Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/lJckopPmG5w-FmmNKAZp63ZeZq4.roa
File: lJckopPmG5w-FmmNKAZp63ZeZq4.roa (raw, json)
Hash identifier: ftQRXi5lPY9OqLcFNpb379jse/V+jf1CvRm821NzKL0=
Subject key identifier: 94:97:24:A2:93:E6:1B:9C:3E:16:69:8D:28:06:69:EB:76:5E:66:AE
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 0190FE095C9C5EE31D37CC387DD1F19D47C5
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/lJckopPmG5w-FmmNKAZp63ZeZq4.roa
Signing time: Mon 29 Jul 2024 10:29:04 +0000
ROA not before: Mon 29 Jul 2024 10:29:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 65733
IP address blocks: 90.158.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 10:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fe:09:5c:9c:5e:e3:1d:37:cc:38:7d:d1:f1:9d:47:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jul 29 10:29:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=949724a293e61b9c3e16698d280669eb765e66ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:ba:9e:9b:b1:5c:02:cc:3d:7e:bd:89:b3:
74:9e:27:fe:b8:a8:81:8d:74:55:bf:ae:88:d7:58:
5d:9c:26:2f:15:75:11:04:02:99:c1:66:d7:16:07:
1b:d3:99:e3:9b:a8:ad:47:a1:48:e1:37:18:f7:05:
21:0a:85:4c:aa:53:73:7f:6f:76:b2:73:41:5b:cf:
a9:20:22:09:53:e6:5a:77:c6:91:cd:5c:f5:9d:83:
e5:fe:61:dc:ec:e8:28:fa:58:d2:eb:34:2d:0d:80:
2f:58:90:69:71:f8:da:17:1d:f0:ec:23:3a:27:dd:
3f:3c:74:f7:16:4b:de:db:6b:fc:44:d6:a4:bd:4e:
96:bc:f2:8f:e6:92:7b:18:f7:2b:07:83:3e:9c:85:
72:dd:ed:ad:c5:6b:6d:e9:ec:b9:09:f5:8c:7b:20:
c8:2e:51:d1:c7:27:e0:b5:e7:98:ad:70:2f:81:77:
c4:f5:be:f4:88:fb:be:61:b0:4d:51:3a:2a:d1:59:
70:6a:60:df:c4:df:31:1c:d8:ff:1a:b2:f9:cc:74:
32:c5:24:ed:19:08:30:41:23:ce:de:ab:ed:f3:90:
4a:da:83:b2:0f:54:18:06:fa:2e:80:ac:e6:b5:d0:
d8:02:f5:db:d7:90:6d:09:2b:36:1c:8c:a0:0c:05:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:97:24:A2:93:E6:1B:9C:3E:16:69:8D:28:06:69:EB:76:5E:66:AE
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/lJckopPmG5w-FmmNKAZp63ZeZq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.24.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d7:29:c8:48:f7:fd:bf:1a:27:bd:1e:33:9e:5c:47:ad:d4:
0f:97:ba:fd:2d:52:85:b4:19:6f:42:c4:88:3a:c0:46:fc:de:
5e:44:bf:df:16:5d:fd:36:c8:26:78:42:11:1f:d0:a7:8a:e5:
7e:6c:1c:54:8e:2c:27:94:01:1e:12:a3:df:cf:bd:c1:a8:38:
48:c4:80:72:98:1a:14:5b:70:21:ee:cc:0e:36:b8:cb:a6:48:
5f:eb:7b:91:da:2a:57:8d:b4:52:be:f5:b1:d6:73:8f:42:b7:
0b:79:6c:be:93:78:d8:6c:42:b3:b0:04:06:96:85:aa:89:79:
58:38:66:80:47:10:b6:51:97:25:e4:85:23:ac:ca:8b:72:a1:
f3:49:e0:5e:9a:5f:a6:d9:2d:e8:b9:9f:60:e0:a6:7e:98:9b:
e7:4f:90:94:ea:e1:0b:73:af:50:b0:12:f2:05:cf:f9:4f:bd:
a1:26:90:12:8e:bc:27:3b:29:d1:00:4d:57:c4:9e:cb:93:52:
4e:7d:41:aa:3e:77:2e:d7:fa:28:8d:3a:19:76:33:0f:06:29:
73:15:53:11:8c:b8:fe:c5:7d:a9:47:04:da:d5:1b:54:8e:d9:
98:41:60:d4:44:c1:ba:73:be:11:13:ed:6a:e4:87:6a:72:f3:
b5:ee:40:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 11:57:18 2025 by rpki-client