Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/LYLa5DubECNy1HNUguSXDbhqS74.roa
File: LYLa5DubECNy1HNUguSXDbhqS74.roa (raw, json)
Hash identifier: ktPeOUR9U7C8KWda/9wxyA6vqCRi0EL0s1XXHjiqR04=
Subject key identifier: 2D:82:DA:E4:3B:9B:10:23:72:D4:73:54:82:E4:97:0D:B8:6A:4B:BE
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 01946553657196DFCB85638BE4FB1A434DA7
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/LYLa5DubECNy1HNUguSXDbhqS74.roa
Signing time: Tue 14 Jan 2025 14:59:11 +0000
ROA not before: Tue 14 Jan 2025 14:59:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203217
IP address blocks: 185.112.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 15:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:53:65:71:96:df:cb:85:63:8b:e4:fb:1a:43:4d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Jan 14 14:59:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d82dae43b9b102372d4735482e4970db86a4bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:67:b3:3a:de:2f:22:44:90:4b:78:c2:8f:
05:b5:b6:c5:db:17:0c:de:88:10:5a:c3:58:85:53:
93:20:66:d3:ac:1f:6e:4e:35:ad:22:98:19:75:4f:
b1:34:72:37:e7:33:df:98:17:3b:4d:01:79:e5:4b:
67:c8:0e:4d:c0:35:21:3e:86:ae:cb:78:1b:50:85:
42:05:85:c6:e6:f6:fe:bb:2b:23:1b:ca:01:0f:20:
58:3e:de:68:a0:48:a1:8a:db:de:b6:67:b4:0d:9d:
7e:ca:e2:a3:a2:c5:de:52:df:24:2f:a3:5e:00:14:
0d:0a:4c:42:7e:73:df:44:3e:38:96:03:3c:ea:95:
cc:2c:1a:de:ad:33:ea:ec:f6:0d:68:14:09:7e:24:
6b:e9:7b:06:6b:17:a0:5f:8f:d2:b5:20:bc:fa:79:
da:9a:bb:ae:77:d4:a3:e3:2b:75:b8:1c:56:4f:e0:
5f:82:90:9a:c2:d7:10:dd:1d:8a:9f:50:a4:8c:51:
6e:a1:0a:8b:71:07:9e:7c:47:87:43:e3:93:a7:1c:
68:84:03:fb:d1:12:39:3c:08:5c:03:88:c5:6e:8d:
e0:2a:99:b0:50:33:15:b9:ca:f8:46:28:66:44:b1:
ff:92:52:58:ed:6c:a4:3a:af:ce:e2:e7:a1:17:74:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:82:DA:E4:3B:9B:10:23:72:D4:73:54:82:E4:97:0D:B8:6A:4B:BE
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/LYLa5DubECNy1HNUguSXDbhqS74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.190.0/24
Signature Algorithm: sha256WithRSAEncryption
43:da:ae:88:35:97:93:56:74:65:be:d0:b7:17:13:58:6e:e3:
40:de:1e:73:8c:d8:ea:8a:dd:54:92:28:37:c1:f7:0b:e3:f5:
48:e4:fe:5a:3c:68:d2:23:a3:34:1a:b3:ff:f8:a0:46:0b:06:
20:ac:e1:83:c3:17:a6:94:89:a8:3b:30:21:b5:1a:39:b1:f9:
f7:ba:a4:96:a2:b6:a1:b2:04:f7:e7:12:bb:ff:e4:8f:4b:8e:
d3:e5:ae:95:f7:01:36:56:13:a2:27:7a:2a:38:0d:d8:a7:ba:
0e:2d:9c:a3:a9:21:33:50:08:df:31:50:0f:5c:5d:1e:74:e9:
ea:2f:c4:ee:fc:8f:d4:aa:16:6c:d4:4d:e2:58:56:ec:99:9e:
01:ed:ec:fb:6e:b4:9b:17:50:2e:f0:76:10:f3:6b:db:ad:95:
dd:60:18:3e:bc:9d:ac:b0:b9:4f:7f:b0:cc:98:ad:dd:04:e2:
30:55:ea:1c:d9:62:76:16:78:9d:1f:32:11:4c:04:b2:4d:22:
5e:dc:21:a3:ae:15:17:ef:07:65:17:d0:c5:47:11:90:a6:84:
1c:94:d4:a9:95:4c:78:71:c2:61:d0:8e:e3:0d:ea:57:64:02:
13:a7:91:cf:4b:5b:5e:80:87:78:3e:c5:85:c6:72:ec:0a:5b:
2f:f3:2d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:23:45 2025 by rpki-client