Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/LvnXbo7wYXBj1oF5CgABsCbXpSA.roa
File: LvnXbo7wYXBj1oF5CgABsCbXpSA.roa (raw, json)
Hash identifier: ETkWwsRLZu5IpoyaG700dgIh9ZTFly491UU0m26migk=
Subject key identifier: 2E:F9:D7:6E:8E:F0:61:70:63:D6:81:79:0A:00:01:B0:26:D7:A5:20
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018F4F25035B4F1B64B06942C1906D38184F
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/LvnXbo7wYXBj1oF5CgABsCbXpSA.roa
Signing time: Mon 06 May 2024 18:22:56 +0000
ROA not before: Mon 06 May 2024 18:22:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 192.144.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 14:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4f:25:03:5b:4f:1b:64:b0:69:42:c1:90:6d:38:18:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: May 6 18:22:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ef9d76e8ef0617063d681790a0001b026d7a520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:58:a2:4d:d7:0a:1a:fd:f3:78:cd:bd:50:24:
20:d1:15:4c:38:65:0e:50:a3:42:f5:39:21:96:1a:
fe:57:97:25:0e:b6:b1:72:e0:09:a7:36:cf:2e:13:
5e:36:0f:14:86:4d:49:43:05:fa:39:c0:68:49:e6:
fe:e0:a9:71:67:fe:8e:d6:e7:f3:7b:6c:05:20:fd:
a4:00:ca:83:90:9a:23:32:74:4f:30:b5:3a:93:ee:
75:cf:84:2f:dc:41:3a:f2:a8:c8:5d:85:c2:d4:23:
77:2b:28:f7:af:db:1d:6b:bb:08:2e:5d:80:35:44:
4d:d7:32:07:3a:23:15:8e:69:32:81:0a:ae:16:56:
10:d9:8f:e8:fa:60:97:84:41:eb:ee:43:ff:cf:e1:
3d:b3:db:11:8a:61:0c:c3:04:33:f4:60:1a:85:3e:
25:94:77:01:e9:85:55:ad:25:c3:89:52:fe:81:7c:
ec:ed:bb:db:4c:97:ea:1d:ee:ef:98:f6:27:84:83:
ad:0d:60:ad:1d:da:55:b6:d8:4c:b0:bc:4c:d4:69:
9a:64:6d:a1:4b:4d:02:d7:23:2d:bb:91:a1:5b:89:
88:62:82:00:43:6c:f5:ec:1b:6a:1b:a5:ba:45:36:
34:5f:50:cf:ca:de:28:64:a8:f4:66:45:d6:5b:a3:
5a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F9:D7:6E:8E:F0:61:70:63:D6:81:79:0A:00:01:B0:26:D7:A5:20
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/LvnXbo7wYXBj1oF5CgABsCbXpSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.33.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:0e:a1:cc:3b:b3:94:49:66:f5:69:53:71:02:f3:c2:26:11:
93:48:ee:c4:da:98:14:a8:cc:d5:09:89:af:5f:83:d8:00:dc:
7d:78:94:52:0c:bc:47:07:25:30:8e:39:b7:b6:ae:d7:45:10:
78:f1:49:a1:11:87:d3:57:d1:63:16:50:90:c1:4a:95:79:09:
77:56:44:a3:ff:1a:f1:13:8c:6f:4f:be:d1:e6:e5:da:59:81:
db:cd:3c:cb:ad:12:a0:47:56:82:d7:84:80:d4:ef:09:b8:0f:
9e:59:4d:79:6b:3e:dd:25:93:d7:67:8d:41:5a:42:b0:fc:e6:
f4:e4:68:fb:4f:22:a3:a2:08:09:27:71:15:5b:65:6c:6e:9e:
7b:aa:fe:5d:97:cc:23:4c:7b:51:db:6b:72:d9:50:ac:3d:fc:
dc:a1:13:bd:de:76:ba:9b:46:76:8b:2b:39:1b:a5:6b:ae:78:
85:0e:c0:dd:f5:e0:a3:c5:44:3f:63:e0:03:85:64:e8:85:4c:
04:f6:ce:9a:4f:e6:12:49:20:88:28:eb:af:e9:05:df:6e:f6:
a2:98:b5:72:04:9f:5f:c1:c9:1c:48:b7:f2:fd:98:fe:f6:dd:
90:77:86:47:99:e5:16:a9:1d:5d:ed:0f:de:cb:15:09:89:33:
f8:99:48:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9PJQNbTxtksGlCwZBtOBhPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk
YTEzNzAwHhcNMjQwNTA2MTgyMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWY5ZDc2ZThlZjA2MTcwNjNkNjgxNzkwYTAwMDFiMDI2ZDdhNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1iiTdcKGv3zeM29UCQg0RVMOGUO
UKNC9Tkhlhr+V5clDraxcuAJpzbPLhNeNg8Uhk1JQwX6OcBoSeb+4KlxZ/6O1ufz
e2wFIP2kAMqDkJojMnRPMLU6k+51z4Qv3EE68qjIXYXC1CN3Kyj3r9sda7sILl2A
NURN1zIHOiMVjmkygQquFlYQ2Y/o+mCXhEHr7kP/z+E9s9sRimEMwwQz9GAahT4l
lHcB6YVVrSXDiVL+gXzs7bvbTJfqHe7vmPYnhIOtDWCtHdpVtthMsLxM1GmaZG2h
S00C1yMtu5GhW4mIYoIAQ2z17BtqG6W6RTY0X1DPyt4oZKj0ZkXWW6NayQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC75126O8GFwY9aBeQoAAbAm16UgMB8GA1UdIwQY
MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt
NjA4MDk1MmYwZTA0LzEvTHZuWGJvN3dZWEJqMW9GNUNnQUJzQ2JYcFNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0
LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJAhMA0G
CSqGSIb3DQEBCwUAA4IBAQCLDqHMO7OUSWb1aVNxAvPCJhGTSO7E2pgUqMzVCYmv
X4PYANx9eJRSDLxHByUwjjm3tq7XRRB48UmhEYfTV9FjFlCQwUqVeQl3VkSj/xrx
E4xvT77R5uXaWYHbzTzLrRKgR1aC14SA1O8JuA+eWU15az7dJZPXZ41BWkKw/Ob0
5Gj7TyKjoggJJ3EVW2Vsbp57qv5dl8wjTHtR22ty2VCsPfzcoRO93na6m0Z2iys5
G6VrrniFDsDd9eCjxUQ/Y+ADhWTohUwE9s6aT+YSSSCIKOuv6QXfbvaimLVyBJ9f
wckcSLfy/Zj+9t2Qd4ZHmeUWqR1d7Q/eyxUJiTP4mUjw
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:25 2025 by rpki-client