Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/LRCLSVYsdhLrbUhrZDWmKS4bX1s.roa
File: LRCLSVYsdhLrbUhrZDWmKS4bX1s.roa (raw, json)
Hash identifier: JhqBO4hhwc/qiXVqjHVWKrWBeH0wu9V1b6gwweeDxrw=
Subject key identifier: 2D:10:8B:49:56:2C:76:12:EB:6D:48:6B:64:35:A6:29:2E:1B:5F:5B
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 018CC86FB385EB0AE2208C2AE7B199B6A4F1
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/LRCLSVYsdhLrbUhrZDWmKS4bX1s.roa
Signing time: Tue 02 Jan 2024 04:30:12 +0000
ROA not before: Tue 02 Jan 2024 04:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209287
IP address blocks: 82.199.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b3:85:eb:0a:e2:20:8c:2a:e7:b1:99:b6:a4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Jan 2 04:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d108b49562c7612eb6d486b6435a6292e1b5f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bb:12:26:49:71:f8:c4:37:0c:ce:14:42:bb:
eb:14:88:1b:38:5d:89:e1:32:51:5d:64:78:2c:93:
4e:99:fa:ad:be:12:a3:a4:54:0f:9b:0a:30:f1:b1:
b1:c1:30:69:3f:60:0d:df:b3:b0:30:e9:13:48:c1:
10:c2:4d:60:a2:4b:6b:93:6d:b1:12:9d:96:88:28:
aa:2a:b6:8c:ac:f9:0f:af:3c:e0:67:44:12:84:f8:
ae:ca:43:b4:e3:52:b9:77:a2:d7:d0:f1:40:bb:7b:
f6:de:36:2d:dc:5c:69:55:20:0c:32:b6:30:42:c7:
7d:de:4c:25:91:c0:5d:f5:d2:56:9f:d4:03:14:92:
21:41:61:43:7d:b8:f1:d1:43:0c:46:e6:8a:6a:93:
0f:2b:80:e4:12:0b:f6:fc:fd:c5:fc:ee:81:76:2c:
25:59:25:6d:c8:d7:4e:dd:e0:97:54:47:bd:ee:9c:
14:6b:94:8d:6e:52:df:42:6b:3c:34:ee:06:34:ad:
19:4b:59:b6:35:cb:f5:ee:54:ae:e6:7d:5b:54:18:
9c:32:38:6c:bd:2d:35:16:55:a8:7c:be:b3:45:f6:
9a:3a:d8:2a:2e:fd:9a:ad:e7:d0:f2:50:d1:a8:81:
6f:6c:a0:01:41:56:a9:ef:0f:4e:df:fc:27:ac:a0:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:10:8B:49:56:2C:76:12:EB:6D:48:6B:64:35:A6:29:2E:1B:5F:5B
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/LRCLSVYsdhLrbUhrZDWmKS4bX1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.199.62.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ed:64:bd:4e:c0:0e:c8:a0:90:cf:da:63:1e:c4:64:5f:77:
29:eb:c7:4c:26:49:07:ed:95:52:e1:4b:39:72:e5:9a:a6:94:
04:9e:ad:90:49:3c:da:d5:4b:0d:db:9e:da:3b:95:f3:a0:68:
a3:1c:07:5a:4f:76:3d:01:04:e7:a7:7f:57:07:0c:29:b4:1a:
40:c4:c0:dc:f2:24:ef:1d:db:e5:47:c2:6d:05:b8:e3:c9:b8:
de:94:50:d2:96:a0:c5:24:9f:84:9a:dd:b4:a1:15:dd:fb:f4:
13:da:72:98:cf:f0:b4:6a:0c:60:60:7e:31:8e:d8:80:2f:ce:
f7:28:40:90:33:0a:ec:71:48:25:40:7b:cf:17:1f:95:b7:e2:
20:0e:c5:73:2a:a8:23:ff:c2:87:db:13:6e:70:db:c7:0b:7f:
7b:e2:d6:bb:ac:c2:5a:e4:58:13:c6:0a:6a:87:89:25:96:f4:
45:1d:15:7e:10:7b:33:57:3e:e4:20:91:4b:d9:0f:45:68:e9:
1b:dc:70:30:7d:31:b2:ff:a9:b7:5f:b4:99:f3:d2:28:4b:5a:
1a:e9:59:ea:12:4b:68:71:82:8c:ce:de:53:85:00:38:13:07:
38:e4:1e:f8:b2:77:ec:9e:26:9c:04:ac:94:3f:85:1e:45:6d:
8f:44:20:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:29:19 2025 by rpki-client