Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/LZpZbA7jU61uL0DuP1GNUMHmMyc.roa
File: LZpZbA7jU61uL0DuP1GNUMHmMyc.roa (raw, json)
Hash identifier: 4yGPlGxPnuIByDyCwROTv0z9IRFyV+k8Iqzym8Rxr4E=
Subject key identifier: 2D:9A:59:6C:0E:E3:53:AD:6E:2F:40:EE:3F:51:8D:50:C1:E6:33:27
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 019373F3AEA986C943FEA601F583EC2745D4
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/LZpZbA7jU61uL0DuP1GNUMHmMyc.roa
Signing time: Thu 28 Nov 2024 18:06:09 +0000
ROA not before: Thu 28 Nov 2024 18:06:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197097
IP address blocks: 81.31.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Nov 2024 08:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:f3:ae:a9:86:c9:43:fe:a6:01:f5:83:ec:27:45:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Nov 28 18:06:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d9a596c0ee353ad6e2f40ee3f518d50c1e63327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:7c:c2:34:ee:d0:dd:d3:e3:c4:19:0f:c4:
ef:d4:4e:06:09:a5:00:b2:f9:6b:70:a8:51:fc:c1:
10:0e:9a:d7:da:83:29:6e:cb:ba:28:3f:4d:88:ed:
77:d8:8b:95:72:22:05:90:a1:63:09:8a:07:56:27:
3e:1b:66:e0:4f:0c:32:d0:60:d5:0e:dd:f9:54:6a:
a4:90:d8:46:a0:14:2b:63:a9:7f:18:62:aa:8b:e3:
36:ac:35:9b:a8:f9:34:0d:43:d3:c0:3b:d7:96:e3:
2d:66:18:f4:24:1e:35:b1:8a:b1:49:a7:b8:e8:8e:
d5:3e:8e:3e:49:25:c3:38:bc:09:9a:ff:e6:aa:40:
19:8e:31:7b:ae:a5:8c:47:8d:80:22:e3:70:58:ae:
7d:2e:72:48:9f:f1:af:a0:38:e6:44:ec:fc:fd:4c:
74:94:56:d3:51:58:01:64:55:23:56:d7:80:f4:e6:
2a:37:96:9c:1b:65:c7:53:39:00:7b:1d:bc:bb:5c:
1b:73:55:18:c5:4d:5d:a9:52:05:51:12:8d:b5:4b:
47:ac:38:53:08:f3:5b:6d:2d:07:b1:c6:bf:d4:81:
6d:9f:83:bb:65:49:97:00:94:20:b6:22:2e:d8:3a:
4c:87:fa:35:fe:cc:73:51:17:5e:d2:9b:fb:cf:9d:
80:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9A:59:6C:0E:E3:53:AD:6E:2F:40:EE:3F:51:8D:50:C1:E6:33:27
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/LZpZbA7jU61uL0DuP1GNUMHmMyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.199.0/24
Signature Algorithm: sha256WithRSAEncryption
91:07:3b:ee:aa:a3:ea:b4:0f:f5:d5:1f:33:2d:52:1b:72:ee:
c1:21:9e:17:13:58:41:3e:5c:1e:bc:01:e6:a7:03:70:76:21:
8a:60:23:3e:5a:c7:37:f7:22:0b:dd:52:a6:50:f5:d5:47:02:
3c:50:f7:cb:39:69:e4:7f:be:4b:5b:75:dd:c9:84:f5:76:b5:
a8:75:82:8d:45:c3:ab:49:7c:57:31:c5:ec:98:2a:5c:08:4e:
22:84:85:73:19:dc:30:6e:74:b4:fb:53:d2:40:0d:e2:2e:aa:
52:e1:c7:b3:55:6b:f8:59:3f:1b:26:ad:0b:2f:77:04:80:6e:
c6:75:c0:98:5f:87:e2:b1:11:2c:16:64:98:c3:6e:7d:b4:0d:
28:f1:f4:1d:65:a1:36:ca:bb:03:4a:f9:5c:9b:9b:11:ae:04:
9e:89:3d:28:bc:da:26:cb:d3:d1:aa:24:3e:9f:d2:07:f5:74:
13:5f:e1:90:1a:1a:ef:03:7d:6c:33:c5:e0:9e:ef:88:41:80:
96:41:aa:13:a4:6a:96:d1:ae:d6:ef:3d:3f:a7:1a:9f:02:43:
e6:12:2b:b9:fe:64:2f:7b:77:cf:7c:e6:e9:82:29:0f:dd:6a:
b3:9a:13:44:8e:f8:a0:46:7d:65:59:a1:26:53:34:d2:3d:73:
24:38:1c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:54:29 2025 by rpki-client