Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/LbCRY4eZMt7FjVO1pgqAC4Aq5iU.roa
File: LbCRY4eZMt7FjVO1pgqAC4Aq5iU.roa (raw, json)
Hash identifier: 4PNpJ6Hi1VVMxq1vNZhw30TK6MUgclCULVan5NwLoTc=
Subject key identifier: 2D:B0:91:63:87:99:32:DE:C5:8D:53:B5:A6:0A:80:0B:80:2A:E6:25
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0194206849B592C58FDB763AECE0924C6B2C
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/LbCRY4eZMt7FjVO1pgqAC4Aq5iU.roa
Signing time: Wed 01 Jan 2025 05:48:13 +0000
ROA not before: Wed 01 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210574
IP address blocks: 213.142.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 16:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:49:b5:92:c5:8f:db:76:3a:ec:e0:92:4c:6b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jan 1 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2db09163879932dec58d53b5a60a800b802ae625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:68:f8:8d:e2:0e:cd:4f:38:ec:fe:4c:e6:
c1:7b:90:70:57:41:b1:e9:30:b1:da:61:6e:bf:70:
fe:17:05:e2:1c:55:89:e5:39:25:c5:c3:df:17:aa:
d3:23:11:0a:0f:97:f7:08:be:19:eb:4b:a0:a4:8a:
14:f0:1c:c1:bf:d2:c6:c6:23:39:ab:94:55:bd:44:
c1:80:bd:a1:cd:ec:10:86:25:ff:f8:6f:81:56:97:
10:22:41:64:6f:c0:c7:a8:31:30:02:04:9b:b1:78:
b4:75:13:d5:c7:38:68:eb:b5:f5:00:68:c3:be:31:
79:72:80:83:78:20:c4:c2:d7:4e:5f:d5:d0:e1:4a:
90:71:ba:30:a8:c8:67:af:55:80:bc:cc:9d:d5:a7:
9d:3f:a3:6a:5f:71:7f:e4:b4:2a:32:4e:62:53:d9:
d5:8f:c9:6b:62:0e:11:c0:16:bb:7b:8c:6d:8c:9e:
b1:ee:9c:61:a2:09:f5:9c:2d:58:67:13:e6:c2:b1:
51:68:ea:f2:34:92:53:f4:7c:52:81:bc:c3:d1:b2:
e3:97:14:4e:23:b9:c8:80:4f:84:4c:6a:e9:63:ec:
ef:f4:44:a2:34:c8:17:4d:23:d1:9c:61:de:87:65:
6f:f5:95:4d:95:64:91:85:98:8b:e6:29:06:d3:7e:
2a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B0:91:63:87:99:32:DE:C5:8D:53:B5:A6:0A:80:0B:80:2A:E6:25
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/LbCRY4eZMt7FjVO1pgqAC4Aq5iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.142.157.0/24
Signature Algorithm: sha256WithRSAEncryption
06:34:48:2b:10:c1:78:05:d7:80:f2:9b:2b:1d:fb:17:90:14:
72:0e:19:62:df:83:d3:24:23:29:a2:da:1a:69:d8:77:70:c7:
f7:99:bf:93:01:41:aa:6e:3c:63:20:d0:44:79:e7:ca:2e:42:
0a:d0:fd:53:11:9c:e7:18:08:61:df:6c:ce:0d:39:93:70:11:
85:1f:1c:57:f4:00:7f:a6:a2:87:3e:d2:57:4f:bf:3c:03:d1:
dc:2b:81:6d:84:8d:28:50:2d:41:41:36:9b:c8:25:4c:02:95:
e3:bd:5a:8c:0b:d5:62:44:7e:c5:d3:61:29:32:7b:7c:1f:28:
e6:f6:df:cd:47:90:86:e8:ca:e5:5f:7a:c1:8b:b8:d7:b3:69:
f0:41:49:8b:8b:4b:4a:5a:92:7a:7f:ec:b1:52:56:c3:7c:85:
c4:bd:89:83:ff:33:4c:51:bc:fb:c8:0c:7a:96:bb:ea:eb:56:
b9:85:8c:e4:48:db:5a:64:f8:9b:8e:eb:f9:0f:c3:7a:77:86:
be:86:85:30:0f:f1:9c:c7:a2:7e:43:ce:f8:7a:4a:ef:ad:20:
10:2a:fc:54:63:a3:e8:52:e3:5c:87:b7:1f:60:f9:b8:fe:1e:
7d:89:94:eb:ed:22:0d:1b:c1:41:ad:4b:da:b2:dc:b9:c5:13:
c5:ff:78:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:56 2025 by rpki-client