Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/Lbsy7w12vz23nyIHz3VtK0ULC-0.roa
File: Lbsy7w12vz23nyIHz3VtK0ULC-0.roa (raw, json)
Hash identifier: 6YyPYXGqEcAZp8l/mUG4VtRqZlisT5OD3CqPSeKduFw=
Subject key identifier: 2D:BB:32:EF:0D:76:BF:3D:B7:9F:22:07:CF:75:6D:2B:45:0B:0B:ED
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 019433CD4986F8EEB108AA2C80122E9F310D
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/Lbsy7w12vz23nyIHz3VtK0ULC-0.roa
Signing time: Sun 05 Jan 2025 00:11:19 +0000
ROA not before: Sun 05 Jan 2025 00:11:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40965
IP address blocks: 185.110.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Jan 2025 00:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:33:cd:49:86:f8:ee:b1:08:aa:2c:80:12:2e:9f:31:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Jan 5 00:11:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dbb32ef0d76bf3db79f2207cf756d2b450b0bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:41:0b:38:04:d5:79:c7:2f:79:8b:64:98:
d9:87:87:dc:54:90:cf:17:41:19:e0:a8:50:22:f1:
fa:f9:88:5e:e5:fa:75:80:c6:9f:7e:48:3d:b6:cc:
9e:5f:a1:03:58:89:58:64:56:8d:67:11:05:35:4f:
b0:36:7e:de:de:9f:4a:92:0b:2a:0e:a7:bb:ec:63:
0f:b5:59:a8:69:ac:ba:e2:f0:93:b5:f3:d4:09:05:
f9:04:0b:92:e6:c7:a4:f0:0e:8d:a0:07:f8:4e:68:
04:2e:63:30:2d:f5:7c:97:c7:f3:8a:a3:44:ba:97:
9c:3e:6e:bb:91:9d:46:41:bd:b0:2b:9f:16:e3:39:
39:11:68:85:62:05:df:fe:9d:d8:60:c2:0c:e1:34:
ef:7b:73:36:65:26:07:61:69:df:41:2a:63:2b:97:
eb:af:de:f4:01:c6:2a:ef:b9:43:bf:2b:82:df:35:
36:42:c0:31:fb:4a:b8:78:8a:10:dc:a3:9d:03:f9:
02:f3:e4:d0:89:d0:c1:68:fa:7d:71:bf:52:a9:5d:
78:b8:58:b0:39:8d:ee:1e:ab:99:38:47:d5:be:77:
2a:df:80:f9:72:01:b2:08:84:a3:cf:9c:48:5e:5e:
0b:92:a7:49:f0:40:ce:25:00:e7:7b:6a:3e:68:9f:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BB:32:EF:0D:76:BF:3D:B7:9F:22:07:CF:75:6D:2B:45:0B:0B:ED
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/Lbsy7w12vz23nyIHz3VtK0ULC-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.132.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:60:5a:a2:b1:2d:78:17:21:22:bb:74:0c:64:8c:12:7e:73:
14:e7:2f:7e:e1:52:63:eb:d7:a9:e8:24:ec:b8:90:4c:19:22:
0c:bb:5e:e4:80:eb:57:f7:61:52:bd:0a:3d:2b:bb:ff:15:32:
33:19:f2:1c:4a:f1:5d:7f:e4:fa:ad:de:25:8e:d2:44:40:5a:
55:0b:b7:a3:c8:52:7f:f4:aa:95:aa:d7:1c:4c:2d:da:9c:25:
9a:35:cf:d2:c8:9a:0d:30:2b:78:76:a8:02:c7:78:c3:76:ff:
c8:14:5c:84:37:5b:6a:25:04:05:5f:44:b7:3d:cd:65:f9:03:
fc:e1:58:dd:53:17:4a:1e:e7:d9:7f:2e:3a:6e:40:85:7c:58:
75:a5:99:17:09:c0:83:cf:9d:ba:94:7c:19:fd:cf:8e:ed:41:
c1:7a:b4:62:8b:4b:30:83:8f:b3:04:58:b5:7e:48:3d:2c:f3:
b5:41:bc:c9:fe:73:9f:b0:c3:ed:96:0b:79:93:aa:13:2b:02:
68:76:5d:aa:61:0d:b3:cb:34:39:03:cb:da:fc:0b:24:9f:e9:
5c:19:a5:1e:c2:58:12:d9:6c:a8:ac:34:fe:ff:a8:ef:53:28:
49:08:c1:9e:4f:e0:55:63:88:3f:59:9b:c5:36:a0:49:1d:5e:
56:d7:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:34:44 2025 by rpki-client