Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/L4iE-3Hi45CighS6t8Y3ptEqRHA.roa
File: L4iE-3Hi45CighS6t8Y3ptEqRHA.roa (raw, json)
Hash identifier: X3gmDm7QTKq2wARy+JFi90TJXfP9viGi+TV1gNqJHtU=
Subject key identifier: 2F:88:84:FB:71:E2:E3:90:A2:82:14:BA:B7:C6:37:A6:D1:2A:44:70
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01955CA9644286B234DA292BEE7A14661EF7
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/L4iE-3Hi45CighS6t8Y3ptEqRHA.roa
Signing time: Mon 03 Mar 2025 15:39:19 +0000
ROA not before: Mon 03 Mar 2025 15:39:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 109.236.49.0/24 maxlen: 24
109.236.50.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 15:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:a9:64:42:86:b2:34:da:29:2b:ee:7a:14:66:1e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Mar 3 15:39:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f8884fb71e2e390a28214bab7c637a6d12a4470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:08:38:33:9e:ca:ba:ac:6b:e1:99:39:7e:
a5:34:79:c2:2a:f1:ec:67:26:e3:c0:9b:52:84:d6:
00:f0:9b:e2:f0:66:73:d3:f1:94:16:ee:2f:f1:85:
36:c2:49:fe:f7:a7:59:6c:3d:0d:73:9c:e5:59:e0:
db:27:db:3e:4c:82:e0:99:72:b1:ff:1b:89:9a:c0:
38:01:5d:d0:f4:d5:c7:c4:aa:18:96:ab:64:ba:9f:
42:4d:9c:46:90:2c:10:93:36:54:94:da:e1:16:29:
3c:67:1b:fd:07:20:df:4d:f5:35:59:10:f2:c5:6b:
d1:8f:3b:24:00:6e:44:9d:2f:58:31:c2:ac:a2:8e:
d4:0a:4f:dd:00:08:fa:30:b7:44:53:a8:6e:5c:c9:
8c:76:8b:6f:e9:8b:6e:4a:e7:16:28:f0:12:47:12:
4a:83:f8:7b:59:5e:c7:36:46:6f:c0:ec:55:ed:ba:
c0:45:fa:b7:72:b5:46:93:72:45:e1:ee:11:71:b7:
71:fa:3b:a0:05:fb:32:3a:81:44:aa:d2:8a:04:68:
52:8e:b6:a2:18:8b:95:11:ac:15:4c:30:4a:21:72:
f8:24:88:8e:5d:a8:36:09:cf:88:98:2e:f3:19:5f:
a5:65:88:86:98:08:c8:f2:e6:36:ff:59:43:c7:05:
bd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:88:84:FB:71:E2:E3:90:A2:82:14:BA:B7:C6:37:A6:D1:2A:44:70
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/L4iE-3Hi45CighS6t8Y3ptEqRHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0-109.236.51.255
Signature Algorithm: sha256WithRSAEncryption
ae:9e:c0:b2:25:25:d8:3a:2b:22:1d:78:ba:bd:c7:9e:1d:68:
55:0f:85:aa:11:b2:4b:05:c0:97:9c:6e:61:51:7c:8c:a2:0d:
f0:81:be:77:f3:34:f3:c4:c8:93:2e:d9:ca:6c:db:c1:80:ab:
8d:3c:42:5e:05:67:7e:01:df:8d:91:96:74:11:01:21:25:6d:
c7:50:16:a5:34:09:29:f0:54:56:3a:c4:bd:06:b8:d8:96:af:
2a:e6:6e:0c:ce:c0:b3:19:3e:71:8b:f6:51:0a:c0:f4:eb:fd:
e5:f5:ee:f2:42:8d:10:b5:cd:98:37:fc:02:dc:65:f7:30:95:
aa:fc:28:0d:0e:cb:fd:22:1f:5c:4b:a4:e2:65:c7:01:6a:b4:
d9:01:66:87:fa:55:2d:97:1b:96:61:84:31:89:94:ea:d0:c9:
f1:6c:0d:15:28:76:ee:fb:f5:97:26:02:af:ff:bc:3a:4d:64:
fc:0a:5a:48:e9:61:95:4c:57:80:23:0d:04:a9:57:d5:d2:ad:
49:75:0b:54:e8:ec:31:d7:75:41:c1:cc:57:4f:86:cf:97:f4:
6d:9e:34:07:3f:69:4b:38:f9:e2:03:46:f0:5a:8c:c5:62:04:
9e:6b:39:91:5f:90:5e:5c:83:b8:d9:3b:49:a7:b1:ac:4b:68:
bc:4f:6d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:39:00 2025 by rpki-client