtUfs5/4r8wZThKMs
cyXDue7dBFsSzksCn9284T3DQcizU5aShdMPIuiGkLQ7k8MblR8yTnYSx4ETHWLw
F3IbXfyfx+DxH3R4nhTAqVRCkUUWm/Gs+TGDslqAe+c3h7kBAErhNqo=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:24 2025 by rpki-client