Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/LvFjIisWM7To9m5EnTi0tfrXTlo.roa
File: LvFjIisWM7To9m5EnTi0tfrXTlo.roa (raw, json)
Hash identifier: T0o5iKvljNRUBopgjj5sdFTuqbsq37foCQxnHNO42gM=
Subject key identifier: 2E:F1:63:22:2B:16:33:B4:E8:F6:6E:44:9D:38:B4:B5:FA:D7:4E:5A
Certificate issuer: /CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Certificate serial: 01965BD3349A2828505FEC193265BD83FBA1
Authority key identifier: F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/LvFjIisWM7To9m5EnTi0tfrXTlo.roa
Signing time: Tue 22 Apr 2025 04:48:10 +0000
ROA not before: Tue 22 Apr 2025 04:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211540
IP address blocks: 195.242.204.0/24 maxlen: 24
2a14:6d40::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 23 Apr 2025 13:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:d3:34:9a:28:28:50:5f:ec:19:32:65:bd:83:fb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Validity
Not Before: Apr 22 04:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ef163222b1633b4e8f66e449d38b4b5fad74e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:db:d0:1b:a2:23:ef:0f:50:fc:d5:12:5e:eb:
11:f4:5d:18:db:e3:37:d5:aa:5b:84:1d:cd:ad:8f:
db:94:b7:3a:6a:47:8b:c9:b7:87:35:46:6b:e0:eb:
23:50:5b:28:4e:4b:31:d1:c5:aa:1f:a6:41:02:b6:
98:4d:14:18:43:7d:c3:77:15:da:0b:bb:90:95:a7:
77:d0:cc:60:5f:41:c3:6a:13:e0:ee:36:11:3f:fb:
86:72:e0:dd:74:20:42:74:68:9f:6a:ab:10:1c:a8:
a8:5a:b2:83:7a:c9:c7:bc:a7:60:a8:29:3c:63:9f:
e8:20:fc:7f:7e:b8:3e:a2:e1:8f:1d:79:0d:e4:e4:
3b:5d:ab:83:3d:ff:41:b4:e8:25:52:6b:96:64:9d:
0c:e9:03:5b:81:f0:bc:9f:86:14:17:98:1f:56:25:
bb:8e:44:f2:7f:e4:20:0b:29:f2:f2:ba:16:4c:d4:
ef:9b:9d:f2:a0:43:88:20:d4:db:97:f6:4d:41:f5:
a2:9b:b4:fd:45:be:15:28:0b:1d:ca:c3:e4:f3:35:
83:c5:14:7f:13:0d:66:04:ca:5f:d1:af:63:ef:da:
93:37:f2:a2:0e:32:98:ff:a5:87:05:57:31:e7:c4:
18:a2:f8:c1:9f:65:e4:4f:65:60:58:df:bd:b1:e5:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F1:63:22:2B:16:33:B4:E8:F6:6E:44:9D:38:B4:B5:FA:D7:4E:5A
X509v3 Authority Key Identifier:
keyid:F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/LvFjIisWM7To9m5EnTi0tfrXTlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.204.0/24
IPv6:
2a14:6d40::/32
Signature Algorithm: sha256WithRSAEncryption
7c:2e:78:40:f1:52:36:59:6a:1e:c9:a4:28:4e:bf:c9:c9:3c:
c5:cf:68:e5:78:09:f4:9b:ad:b3:9b:3b:22:98:0a:b7:d4:62:
60:68:98:80:4f:ef:9d:f3:bd:62:b3:e8:c2:66:f9:d1:5b:e9:
08:b9:4d:a5:3d:09:30:e8:7b:2a:90:1f:b8:9b:73:9b:a2:76:
9e:8e:10:81:d0:19:76:b3:91:67:f6:60:46:83:4d:63:fa:7c:
d1:ca:3a:f4:7b:94:88:2e:4a:03:85:99:4b:89:4f:29:97:c1:
7e:f0:6a:74:0a:86:77:52:df:18:3e:8e:e1:85:6f:f2:4e:1a:
19:44:0b:8c:2f:56:c8:61:b4:d1:86:da:18:fa:e1:55:47:ae:
33:8f:b6:39:75:00:06:a7:6f:8f:b0:80:6f:fb:65:80:50:ae:
e0:50:07:04:b2:1b:00:4e:d0:96:d5:95:9c:b5:b3:fd:8e:b5:
a1:48:80:80:44:ee:91:e5:7c:53:c8:9a:61:d4:b4:0e:6a:70:
c6:da:62:bd:33:c4:83:21:49:26:37:71:22:f0:eb:53:62:79:
7b:3e:2e:81:5d:74:eb:e0:b5:0f:09:ed:b8:2f:9f:f4:21:af:
ca:4b:e2:87:19:52:3a:05:c5:35:7f:15:47:14:df:ee:f5:ea:
85:1c:da:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:49:43 2025 by rpki-client