Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/LBPEkblMTCK0sgMh_cHwSxY-AF0.roa
File: LBPEkblMTCK0sgMh_cHwSxY-AF0.roa (raw, json)
Hash identifier: 4EDZgkiCfc1gCsFMElGWhvxvUDnxKVPA7jATMAJRWkA=
Subject key identifier: 2C:13:C4:91:B9:4C:4C:22:B4:B2:03:21:FD:C1:F0:4B:16:3E:00:5D
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 0196E9F32DBB1602F714FE7A20609DD0A242
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/LBPEkblMTCK0sgMh_cHwSxY-AF0.roa
Signing time: Mon 19 May 2025 19:09:10 +0000
ROA not before: Mon 19 May 2025 19:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a0e:4340::/32 maxlen: 32
2a0e:67c4::/32 maxlen: 32
2a11:3182::/32 maxlen: 32
2a11:4a05::/32 maxlen: 32
2a11:8503::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 29 May 2025 16:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e9:f3:2d:bb:16:02:f7:14:fe:7a:20:60:9d:d0:a2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: May 19 19:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c13c491b94c4c22b4b20321fdc1f04b163e005d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:dd:c7:af:cc:84:49:62:bf:16:99:8b:e4:
8d:b7:5c:2f:56:c6:eb:7b:fd:61:14:5f:d5:a9:ec:
89:f0:15:b3:ff:7d:62:24:5c:65:f5:b4:5b:46:72:
68:5f:56:5b:88:90:64:30:87:4b:10:1a:cd:72:b3:
f5:4c:02:27:80:9d:74:65:65:ee:31:dc:5f:72:a0:
9a:8e:9a:c5:7e:1f:9d:0e:62:f0:57:15:c1:3d:28:
68:09:5e:f8:6d:19:93:9c:f8:0e:4c:07:00:b2:44:
cc:ac:04:4b:37:f8:ae:cf:10:35:a0:4c:76:70:c9:
1c:c1:f6:7e:4c:f2:46:e6:a5:20:b7:64:e0:7f:90:
ea:af:e6:8b:88:c0:bb:4f:60:08:ca:09:4e:f3:55:
69:76:93:01:17:99:80:84:88:ea:b4:02:b0:19:c7:
4d:26:cd:96:72:ae:51:81:4d:5e:cf:75:24:83:c0:
c6:27:ae:19:94:ad:d0:76:6e:ea:db:a3:08:55:c8:
a2:49:7d:c4:6a:2f:44:0a:7e:a1:b4:5e:02:db:81:
5b:32:57:76:8c:0f:99:1f:ce:b0:e2:ba:e1:29:22:
de:bf:09:58:e7:76:c3:f2:7f:ba:ea:e8:57:a3:29:
ca:3d:94:eb:d1:9a:ce:37:86:48:96:21:4c:03:6b:
9e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:C4:91:B9:4C:4C:22:B4:B2:03:21:FD:C1:F0:4B:16:3E:00:5D
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/LBPEkblMTCK0sgMh_cHwSxY-AF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4340::/32
2a0e:67c4::/32
2a11:3182::/32
2a11:4a05::/32
2a11:8503::/32
Signature Algorithm: sha256WithRSAEncryption
a6:a0:ae:77:bd:23:bb:18:c1:87:cc:88:16:06:90:cc:3a:85:
c7:6b:86:fe:ff:f4:33:10:0f:f2:b7:f9:e3:e2:6a:91:76:65:
fe:61:da:dc:8c:da:b0:14:b0:eb:da:dc:c0:b4:4b:67:b1:f2:
1c:ae:08:b8:e7:6d:c6:dc:d9:30:83:a4:3b:92:f0:66:e2:63:
76:11:57:23:cd:ab:68:0f:a3:5f:8b:33:f1:1a:d2:d3:4e:ae:
b0:1c:fc:a7:25:71:e4:92:64:4c:8f:a8:83:58:10:cb:8f:77:
24:c7:96:52:a3:ae:ce:ca:7f:f8:3d:d0:4f:54:f7:8b:14:2a:
01:c5:94:09:23:1c:72:4d:39:46:a8:f7:82:fe:0e:40:23:ae:
dd:7e:76:c4:da:49:86:96:2a:53:15:3f:f4:90:dd:93:09:65:
20:65:8b:be:2d:93:73:ea:80:29:4e:8a:e1:4c:1c:14:3c:8a:
bd:15:05:1b:be:4f:f7:ce:18:00:c4:48:34:b1:77:62:5e:3a:
3c:7b:f1:3d:a3:af:c4:3f:1a:86:35:31:08:d2:f3:30:78:d7:
49:5f:5d:a9:0f:da:1d:cf:d0:ab:9d:9b:30:c7:84:44:3b:da:
8d:96:1f:9b:bc:59:7f:ed:69:d7:ea:cf:87:7a:0a:1e:d3:1e:
b7:e9:6f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:04:49 2025 by rpki-client