Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/LYbSVWx9l737VB3P3Hg5GAFt-e4.roa
File: LYbSVWx9l737VB3P3Hg5GAFt-e4.roa (raw, json)
Hash identifier: +KvnuhzIr4liL+5AT+ayio4gga48LPZq4kyMKqO7Y1s=
Subject key identifier: 2D:86:D2:55:6C:7D:97:BD:FB:54:1D:CF:DC:78:39:18:01:6D:F9:EE
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 018CC500D895F3A393F8AFF8DE64E80DAAF3
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/LYbSVWx9l737VB3P3Hg5GAFt-e4.roa
Signing time: Mon 01 Jan 2024 12:30:16 +0000
ROA not before: Mon 01 Jan 2024 12:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201749
IP address blocks: 188.72.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 07:47:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d8:95:f3:a3:93:f8:af:f8:de:64:e8:0d:aa:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Jan 1 12:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d86d2556c7d97bdfb541dcfdc783918016df9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:c6:56:18:3a:91:c1:25:ac:39:58:ed:8a:
34:99:85:f8:41:7d:54:06:07:3a:71:d3:54:00:c0:
27:44:18:24:6f:08:d3:58:96:9d:53:a5:30:71:60:
fe:03:d7:c1:fe:81:55:bf:5b:81:37:b9:56:66:f6:
96:9c:dc:e0:42:fc:eb:af:d1:dc:0e:47:39:72:51:
3d:82:8d:a9:0d:5d:48:4e:db:f2:9c:14:a6:22:89:
11:c6:c5:9f:1a:3a:80:46:b6:44:ea:52:9d:0a:0b:
3d:4f:9a:34:40:04:fe:33:36:aa:07:50:cd:86:af:
9d:f6:9a:5c:9e:b1:28:2d:c8:f7:23:19:78:81:75:
c5:65:f1:7f:51:91:16:8c:d8:99:83:17:57:91:79:
bb:5f:ae:e6:99:ef:a3:9b:cc:9d:f5:e0:ef:5b:0e:
3f:53:dd:a2:c9:4d:dd:d3:78:5e:e2:af:c0:0e:e7:
cd:73:f0:1e:83:9f:94:26:d5:16:f9:f9:ad:13:86:
60:f2:a5:b2:99:b1:23:c7:db:d7:31:04:d6:56:2b:
65:f4:42:3c:7b:c2:a1:ce:9d:c4:ea:cd:3b:b6:ef:
61:54:52:a1:a4:15:f3:d3:40:06:e2:7b:b4:97:1e:
3e:7a:bf:ed:87:fa:51:df:eb:e7:78:69:cf:c1:52:
1f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:86:D2:55:6C:7D:97:BD:FB:54:1D:CF:DC:78:39:18:01:6D:F9:EE
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/LYbSVWx9l737VB3P3Hg5GAFt-e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.56.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ea:a1:db:09:dd:7f:46:86:81:f2:2c:13:23:0e:cb:27:c6:
17:f1:31:03:a4:32:1e:07:61:7a:33:fb:10:6b:62:02:0e:fb:
ef:39:eb:f9:18:b8:c1:a6:27:3a:36:32:05:da:a9:6e:17:bb:
f0:f5:7f:52:a8:4b:2d:f3:67:3e:91:af:6b:b8:32:f9:5e:33:
e2:9b:76:68:4a:f1:52:eb:1c:71:2c:a0:87:c3:be:d8:91:2e:
35:3b:44:3b:a4:b2:b8:e6:0f:02:9a:c6:95:7c:9f:21:1f:ff:
23:29:4d:a6:8d:a9:b4:02:63:2a:d8:52:0d:93:19:1b:7e:3d:
35:11:8d:6a:26:ad:aa:60:f7:7b:73:ec:70:a2:a9:3f:96:2e:
14:f9:b6:4d:f9:68:06:bd:53:05:b5:cc:15:01:1e:ed:d7:1f:
a7:c6:6e:47:cd:a2:cf:d0:30:1a:5b:1b:f3:29:12:6a:22:00:
42:66:85:c3:c4:25:ff:00:cf:b1:6b:bf:d6:dd:7d:bf:95:fe:
f6:e7:39:92:ad:8c:87:48:d2:13:4a:73:58:c1:76:12:f2:fc:
55:fa:45:c1:b8:c3:15:a2:64:b1:87:9c:c4:83:06:b5:d9:f8:
43:b0:d3:14:7f:17:b9:bc:38:ab:c5:0c:d1:2d:1c:dd:59:d4:
77:69:c8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:21:30 2025 by rpki-client