Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/1LrKRPjZFDZ0R0PM29koB7jVBsc.roa
File: 1LrKRPjZFDZ0R0PM29koB7jVBsc.roa (raw, json)
Hash identifier: 2q3u22KbzqxLCZTds5yWJpwk6Ko65R0vIMIvF1ctO3E=
Subject key identifier: D4:BA:CA:44:F8:D9:14:36:74:47:43:CC:DB:D9:28:07:B8:D5:06:C7
Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial: 018CCA99E3707C7CD03FB7383EEC5EE3E780
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/1LrKRPjZFDZ0R0PM29koB7jVBsc.roa
Signing time: Tue 02 Jan 2024 14:35:31 +0000
ROA not before: Tue 02 Jan 2024 14:35:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34458
IP address blocks: 217.150.82.0/24 maxlen: 24
217.150.83.0/24 maxlen: 24
217.150.80.0/24 maxlen: 24
217.150.84.0/24 maxlen: 24
217.150.81.0/24 maxlen: 24
217.150.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 16:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:e3:70:7c:7c:d0:3f:b7:38:3e:ec:5e:e3:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Validity
Not Before: Jan 2 14:35:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4baca44f8d91436744743ccdbd92807b8d506c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:ef:7d:8c:e4:de:54:06:89:e3:f3:a2:02:
ac:f9:fe:17:2a:fa:40:90:77:6a:30:df:5a:c9:8d:
79:db:a1:41:69:25:5b:dd:d2:15:7f:32:d8:d4:d3:
5f:62:7e:88:b9:8a:f0:87:52:44:eb:fe:cb:98:26:
96:20:e6:fc:85:b6:ff:b4:55:d1:e9:e2:2d:81:4f:
30:0a:65:56:8f:41:2d:d4:cb:99:5d:35:03:58:af:
71:f8:92:d6:f4:4d:28:18:08:8b:66:75:80:05:6d:
b7:15:63:18:22:c9:05:2e:4c:cb:9c:ae:99:c6:c6:
77:ab:6b:53:34:be:9e:ac:27:a0:c9:49:6c:a9:a6:
82:b1:7b:8c:f6:12:64:7b:e9:34:71:1d:70:37:34:
60:88:77:89:26:e6:f3:2a:5f:28:df:99:30:9c:7a:
bf:03:6c:29:a2:5a:74:27:14:87:bf:7e:34:80:4a:
f3:55:43:6d:dd:a7:b0:a3:b2:eb:7c:6e:8e:52:3b:
e6:41:f2:16:0b:de:13:d7:45:e7:93:09:c8:34:94:
7d:50:66:34:22:58:ce:8b:30:5a:d8:d2:58:8b:44:
7d:4d:64:f3:b3:ca:a5:77:43:b6:f7:77:29:4d:1e:
a3:9e:73:5b:c9:a8:17:ad:68:6b:34:c7:ab:16:11:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BA:CA:44:F8:D9:14:36:74:47:43:CC:DB:D9:28:07:B8:D5:06:C7
X509v3 Authority Key Identifier:
keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/1LrKRPjZFDZ0R0PM29koB7jVBsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.150.80.0-217.150.85.255
Signature Algorithm: sha256WithRSAEncryption
91:f7:ca:65:f5:25:c5:0a:e6:10:13:fe:ce:96:73:5c:76:f4:
b1:87:6a:18:a3:86:f7:87:34:39:80:fe:a7:aa:0a:70:a9:df:
89:62:98:6a:2a:52:bf:39:68:7a:fe:a0:e9:cc:83:20:9b:5f:
b6:1d:3d:35:21:86:42:df:05:c4:ba:04:7c:6f:49:00:da:38:
2e:b0:5d:bc:04:a9:d7:10:ab:3d:8c:55:7d:84:c4:53:3d:34:
8d:ae:0c:09:99:b4:a5:a6:07:34:60:25:57:0c:5b:4e:69:8c:
d8:7b:4a:be:5f:72:ff:ca:9c:6e:89:c1:db:cd:a4:2e:09:6e:
75:03:5d:4c:9f:72:7e:17:84:dc:86:62:92:ff:be:cc:43:4f:
84:21:9c:f8:4d:b8:4c:a5:e8:68:55:a9:99:bb:63:6b:cc:f8:
c4:1f:94:30:db:dd:aa:74:03:dc:06:d8:86:6f:f8:7b:80:7e:
e5:f7:ab:65:6d:03:5e:37:2c:f4:9e:b6:81:5f:6d:7f:44:3e:
e6:f3:71:bc:f8:c3:86:3b:55:42:bc:0c:3f:99:ad:8c:21:c5:
20:8c:13:a6:c9:0e:ee:4c:60:01:80:2d:04:f0:d8:95:d1:14:
53:c1:42:68:32:51:d4:fe:9c:cb:c6:70:04:07:16:83:61:3f:
ff:12:2b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:20:47 2025 by rpki-client