Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/LTzSDkHxLOB8aTPeokBz05tyc0U.roa
File: LTzSDkHxLOB8aTPeokBz05tyc0U.roa (raw, json)
Hash identifier: vh+rNdmjRZVk3PjNO1sJzwWZVfvk9muKSMQ51lHXhNA=
Subject key identifier: 2D:3C:D2:0E:41:F1:2C:E0:7C:69:33:DE:A2:40:73:D3:9B:72:73:45
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 01936FF8B3F23D8259882F2C8E133BE83CE6
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/LTzSDkHxLOB8aTPeokBz05tyc0U.roa
Signing time: Wed 27 Nov 2024 23:33:10 +0000
ROA not before: Wed 27 Nov 2024 23:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197075
IP address blocks: 185.25.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6f:f8:b3:f2:3d:82:59:88:2f:2c:8e:13:3b:e8:3c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Nov 27 23:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d3cd20e41f12ce07c6933dea24073d39b727345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:3a:6c:14:89:7a:54:a0:05:88:43:49:ae:
4c:4d:91:c3:fa:87:d5:63:cc:45:e5:4d:a5:e7:43:
6d:b0:34:ac:28:62:7d:62:fa:db:88:ce:75:13:00:
cd:23:99:e5:71:17:fe:a7:9e:7c:73:52:45:4f:b5:
14:b0:e9:f2:80:4c:01:92:ab:ea:5e:fd:88:eb:25:
f3:13:8f:15:a7:1d:4a:e4:db:04:9e:4e:ec:35:c5:
a9:46:a1:dd:c1:e9:2a:74:6d:a6:3c:1d:67:0d:51:
0e:c1:41:b3:e0:66:c0:8d:63:8f:bd:90:3e:75:6b:
8d:95:1f:ff:30:84:a3:c6:10:f2:ce:45:0d:e4:b3:
f4:b7:2c:3a:ce:f7:aa:94:6d:c9:23:41:9a:6e:18:
0a:53:52:ec:c9:67:4d:0e:60:0a:10:e8:b5:e9:b5:
23:d1:3e:6e:b4:13:9d:66:c5:7a:b0:90:d0:63:0b:
a2:7b:e5:8e:55:2e:28:3f:a0:59:62:6b:4f:cf:ba:
cb:c6:3e:e3:36:16:cd:0f:26:1e:bb:23:b4:5d:d0:
44:5b:45:9a:06:2c:5c:d7:ab:8c:96:9d:bb:d2:45:
da:d9:a5:0c:ef:95:cf:00:b6:d3:1b:9f:e1:ab:0c:
d2:0c:13:15:fa:66:8e:b0:ea:d0:69:81:ae:66:c2:
3a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3C:D2:0E:41:F1:2C:E0:7C:69:33:DE:A2:40:73:D3:9B:72:73:45
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/LTzSDkHxLOB8aTPeokBz05tyc0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.233.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f7:d5:b6:79:08:68:5a:fe:ef:df:3e:34:7f:ac:57:53:3f:
3d:98:74:e6:53:c0:9b:ec:8d:93:d2:21:62:e6:0b:42:9b:af:
d2:c0:b9:1f:dc:c3:4d:95:01:a1:12:ab:9c:4d:14:83:21:93:
3d:a1:ff:22:86:99:84:06:a1:de:83:82:61:84:81:52:35:ef:
1a:01:49:d2:2a:34:13:0e:96:9c:8d:b4:73:8f:c0:58:41:1d:
44:ba:5e:05:da:f7:fd:d6:dd:39:d8:96:87:48:4a:a6:cf:2c:
f2:ad:f9:dd:ef:fe:bd:ee:34:db:00:9b:85:fe:9f:f1:fc:bf:
73:0a:24:35:bc:df:c8:1a:a9:15:f9:37:04:93:d7:1c:7d:17:
3b:af:69:86:9a:29:d5:e3:6f:0c:72:95:1b:c5:b5:25:30:79:
02:dd:8c:24:86:3a:02:a5:24:7f:e3:96:c5:4d:9f:ab:e6:68:
1f:42:4f:ca:f6:b3:06:c6:2e:b8:24:8f:a0:e0:df:5b:2c:60:
3e:56:db:4b:96:7b:7d:46:d3:10:77:71:59:68:ec:18:15:44:
72:77:55:40:87:0b:9b:15:47:1d:75:4d:76:da:d0:ab:02:82:
d1:f9:93:d6:06:e0:fa:47:6f:49:96:3c:cd:24:40:e4:17:70:
4e:4d:2d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:50 2025 by rpki-client