Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/lFNYHlLDof3oDr3CFoTchrcoaBM.roa
File: lFNYHlLDof3oDr3CFoTchrcoaBM.roa (raw, json)
Hash identifier: Bv9j1aNTtdkwEwDLE5uT7UlHNC/QmKIRQMxRa2amiDk=
Subject key identifier: 94:53:58:1E:52:C3:A1:FD:E8:0E:BD:C2:16:84:DC:86:B7:28:68:13
Certificate issuer: /CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Certificate serial: 0192A58B35DB703F038181257D890C7BBA53
Authority key identifier: BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/lFNYHlLDof3oDr3CFoTchrcoaBM.roa
Signing time: Sat 19 Oct 2024 16:10:16 +0000
ROA not before: Sat 19 Oct 2024 16:10:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60064
IP address blocks: 91.239.55.0/24 maxlen: 24
185.63.252.0/24 maxlen: 24
185.63.253.0/24 maxlen: 24
185.63.254.0/24 maxlen: 24
185.63.255.0/24 maxlen: 24
2a04:f780::/32 maxlen: 32
2a04:f781::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a5:8b:35:db:70:3f:03:81:81:25:7d:89:0c:7b:ba:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Validity
Not Before: Oct 19 16:10:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9453581e52c3a1fde80ebdc21684dc86b7286813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:eb:8e:4d:84:85:09:53:53:f8:0b:e7:da:
ee:42:5a:bc:e6:e2:a7:ff:0c:3c:67:6f:33:be:58:
7e:c5:ff:fb:16:0e:c4:31:9d:de:1b:19:0d:59:ab:
2b:45:45:a8:6a:1b:a0:ef:90:e1:3b:62:ce:b4:d4:
e1:02:bd:c8:bc:84:b7:b1:16:d0:41:36:3c:bd:cb:
b2:0f:7e:8e:d1:fc:c1:04:3c:77:a8:ab:72:cd:82:
4a:95:c2:28:ad:70:7f:2d:dc:7a:93:9f:5e:3e:8d:
05:1e:dd:61:87:84:59:0c:cf:a1:3a:9d:39:c0:36:
bd:41:a9:02:b7:00:0e:40:4d:5d:82:00:9c:b0:8c:
23:50:c8:37:9c:4b:57:3d:14:ff:cb:33:7e:f3:98:
de:fe:17:4f:5f:a6:d8:9c:80:ca:c3:19:0c:02:71:
56:36:9f:2d:be:9a:16:0d:e2:35:81:82:34:ca:52:
59:d9:b7:da:00:e6:8d:ab:a6:35:13:17:b8:71:ad:
34:db:fb:c2:e6:ad:54:2c:fe:c3:36:0b:87:d6:6b:
21:68:43:69:31:75:91:86:7d:1e:04:ba:43:21:ce:
cc:75:e3:8d:90:e5:df:f5:34:c6:17:fb:33:db:17:
d9:5f:d1:11:30:7d:13:30:96:43:b0:30:25:4d:03:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:53:58:1E:52:C3:A1:FD:E8:0E:BD:C2:16:84:DC:86:B7:28:68:13
X509v3 Authority Key Identifier:
keyid:BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/lFNYHlLDof3oDr3CFoTchrcoaBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.55.0/24
185.63.252.0/22
IPv6:
2a04:f780::-2a04:f781:ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
20:96:31:21:ce:a8:cf:0a:2f:86:d3:40:53:aa:97:58:0b:54:
5d:86:e8:0f:19:65:87:ef:10:fa:87:c7:23:6a:a1:4c:3b:ec:
02:c5:68:b0:3c:8c:c4:86:a3:89:99:af:e4:34:66:19:ce:4f:
19:97:ba:2f:03:d7:ec:d0:0c:bb:b7:a7:9a:09:b4:ba:bf:f6:
93:3c:18:a5:bd:3d:36:a7:3a:36:04:bc:60:a7:f2:d4:02:22:
f7:98:ba:4c:5f:ce:16:de:1e:9d:5f:5c:f1:a7:4c:73:0f:9b:
89:31:72:e8:f1:5d:32:80:c6:4a:a5:7f:76:66:07:fd:e6:2b:
a6:02:6c:0c:97:91:54:e3:2f:ce:2c:59:12:e4:5a:1d:10:a1:
c5:07:e4:c0:d6:3f:6f:73:29:d2:b9:91:79:61:6f:37:08:90:
90:15:42:6c:92:a0:c6:d7:31:2a:be:57:e8:f7:71:19:f5:6a:
7c:8e:e0:09:ae:1f:83:a0:7d:f7:74:29:ee:a1:f3:aa:dc:a4:
36:e3:f1:1a:5c:d2:b2:56:f0:8b:c7:b5:bb:27:5e:20:3b:e6:
22:53:e5:b9:0a:e2:a9:07:d7:b7:10:83:3e:5f:f4:00:40:7b:
82:b2:00:7e:5b:b7:17:5e:04:43:0c:c3:74:bd:ee:6b:3d:da:
02:2f:82:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:51 2025 by rpki-client