Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LJCEoLHjwh0lyotzGg_jd8EcSR8.roa
File: LJCEoLHjwh0lyotzGg_jd8EcSR8.roa (raw, json)
Hash identifier: 378j/MtLn0YpkOzL/aBrqnLbXmZD354PTzEyAmRDVy0=
Subject key identifier: 2C:90:84:A0:B1:E3:C2:1D:25:CA:8B:73:1A:0F:E3:77:C1:1C:49:1F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019403B8EF6EA1CB206EFD3A50F43E28BDAC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LJCEoLHjwh0lyotzGg_jd8EcSR8.roa
Signing time: Thu 26 Dec 2024 16:07:19 +0000
ROA not before: Thu 26 Dec 2024 16:07:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400992
IP address blocks: 185.121.12.0/24 maxlen: 24
185.121.15.0/24 maxlen: 24
193.17.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:03:b8:ef:6e:a1:cb:20:6e:fd:3a:50:f4:3e:28:bd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 26 16:07:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c9084a0b1e3c21d25ca8b731a0fe377c11c491f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:d2:ac:d1:c3:f0:4d:22:a3:97:fd:d8:54:
43:7d:33:f0:30:bf:0d:fb:5d:47:5f:f2:db:54:9e:
4d:e3:b4:ab:25:44:83:01:58:94:ba:13:6f:9b:71:
41:b4:97:09:85:d7:60:0d:7d:9f:b6:56:a8:c6:67:
f8:ae:56:da:d3:5e:db:47:03:22:5a:66:8a:20:20:
69:0b:37:ab:f8:0a:0d:56:7b:6b:73:d6:76:bc:14:
99:30:88:45:ce:ca:9e:fd:4d:32:34:14:19:6b:c2:
62:89:4d:ea:cb:d8:6d:b7:93:38:fc:e1:bb:b3:1f:
48:fc:2a:15:70:92:56:4a:d4:2d:ce:1a:c0:1f:9d:
3b:b6:6c:12:28:38:ce:1b:4c:62:59:11:c1:e4:3c:
fc:2b:2c:68:b5:e0:47:c1:07:70:5a:7b:7f:36:41:
06:8f:38:b4:d2:a0:1a:2b:66:37:2a:16:0d:aa:19:
f1:93:ba:03:57:a3:9e:41:48:7f:a2:b3:3d:c1:da:
6b:6c:a4:3d:85:e7:e6:34:c5:30:76:f9:b6:f6:96:
fb:b9:b0:d0:3f:10:8e:b4:ef:07:9f:2d:73:ae:b6:
f1:9e:0f:11:8a:53:74:a6:bd:b3:31:57:ea:00:11:
b8:33:b2:1a:19:a4:fb:2d:47:4e:40:28:7f:58:37:
07:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:90:84:A0:B1:E3:C2:1D:25:CA:8B:73:1A:0F:E3:77:C1:1C:49:1F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LJCEoLHjwh0lyotzGg_jd8EcSR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.12.0/24
185.121.15.0/24
193.17.183.0/24
Signature Algorithm: sha256WithRSAEncryption
53:0e:5d:fc:bc:e5:0e:1f:e5:25:df:73:5a:60:4f:d1:08:f7:
46:8d:bb:af:78:d9:a0:c4:77:b3:cd:5c:cd:6f:94:62:08:44:
13:e4:33:26:b9:36:0b:d2:6e:8c:fb:be:36:3f:a7:b1:66:3d:
a2:95:04:0c:59:47:5e:19:a2:8f:91:0a:43:ac:57:60:3e:4a:
33:06:b6:cb:1f:46:71:5b:40:43:68:da:08:da:45:fc:60:22:
1e:1d:bc:16:4e:bc:be:47:22:76:81:70:71:08:9d:b1:c8:41:
cb:32:dc:a5:d1:84:cf:92:70:fb:b8:4b:2b:9d:72:2f:da:07:
94:54:11:ee:44:81:da:5e:40:56:e8:d6:d1:b6:f0:8f:54:ac:
94:c2:ae:bd:40:cc:41:9c:37:67:b5:6f:08:1f:fb:f9:d1:94:
ea:c5:a5:ef:e3:c0:bc:0a:55:0b:36:32:f1:57:e8:1c:43:02:
c5:ea:97:35:d7:06:f4:43:7b:8a:bd:6d:91:fe:50:c3:41:60:
1f:ae:f4:50:55:d8:13:e9:e5:20:27:4c:76:cb:cd:d1:37:ec:
f9:5a:6f:dc:2f:84:20:de:85:da:39:4f:e0:5c:c7:1f:9d:fb:
d4:6a:e9:23:e5:ad:7b:18:ce:57:89:bd:f8:f5:1e:0b:2a:eb:
80:bf:2f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:37:15 2025 by rpki-client