Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/LraZY8bt30MwTSj5ISN1eFsbOAU.roa
File: LraZY8bt30MwTSj5ISN1eFsbOAU.roa (raw, json)
Hash identifier: +2rvYEvaEnPlQYfxFPrO0ZNPi0l0cVW6pKjKScbOXqw=
Subject key identifier: 2E:B6:99:63:C6:ED:DF:43:30:4D:28:F9:21:23:75:78:5B:1B:38:05
Certificate issuer: /CN=dd5b224b6593e558038a9e40e660c77142755c1b
Certificate serial: 0192B348AAF99C7AA8954C514711CEB4D8C5
Authority key identifier: DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/LraZY8bt30MwTSj5ISN1eFsbOAU.roa
Signing time: Tue 22 Oct 2024 08:12:16 +0000
ROA not before: Tue 22 Oct 2024 08:12:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13011
IP address blocks: 91.209.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:48:aa:f9:9c:7a:a8:95:4c:51:47:11:ce:b4:d8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5b224b6593e558038a9e40e660c77142755c1b
Validity
Not Before: Oct 22 08:12:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2eb69963c6eddf43304d28f9212375785b1b3805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:c4:7c:a1:f9:ef:62:6b:84:7e:10:10:65:
75:7f:fa:e2:c1:b4:8d:8a:19:88:10:19:76:41:73:
24:6a:e9:9f:52:23:cf:b0:29:04:cb:f9:6b:20:e1:
66:66:15:08:07:2b:d0:e7:23:80:b9:75:0e:f3:7b:
38:fd:be:17:5d:e2:db:6e:72:16:07:95:4e:3e:ed:
99:17:9b:11:86:7d:ad:39:a3:f3:db:6f:f0:de:80:
c1:3a:b0:4d:75:1a:74:a1:43:cb:a9:0b:ac:7e:bd:
2a:32:df:f1:9c:4b:89:47:15:cf:11:7c:e2:3c:3e:
2a:2b:97:a4:77:bd:3c:1d:a7:58:81:8e:b4:e7:f2:
49:0b:be:c0:89:1a:13:73:a6:07:84:58:cd:d2:62:
87:88:04:a3:9b:e1:57:b2:fe:48:c4:1e:76:7c:e5:
f9:4f:e9:d6:de:63:f1:a2:13:09:7f:34:5b:b5:04:
35:32:c3:95:c2:5f:63:17:60:f6:61:fd:05:fa:9e:
1a:9b:3c:17:dd:e5:55:d0:53:54:bc:b6:4d:57:b7:
8f:94:89:36:4c:28:f9:a1:3d:22:c6:cc:58:68:c4:
cc:1c:7d:bf:d6:70:db:37:f8:c6:7c:49:7e:c6:20:
da:43:28:27:f4:ce:e2:6d:f0:04:a4:b7:0f:45:d8:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B6:99:63:C6:ED:DF:43:30:4D:28:F9:21:23:75:78:5B:1B:38:05
X509v3 Authority Key Identifier:
keyid:DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/LraZY8bt30MwTSj5ISN1eFsbOAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.123.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0e:37:9a:ca:ab:f6:d1:49:01:e1:d4:c3:b9:80:e6:c8:a9:
c5:20:35:61:d4:03:ee:44:d1:3e:a4:e6:00:3b:8e:9d:38:52:
db:15:46:42:ea:d1:bc:96:e4:dc:15:18:1f:4b:92:1b:3a:ba:
ea:1a:25:03:2f:6e:a1:36:02:07:9b:f5:a9:c0:c7:c2:af:98:
e7:ce:8f:f7:b7:fc:86:8a:e4:7e:96:e2:3e:6b:d1:17:33:fa:
80:a9:38:81:ac:91:af:6f:3a:1b:1e:37:01:73:ce:80:46:56:
09:4e:0b:79:1a:fe:eb:7f:71:05:24:41:66:20:da:d0:cb:15:
00:5b:da:32:e6:1c:b4:b1:81:ab:9e:67:84:60:f7:e9:cc:40:
40:59:dc:c6:88:c5:79:f0:e9:86:c0:0a:c9:d8:a5:7d:d0:75:
52:c7:57:78:a5:d5:15:46:fe:50:27:e3:63:bb:6d:42:fc:44:
5d:a3:9d:65:f6:b3:f5:a0:55:16:e5:dc:33:94:91:0d:52:0b:
6e:21:44:d2:66:a0:d9:5b:c2:b2:a9:02:61:ed:78:17:da:ab:
f0:d0:f6:40:4e:54:17:80:7e:50:ed:9d:70:d9:fb:c1:40:f3:
23:85:d8:83:06:53:61:2f:e4:77:12:1b:f1:0b:17:3e:d2:20:
36:a4:c9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:01 2025 by rpki-client