Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/lG2AREao0xvSjow-OIpxDoNG-J4.roa
File: lG2AREao0xvSjow-OIpxDoNG-J4.roa (raw, json)
Hash identifier: olg2uW3eggU3qeWYrIErvZs9ytl49x21cdoz20MWs94=
Subject key identifier: 94:6D:80:44:46:A8:D3:1B:D2:8E:8C:3E:38:8A:71:0E:83:46:F8:9E
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 01915B238E9DB8729A7A85F3DF024436D49F
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/lG2AREao0xvSjow-OIpxDoNG-J4.roa
Signing time: Fri 16 Aug 2024 12:22:22 +0000
ROA not before: Fri 16 Aug 2024 12:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57242
IP address blocks: 81.163.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 16:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5b:23:8e:9d:b8:72:9a:7a:85:f3:df:02:44:36:d4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Aug 16 12:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=946d804446a8d31bd28e8c3e388a710e8346f89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:76:f7:92:3a:d3:9c:96:f4:9b:b3:43:93:
c3:09:d3:20:48:6d:af:96:87:67:5c:12:da:c7:55:
e3:df:52:47:58:ff:75:8b:d6:dc:a7:da:36:91:ad:
82:f0:05:8c:54:93:6c:6c:c6:b0:a2:ba:c4:2a:68:
cf:86:b6:be:b0:9e:04:e0:47:d6:b1:3d:b5:43:3a:
51:34:d4:b3:49:79:83:19:5e:1f:ed:a2:f2:6d:79:
c5:04:33:48:62:2d:0b:2a:7c:ee:d8:5f:e9:df:bd:
77:fe:b4:59:82:fd:6c:ab:b0:34:39:59:6d:12:35:
02:41:63:ec:81:56:a9:c3:9e:0e:7a:b8:9b:25:d6:
2b:61:7e:23:a6:80:80:38:12:c1:30:35:81:7d:43:
41:ba:86:64:fc:eb:32:ad:41:53:80:a9:57:78:a8:
ab:14:65:96:f5:38:91:7c:87:e7:6e:fb:08:cd:ef:
63:70:ec:a6:4a:08:87:2f:3c:64:8e:f3:2d:8c:50:
1d:91:f0:dc:03:eb:23:6a:08:88:7a:76:4e:ba:da:
78:e6:63:ba:5e:c1:30:2d:f6:5e:92:3a:96:75:86:
c0:f1:9b:d5:b8:ad:b5:c2:4e:ee:d2:33:29:81:ff:
b8:6a:65:ea:bc:6c:55:8a:89:42:8d:e3:eb:6d:06:
ab:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6D:80:44:46:A8:D3:1B:D2:8E:8C:3E:38:8A:71:0E:83:46:F8:9E
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/lG2AREao0xvSjow-OIpxDoNG-J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.214.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c8:24:1c:7c:c5:02:44:e4:e7:63:03:f6:54:fb:3f:00:7a:
90:ce:ef:1f:0d:b0:6a:20:55:60:ed:a0:45:75:01:7d:3b:58:
01:08:1d:93:2d:05:93:de:0d:e4:30:00:09:ff:20:5a:bb:18:
14:f0:75:db:1c:12:0a:51:dd:26:cb:d6:95:8b:ef:78:c1:76:
3f:5b:ac:7b:8b:01:6c:13:1c:62:4e:36:0c:f4:59:f4:28:cf:
c6:ab:12:af:37:d3:25:06:8d:fd:78:fb:c5:4a:c0:07:9a:16:
26:8a:79:b7:18:65:ac:ac:27:35:65:57:6c:db:4a:0f:9f:b3:
de:3f:8e:d9:e8:88:79:0d:ea:8c:24:26:b6:a9:2d:a3:59:aa:
a8:ef:0a:99:2e:30:d5:76:d4:c6:f3:d3:b0:22:32:53:37:3d:
ab:e0:01:cc:e0:f3:bf:a4:2f:f6:dd:06:1f:9f:0f:88:79:ec:
3f:4f:16:5e:e7:5c:d8:bd:47:82:1c:4f:5f:d2:5f:97:65:e0:
0d:1f:6d:0a:56:1b:9a:49:d8:76:b5:d2:c0:c4:a5:c1:ec:3b:
b4:09:6a:e2:f6:9c:63:7f:fc:4f:53:72:e5:0a:78:6c:a6:df:
2c:e4:31:0a:30:7b:de:8b:84:d4:65:60:08:ea:e1:2c:38:a7:
6d:0d:5f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:55:08 2025 by rpki-client