Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/LYbl7iWvOqnrzHhHnAaF6yjY9VM.roa
File: LYbl7iWvOqnrzHhHnAaF6yjY9VM.roa (raw, json)
Hash identifier: zlUgAQWm1nprqRSmeAIM4RtgHESMqOQ/CvkGROgPqSU=
Subject key identifier: 2D:86:E5:EE:25:AF:3A:A9:EB:CC:78:47:9C:06:85:EB:28:D8:F5:53
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827E9F5BF16B3CC61CCA32FB36CAFB1
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/LYbl7iWvOqnrzHhHnAaF6yjY9VM.roa
Signing time: Thu 02 Jan 2025 17:54:51 +0000
ROA not before: Thu 02 Jan 2025 17:54:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 188.95.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:e9:f5:bf:16:b3:cc:61:cc:a3:2f:b3:6c:af:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d86e5ee25af3aa9ebcc78479c0685eb28d8f553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:cc:69:d8:db:3a:2a:d7:42:42:c5:98:ed:
eb:ff:3e:98:e9:ea:70:7c:3d:7e:40:4c:3b:e5:b3:
49:e9:dc:5e:87:d5:e5:10:d2:e5:73:50:20:a6:d2:
07:6f:59:8a:9c:eb:01:41:a5:e4:d7:a6:d9:d0:d9:
24:26:d7:9c:51:9a:e8:3c:6d:3f:01:0d:6a:14:fb:
0f:54:e3:ca:06:90:dc:e9:bc:af:61:47:42:0c:6b:
60:5e:e7:e5:46:a6:49:b1:19:f5:5f:64:93:f7:42:
24:5c:ec:31:c2:03:1a:34:16:c1:b3:05:8f:14:81:
aa:f3:64:26:85:7d:67:6e:6c:54:36:b5:6e:35:bc:
13:7c:85:b7:6e:24:15:53:ce:85:f4:1c:3a:c1:a2:
87:05:5a:18:df:fc:d7:5e:b5:34:e9:5c:3e:a4:e3:
24:48:1f:c8:f5:21:5f:3b:57:73:a6:3a:5c:2f:cd:
2d:a3:b2:af:1a:2b:23:f5:75:7f:6b:68:3b:d7:de:
41:e6:73:1b:b3:46:d1:64:2f:77:e0:58:3c:21:70:
2e:8e:a4:1d:6c:51:27:f7:24:d3:fe:36:ee:eb:e4:
f0:cd:75:c7:14:2c:5d:8b:28:b9:24:34:e0:ac:01:
24:44:0b:39:94:e5:9f:b1:6e:85:64:76:f4:79:e3:
3b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:86:E5:EE:25:AF:3A:A9:EB:CC:78:47:9C:06:85:EB:28:D8:F5:53
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/LYbl7iWvOqnrzHhHnAaF6yjY9VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a0:11:dc:95:0d:af:a4:4b:b8:02:4f:55:69:e2:13:19:9d:
f7:10:51:5b:2d:da:5f:b9:78:4a:dc:a8:30:f5:f0:73:80:ee:
84:f6:80:f0:e4:48:dc:4b:c6:98:66:3a:60:f1:08:87:f5:41:
6d:7b:48:87:04:11:5e:8b:dc:da:e1:5b:9c:68:a4:60:92:22:
2d:a4:90:23:2c:93:4b:20:4e:e6:44:b9:9f:dd:69:30:e7:77:
c4:7a:3d:85:ce:50:fe:f3:ea:2f:84:7c:25:17:61:50:73:e4:
c4:53:0e:c1:36:bc:34:40:0a:e0:ba:13:97:e6:b0:bf:12:e3:
1f:be:a1:91:7a:47:67:03:20:d3:d0:53:2e:4b:6c:34:cf:96:
e4:b9:e0:b9:c4:92:6c:a6:da:60:f7:ab:93:c0:8a:31:30:90:
43:24:bc:19:e6:30:58:88:a2:09:71:43:3e:d6:cb:d2:28:b9:
e7:5b:2a:87:51:b4:49:66:d5:4f:a1:3f:0a:6b:7b:2f:c1:1a:
d8:77:8e:d0:0a:80:a2:05:66:d2:86:b7:25:a8:06:f7:ec:17:
ff:48:05:7c:fd:9f:99:0e:29:e8:b7:8d:a9:46:2f:d0:8b:db:
8f:cf:d1:1f:2c:da:47:f2:51:52:2b:00:04:38:d2:da:53:8b:
6d:87:51:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:08:09 2025 by rpki-client