Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/LZPuC51WZUIyQZNuUuRbgmwUCxg.roa
File: LZPuC51WZUIyQZNuUuRbgmwUCxg.roa (raw, json)
Hash identifier: 8WQgvWWqcRLRpTRSgG1uMPpD4+f6sbhN0FQpgy+xqRs=
Subject key identifier: 2D:93:EE:0B:9D:56:65:42:32:41:93:6E:52:E4:5B:82:6C:14:0B:18
Certificate issuer: /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial: 018DE04F956BEBDA9481FB7E4864D902A679
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/LZPuC51WZUIyQZNuUuRbgmwUCxg.roa
Signing time: Sun 25 Feb 2024 12:48:48 +0000
ROA not before: Sun 25 Feb 2024 12:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204104
IP address blocks: 2a10:ed40::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 Feb 2024 21:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e0:4f:95:6b:eb:da:94:81:fb:7e:48:64:d9:02:a6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Validity
Not Before: Feb 25 12:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d93ee0b9d5665423241936e52e45b826c140b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:3b:12:34:48:7d:8e:ff:84:96:39:e2:d6:
17:ad:1b:f9:c1:c7:04:ac:cf:d5:22:3e:c0:09:c8:
ca:40:5d:86:fd:f8:93:4c:39:56:26:5f:69:f4:d0:
6c:e6:8e:72:68:d1:84:a4:bd:bf:67:de:64:58:a0:
0e:3e:d0:c9:42:b4:2a:91:e2:4f:08:09:bd:1a:0f:
da:04:89:e2:bb:9a:43:5c:fb:74:3f:d2:89:b9:80:
f4:54:f2:09:d2:3b:c7:57:ad:b8:a8:df:83:40:06:
7f:db:18:1a:c6:1b:44:20:d6:af:4c:a1:a9:89:38:
28:9e:ea:e7:89:aa:1b:7c:97:6f:06:2c:f5:77:22:
22:bf:4b:24:0f:d1:e4:89:f2:f4:76:d4:e4:00:2c:
cd:13:11:07:43:f4:4b:12:29:95:62:97:f8:28:3b:
8e:1d:80:1b:4c:21:0e:db:5e:2f:ee:78:f7:11:04:
3e:9f:be:94:ad:52:ff:8b:42:f6:ff:97:a4:4d:6c:
2d:41:bd:a3:cb:f8:70:70:c5:d7:e5:f8:28:fa:23:
8e:24:8a:5e:42:a4:cc:e9:9a:46:75:26:c8:a2:eb:
4d:bb:4a:53:99:8a:71:06:2d:6b:8a:2d:7a:7b:cc:
55:f9:ad:49:3c:0b:43:d2:82:2c:90:ff:59:76:a9:
4b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:93:EE:0B:9D:56:65:42:32:41:93:6E:52:E4:5B:82:6C:14:0B:18
X509v3 Authority Key Identifier:
keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/LZPuC51WZUIyQZNuUuRbgmwUCxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ed40::/48
Signature Algorithm: sha256WithRSAEncryption
a9:75:ce:17:3e:55:12:ad:70:97:fa:b3:c5:a9:82:6e:d9:28:
e5:a1:29:8e:82:8f:17:d8:a1:c5:85:ed:07:70:52:5c:2c:cc:
39:bf:2f:49:b1:06:cf:2e:a2:92:9e:cf:b8:35:71:33:90:22:
24:ab:03:69:0f:93:f4:5c:b0:c9:51:d1:42:cd:82:3c:19:2f:
fa:5e:13:af:be:cb:12:5e:45:34:c2:83:e9:3e:3f:d5:c5:11:
cb:d6:dc:0c:6a:d9:f3:7b:93:65:bc:93:2d:42:18:02:b6:41:
13:61:67:14:0f:77:07:3a:3b:b8:90:d7:8c:eb:7a:2c:25:3c:
4b:b0:a6:6b:30:61:de:0a:b1:95:dc:af:40:9b:f5:28:b4:a3:
58:e6:19:87:ec:be:49:f1:fe:13:8e:4e:64:d6:bf:26:df:bb:
0e:76:49:b9:ea:58:3d:1a:a6:6d:3e:5e:56:93:d2:3e:4b:79:
cb:42:ae:8c:f6:41:86:a6:97:68:f0:e2:0c:54:0a:70:fb:85:
1f:48:09:a6:4c:f4:d4:9b:fa:e0:23:14:73:e7:35:fd:19:8c:
41:01:2e:b8:ef:88:f4:c0:66:c4:2f:3f:33:0c:0e:32:e6:b3:
26:18:67:2e:7d:64:41:4f:c3:cb:58:ba:5e:c2:83:99:83:74:
92:ce:32:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:17 2025 by rpki-client