Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/ls4zurHmyZnA_OtDvzbFBm5SII0.roa
File: ls4zurHmyZnA_OtDvzbFBm5SII0.roa (raw, json)
Hash identifier: jnUv+XSzOIGewtqpfLkwh3uIRdz3GYsN+l0kn7+th+E=
Subject key identifier: 96:CE:33:BA:B1:E6:C9:99:C0:FC:EB:43:BF:36:C5:06:6E:52:20:8D
Certificate issuer: /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Certificate serial: 018CC86FA90C8B952F791C68676A82D150D6
Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/ls4zurHmyZnA_OtDvzbFBm5SII0.roa
Signing time: Tue 02 Jan 2024 04:30:10 +0000
ROA not before: Tue 02 Jan 2024 04:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50602
IP address blocks: 109.205.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:a9:0c:8b:95:2f:79:1c:68:67:6a:82:d1:50:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Validity
Not Before: Jan 2 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96ce33bab1e6c999c0fceb43bf36c5066e52208d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a8:f5:40:f1:ef:7f:33:4c:ab:cd:b4:06:b2:
fc:5f:0e:48:34:2c:df:e5:69:c3:cf:7f:37:0a:71:
aa:91:01:9b:d6:70:fd:d3:89:d6:5b:f0:03:99:79:
a7:ee:df:4a:44:be:9a:0f:77:e1:03:a1:27:fe:a0:
ec:20:a6:f4:74:0e:95:76:07:e4:c3:b3:fd:aa:98:
c8:95:29:94:f0:c5:d8:e1:3d:d5:c4:21:d1:8b:db:
4f:e0:0b:a8:00:7b:c5:f6:b6:94:ee:bd:ac:ce:43:
dd:42:98:7a:08:29:f2:0b:81:29:64:23:22:75:4b:
01:f6:d5:e8:e4:46:25:f7:b0:0c:00:ec:31:4b:db:
e6:79:96:d4:69:33:6e:b3:e7:23:e3:76:4b:81:c2:
99:70:5f:c8:c8:60:34:12:15:1e:4d:3d:3d:a9:33:
7b:db:c9:f4:3f:33:41:09:d2:fa:8a:27:bc:b7:78:
fc:ee:e8:f7:21:f5:9a:02:89:db:83:5b:15:e9:4d:
49:98:f0:12:3c:18:38:0b:e8:bb:cd:4d:56:c2:d5:
02:37:5a:77:77:6c:e6:60:5d:9c:8f:84:76:da:be:
4e:38:68:63:a0:0b:0b:2c:55:e0:9a:55:07:1c:f4:
b3:6f:97:a0:74:97:de:86:ca:a5:85:30:a5:49:a1:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CE:33:BA:B1:E6:C9:99:C0:FC:EB:43:BF:36:C5:06:6E:52:20:8D
X509v3 Authority Key Identifier:
keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/ls4zurHmyZnA_OtDvzbFBm5SII0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f1:30:ac:f2:d5:33:05:4b:66:52:c0:9b:27:19:aa:7f:42:
ed:7f:7d:2e:e4:4b:3c:5d:e7:a3:24:c3:ef:db:e7:bd:6a:79:
10:a4:ea:9a:46:cb:02:81:e2:6a:ff:7d:f9:d0:0f:0e:ac:cd:
9a:29:67:a7:50:53:6e:2f:b1:95:7f:1e:49:ba:e9:47:fe:2d:
83:78:43:10:bb:82:e4:e0:f2:5f:cf:a7:06:b4:09:fe:37:5a:
df:1a:1f:74:13:1a:0a:b4:b7:df:9b:8d:ed:a4:bb:85:b1:c8:
ca:e3:8f:30:1e:a2:b6:49:54:e8:30:5d:0e:a5:ac:71:b8:01:
3e:bd:7d:02:8c:a0:f2:0c:06:ef:04:08:71:e1:5a:64:9b:a9:
5b:a7:53:38:9a:fd:25:46:17:c8:03:41:2c:48:ec:01:76:4a:
46:73:b1:c3:f5:50:f0:23:4f:62:be:4d:94:d9:b5:ae:66:03:
cb:ef:23:21:f2:1c:be:0a:aa:0d:b3:64:5c:46:70:37:67:05:
b2:bc:00:6b:f1:86:9f:6a:92:34:4f:56:35:84:12:cb:25:db:
6f:d5:98:15:eb:7b:49:eb:91:0f:81:c7:ca:23:4a:28:fd:f7:
09:78:56:93:01:3d:2b:31:ea:54:f1:a6:4b:fa:ef:40:11:a1:
4d:9e:50:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb6kMi5UveRxoZ2qC0VDWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNGE0N2Q1ODJiYjBlOTY4MGY4OTI1OGFiOTZkMDU4Njdk
MzUyZWYwHhcNMjQwMTAyMDQzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmNlMzNiYWIxZTZjOTk5YzBmY2ViNDNiZjM2YzUwNjZlNTIyMDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqj1QPHvfzNMq820BrL8Xw5INCzf
5WnDz383CnGqkQGb1nD904nWW/ADmXmn7t9KRL6aD3fhA6En/qDsIKb0dA6Vdgfk
w7P9qpjIlSmU8MXY4T3VxCHRi9tP4AuoAHvF9raU7r2szkPdQph6CCnyC4EpZCMi
dUsB9tXo5EYl97AMAOwxS9vmeZbUaTNus+cj43ZLgcKZcF/IyGA0EhUeTT09qTN7
28n0PzNBCdL6iie8t3j87uj3IfWaAonbg1sV6U1JmPASPBg4C+i7zU1WwtUCN1p3
d2zmYF2cj4R22r5OOGhjoAsLLFXgmlUHHPSzb5egdJfehsqlhTClSaGiAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJbOM7qx5smZwPzrQ782xQZuUiCNMB8GA1UdIwQY
MBaAFFpKR9WCuw6WgPiSWKuW0Fhn01LvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTct
NmIwMDY1NTA4OTk2LzEvbHM0enVySG15Wm5BX090RHZ6YkZCbTVTSUkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTctNmIwMDY1NTA4OTk2
LzEvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc0fMA0G
CSqGSIb3DQEBCwUAA4IBAQAc8TCs8tUzBUtmUsCbJxmqf0Ltf30u5Es8XeejJMPv
2+e9ankQpOqaRssCgeJq/3350A8OrM2aKWenUFNuL7GVfx5JuulH/i2DeEMQu4Lk
4PJfz6cGtAn+N1rfGh90ExoKtLffm43tpLuFscjK448wHqK2SVToMF0OpaxxuAE+
vX0CjKDyDAbvBAhx4Vpkm6lbp1M4mv0lRhfIA0EsSOwBdkpGc7HD9VDwI09ivk2U
2bWuZgPL7yMh8hy+CqoNs2RcRnA3ZwWyvABr8YafapI0T1Y1hBLLJdtv1ZgV63tJ
65EPgcfKI0oo/fcJeFaTAT0rMepU8aZL+u9AEaFNnlBT
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:00:17 2025 by rpki-client