Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/LsE08doYMsgQCJLyzSHV_Bi7Yc8.roa
File: LsE08doYMsgQCJLyzSHV_Bi7Yc8.roa (raw, json)
Hash identifier: tRQ5WdfokAQlb18fJXudZtgbVHZkfITnQXDbE05PwSs=
Subject key identifier: 2E:C1:34:F1:DA:18:32:C8:10:08:92:F2:CD:21:D5:FC:18:BB:61:CF
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 0192F6CF6BEDDCEAC784FC76A36A9C16D5B0
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/LsE08doYMsgQCJLyzSHV_Bi7Yc8.roa
Signing time: Mon 04 Nov 2024 10:54:01 +0000
ROA not before: Mon 04 Nov 2024 10:54:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203851
IP address blocks: 185.154.49.0/24 maxlen: 24
185.154.50.0/24 maxlen: 24
185.154.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f6:cf:6b:ed:dc:ea:c7:84:fc:76:a3:6a:9c:16:d5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Nov 4 10:54:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ec134f1da1832c8100892f2cd21d5fc18bb61cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:41:ff:0b:b6:25:05:2a:99:58:21:76:d9:
74:d5:63:fe:3c:14:d6:7c:49:aa:3f:e7:cb:55:88:
1a:75:a3:cf:65:53:08:41:91:66:7c:ca:f7:7d:0e:
b2:16:b9:e1:c4:e9:7d:a7:d6:39:fc:92:a5:31:69:
5d:c6:85:53:99:59:48:18:52:2f:2b:ae:22:7e:47:
bd:db:62:75:e4:c7:f5:04:a9:c6:12:f4:02:23:ec:
97:47:f3:99:59:29:bc:06:08:fa:f9:33:6d:17:74:
9f:4f:01:1c:ef:dc:80:5e:5b:9d:87:16:9c:f6:5a:
2d:76:4e:83:b2:8d:15:09:c8:69:4a:ab:7b:31:ee:
2a:6a:ea:0a:c2:6a:4e:52:88:63:40:aa:55:c6:88:
a6:5c:31:e3:ae:35:5e:9e:0d:90:36:52:47:60:88:
59:bd:0e:b1:5f:20:cc:a4:51:23:bc:d3:e5:b6:ad:
ff:9b:14:6a:57:47:71:bf:68:17:0d:dd:33:dc:99:
52:5d:96:03:58:65:4f:3f:e5:71:94:ff:85:b5:33:
d7:e6:2c:40:16:d6:83:7d:d6:f2:3d:69:91:54:8a:
57:c8:ca:0c:7e:6a:eb:e7:2b:c2:4d:8f:68:60:2a:
b2:b9:af:ee:ea:76:ec:8d:6b:8e:bd:9a:a1:27:33:
f1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C1:34:F1:DA:18:32:C8:10:08:92:F2:CD:21:D5:FC:18:BB:61:CF
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/LsE08doYMsgQCJLyzSHV_Bi7Yc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.49.0-185.154.51.255
Signature Algorithm: sha256WithRSAEncryption
10:c7:ed:39:a8:35:97:5e:00:4a:af:6b:9b:ff:f8:ae:5f:60:
e4:23:77:d3:e5:98:ef:10:6a:09:15:a2:a2:be:b6:00:68:55:
4d:42:c3:14:a2:e2:af:9f:88:35:e7:0a:26:f4:df:c6:e2:97:
49:9a:38:f2:e2:57:ff:5f:56:93:15:e4:fd:1d:e7:cb:4e:0d:
d7:bf:d2:07:9b:16:f2:2b:7e:8a:22:1d:4c:d3:c9:77:e4:7a:
a3:55:a6:ca:72:81:43:6e:ee:5e:9a:85:cf:0c:56:ca:72:af:
33:22:e7:26:8a:84:fd:26:df:c1:62:61:bf:e4:15:79:bc:17:
40:92:c5:62:cd:02:e1:79:52:84:48:53:0b:45:39:17:7d:7a:
c1:69:28:4a:cc:03:ab:ad:14:65:1c:53:fa:f1:c2:c7:92:39:
14:08:f1:98:cc:ec:65:61:4b:a7:66:e5:b5:81:47:6c:1a:ca:
a6:28:1b:48:6d:e9:a1:2f:5b:ab:6d:fa:23:1e:6e:a3:6f:6f:
48:d6:b0:f8:5c:1b:85:6f:97:a1:b1:2e:f3:81:0c:e9:95:25:
b7:e6:4c:45:8d:6d:b9:35:cc:79:d7:60:e2:68:ca:5a:b0:44:
54:d6:4f:48:44:4a:80:98:e0:35:7d:10:b8:bd:72:58:7e:d8:
0b:73:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:49 2025 by rpki-client