Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/e-LauyLgR1cDJDrgPAMCfyNA7kU.roa
File: e-LauyLgR1cDJDrgPAMCfyNA7kU.roa (raw, json)
Hash identifier: w5cOe5ECRfSZlEIXoBVDun9v7OxS/UnMjoOLrlwNL3Q=
Subject key identifier: 7B:E2:DA:BB:22:E0:47:57:03:24:3A:E0:3C:03:02:7F:23:40:EE:45
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 0194228DF9663DE7AE7FC681AC85BAEAD3EA
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/e-LauyLgR1cDJDrgPAMCfyNA7kU.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47600
IP address blocks: 82.138.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 18:20:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f9:66:3d:e7:ae:7f:c6:81:ac:85:ba:ea:d3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7be2dabb22e0475703243ae03c03027f2340ee45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:ed:d2:83:25:14:8a:72:33:47:8d:7f:00:
f6:ec:a4:b4:c3:a8:97:4e:2d:84:60:37:4b:64:73:
ea:ce:4e:e9:1d:0f:71:e4:9b:1d:be:22:1a:4b:c2:
73:1a:26:d0:ed:d2:16:45:de:72:82:28:b2:ca:2b:
8e:86:94:94:dd:a6:e2:70:08:42:85:6d:c7:15:55:
f4:53:1c:18:b3:c2:58:1b:79:f5:74:0b:fb:63:e6:
16:61:ea:48:b0:d7:af:f8:f0:25:d1:65:18:d9:c0:
7c:b6:29:ee:79:5b:62:26:05:6f:30:18:84:c2:fe:
bd:0a:d8:38:02:28:f7:51:f2:96:54:c6:52:01:82:
94:f7:08:9b:b8:98:ba:4d:90:db:1e:70:62:d6:a5:
7a:84:ea:a1:79:fe:8b:89:3f:1f:15:a9:da:f4:e6:
5f:7a:bb:17:cc:87:ca:32:8b:00:28:fb:13:cc:4d:
2a:81:5c:06:80:b4:eb:d9:e8:9a:c9:6a:e1:69:59:
b6:98:5f:fc:ed:e6:b8:83:21:0c:c3:ea:bb:5f:04:
ba:de:e8:a1:30:0a:f0:b0:cb:b0:29:fe:6a:64:eb:
87:4f:01:58:43:55:f8:7b:da:29:37:2d:7c:04:d2:
e6:63:e4:05:9e:cb:0e:4f:da:a4:d0:8f:d5:cf:d4:
fd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E2:DA:BB:22:E0:47:57:03:24:3A:E0:3C:03:02:7F:23:40:EE:45
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/e-LauyLgR1cDJDrgPAMCfyNA7kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.138.86.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f7:92:c3:fa:35:3e:8a:27:0d:3f:74:39:fc:d0:7b:52:ba:
55:32:17:bd:ab:96:2e:24:98:f4:66:ee:c2:47:56:54:23:36:
5a:e2:15:6d:ed:27:18:78:a7:c9:7f:d1:6b:e8:1f:58:e4:46:
52:8e:9a:c3:21:a6:13:f2:21:25:5d:bd:7e:3a:79:bd:2e:68:
2c:94:0a:9d:2e:0e:26:32:ff:4f:a4:79:06:22:82:fb:22:a6:
b9:1d:44:41:a3:12:7b:a4:b9:d3:fb:6f:fc:63:b3:01:ef:74:
8b:b3:d8:a6:66:62:cd:15:b2:91:3e:e9:cc:df:11:00:5d:13:
4a:27:b7:8e:c0:1e:4a:39:5e:b3:e0:18:ff:cc:8a:f8:3d:26:
92:f9:ab:38:2b:4d:10:84:ec:d9:15:c6:6b:ba:aa:f2:e1:8a:
ee:fc:87:1e:6b:df:0a:f1:80:50:e5:3a:f5:e8:f1:be:f3:03:
51:b4:f5:4d:c4:72:55:de:72:75:4b:6d:20:27:5f:ce:e9:79:
8d:54:cf:6f:96:f4:0a:e3:2e:93:23:94:56:32:bd:c2:2f:4a:
00:da:a5:60:26:0d:ce:12:40:87:4c:97:7e:c5:1f:e2:4d:f6:
fd:12:3b:b6:88:7b:da:9e:46:50:d2:55:3e:22:15:c3:e7:52:
69:7b:3c:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijflmPeeuf8aBrIW66tPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2
ZGI5OWUwHhcNMjUwMTAxMTU0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmUyZGFiYjIyZTA0NzU3MDMyNDNhZTAzYzAzMDI3ZjIzNDBlZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI7t0oMlFIpyM0eNfwD27KS0w6iX
Ti2EYDdLZHPqzk7pHQ9x5JsdviIaS8JzGibQ7dIWRd5ygiiyyiuOhpSU3abicAhC
hW3HFVX0UxwYs8JYG3n1dAv7Y+YWYepIsNev+PAl0WUY2cB8tinueVtiJgVvMBiE
wv69Ctg4Aij3UfKWVMZSAYKU9wibuJi6TZDbHnBi1qV6hOqhef6LiT8fFana9OZf
ersXzIfKMosAKPsTzE0qgVwGgLTr2eiayWrhaVm2mF/87ea4gyEMw+q7XwS63uih
MArwsMuwKf5qZOuHTwFYQ1X4e9opNy18BNLmY+QFnssOT9qk0I/Vz9T93QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHvi2rsi4EdXAyQ64DwDAn8jQO5FMB8GA1UdIwQY
MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt
OTU2ZjZiNWM2MTcwLzEvZS1MYXV5TGdSMWNESkRyZ1BBTUNmeU5BN2tVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw
LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUopWMA0G
CSqGSIb3DQEBCwUAA4IBAQCS95LD+jU+iicNP3Q5/NB7UrpVMhe9q5YuJJj0Zu7C
R1ZUIzZa4hVt7ScYeKfJf9Fr6B9Y5EZSjprDIaYT8iElXb1+Onm9LmgslAqdLg4m
Mv9PpHkGIoL7Iqa5HURBoxJ7pLnT+2/8Y7MB73SLs9imZmLNFbKRPunM3xEAXRNK
J7eOwB5KOV6z4Bj/zIr4PSaS+as4K00QhOzZFcZruqry4Yru/Icea98K8YBQ5Tr1
6PG+8wNRtPVNxHJV3nJ1S20gJ1/O6XmNVM9vlvQK4y6TI5RWMr3CL0oA2qVgJg3O
EkCHTJd+xR/iTfb9Eju2iHvankZQ0lU+IhXD51Jpezyi
-----END CERTIFICATE-----
Generated at Thu Apr 17 17:53:13 2025 by rpki-client