Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LG1T8-si4A0SHWWGeNuVDj7jgCI.roa
File: LG1T8-si4A0SHWWGeNuVDj7jgCI.roa (raw, json)
Hash identifier: DxKd6dOxxkVGzHHwbv4wYLzFVXlJz6B6yuAps4myHi0=
Subject key identifier: 2C:6D:53:F3:EB:22:E0:0D:12:1D:65:86:78:DB:95:0E:3E:E3:80:22
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01950358BFAEE1C482971D0F14AB0408AD64
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LG1T8-si4A0SHWWGeNuVDj7jgCI.roa
Signing time: Fri 14 Feb 2025 07:25:02 +0000
ROA not before: Fri 14 Feb 2025 07:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137897
IP address blocks: 88.209.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 16:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:03:58:bf:ae:e1:c4:82:97:1d:0f:14:ab:04:08:ad:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 14 07:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c6d53f3eb22e00d121d658678db950e3ee38022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1c:41:22:57:f7:e1:ac:85:c8:bd:85:19:78:
0a:f9:8f:9f:7e:37:66:2b:b4:59:57:47:f0:ef:34:
2e:9c:9a:b1:ca:88:10:49:77:bf:7d:05:50:63:8f:
84:a6:65:95:e9:f7:ab:8b:17:d1:a1:35:d0:98:83:
7e:9b:3a:19:72:b4:ad:80:fc:0f:bf:17:b6:53:e6:
ac:dd:42:58:e2:10:91:94:20:0e:92:cc:5a:44:ad:
11:06:14:6a:64:59:be:1a:de:4e:16:39:07:fd:34:
fc:72:14:e0:3d:7b:75:db:4a:40:38:b8:07:13:42:
ac:3b:92:84:a6:85:4d:92:57:a8:f2:53:9b:34:c7:
03:78:c2:3e:fd:12:2e:ef:ed:dc:86:ad:02:b9:aa:
be:a7:d1:8a:c8:49:8b:04:9f:90:2a:8f:b4:87:b0:
14:aa:b4:6c:94:e1:74:79:5d:43:fa:8a:65:79:5c:
a0:f8:96:f9:96:26:26:37:e9:f0:01:ef:24:eb:e0:
aa:e5:50:87:66:20:17:9c:49:51:c3:d4:c1:11:f6:
37:28:5e:a5:ec:f0:8c:cb:e7:44:7b:12:16:b2:15:
ed:65:a3:0c:ee:2d:db:5a:b8:52:70:41:ec:84:e9:
45:7b:ac:4d:99:65:56:bf:b8:e8:97:82:c7:b6:fb:
e3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6D:53:F3:EB:22:E0:0D:12:1D:65:86:78:DB:95:0E:3E:E3:80:22
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LG1T8-si4A0SHWWGeNuVDj7jgCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.195.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e4:5a:9a:9e:65:14:a3:1e:3f:61:d5:73:66:f9:e1:64:6b:
f4:db:a0:42:0f:b4:52:ff:f5:08:22:71:5e:ad:f6:5a:87:04:
dd:b2:3c:82:aa:9e:42:49:ce:95:ef:eb:86:65:ac:96:1f:ce:
1d:5e:59:a0:d2:51:b2:c1:57:6b:4e:86:9f:cf:a8:37:c5:dc:
e5:88:e5:04:6a:95:36:3c:93:80:0c:b8:2e:c3:55:f5:e8:f5:
b7:32:2e:60:e4:e0:d0:4e:7b:2b:79:74:50:4a:bc:5a:d5:bd:
1b:67:8c:ad:e6:4b:92:15:8a:da:f6:0f:d8:fe:43:c9:a9:60:
df:09:ed:1f:d1:69:3c:02:ab:07:54:35:01:eb:11:1c:fd:84:
b9:6c:e3:08:d2:46:dd:73:11:8c:07:67:0b:50:b9:d4:b3:56:
7c:4a:86:55:f4:9d:eb:72:2a:9f:e6:4c:9a:42:e7:ea:b4:b7:
a2:34:e6:c4:66:68:36:82:84:3e:a1:cd:56:c1:ad:f5:78:b8:
fa:f7:50:9e:10:29:d4:b7:87:6c:0d:12:34:e8:af:bb:87:b9:
b1:36:ad:59:c8:48:f1:71:de:f3:83:1c:a3:c9:48:14:4a:49:
e2:0b:19:a2:dc:c7:1c:55:d1:19:75:b2:7b:ba:0d:2d:d2:7f:
46:58:18:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:43 2025 by rpki-client