Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/LntazgqoSOPQwmrhbU8mOe2XrFk.roa
File: LntazgqoSOPQwmrhbU8mOe2XrFk.roa (raw, json)
Hash identifier: zvz0/pz3Es1Oylk4W3Zt06vWw0p0HXhyX7kWlIJ+HDo=
Subject key identifier: 2E:7B:5A:CE:0A:A8:48:E3:D0:C2:6A:E1:6D:4F:26:39:ED:97:AC:59
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0193CE99E7E531BB3AC09E5312D46955DE2F
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/LntazgqoSOPQwmrhbU8mOe2XrFk.roa
Signing time: Mon 16 Dec 2024 08:33:32 +0000
ROA not before: Mon 16 Dec 2024 08:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12302
IP address blocks: 45.139.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Dec 2024 09:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:99:e7:e5:31:bb:3a:c0:9e:53:12:d4:69:55:de:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Dec 16 08:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e7b5ace0aa848e3d0c26ae16d4f2639ed97ac59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:88:2b:3d:dc:da:43:79:5c:eb:e2:3c:50:
77:99:1a:a8:ea:7b:d2:35:6f:d2:f3:3e:ec:88:22:
24:ae:1c:05:38:dc:9a:03:ac:17:44:8d:25:3e:2d:
d7:8b:93:f8:23:b7:37:ec:8b:42:00:b6:8f:14:43:
ed:30:a2:1a:df:4d:d7:fc:11:24:34:4e:b0:79:79:
88:c0:c5:09:6b:c4:7c:2d:3a:51:3c:72:a2:c7:46:
af:5c:96:4e:bf:cc:d8:35:4f:69:e1:5e:e4:d7:e1:
76:c7:b1:a6:35:a8:90:c4:70:70:f3:d5:3b:33:aa:
f5:d3:a3:3d:e5:1d:f0:2b:b6:20:68:92:90:5a:c9:
96:60:8e:3e:e4:9d:0a:62:75:59:e4:be:bd:57:22:
37:92:1a:59:54:85:84:36:5a:7e:07:ce:a6:fd:47:
f8:f1:2d:6e:5c:3a:d7:8c:54:12:88:5e:ad:20:23:
2b:40:62:9f:4b:18:af:f7:9c:e6:22:b5:6e:0e:7e:
51:e0:07:7a:32:23:d3:a3:08:5b:bf:de:1a:a5:d4:
08:26:fb:0d:2e:89:86:f3:eb:5f:75:47:6c:b7:77:
64:e7:95:b7:b4:2c:3f:1a:bf:46:94:7e:7e:37:b3:
e8:48:cb:c1:d4:5e:a5:e8:0a:f3:e9:7f:23:b0:6a:
14:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7B:5A:CE:0A:A8:48:E3:D0:C2:6A:E1:6D:4F:26:39:ED:97:AC:59
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/LntazgqoSOPQwmrhbU8mOe2XrFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.71.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:fb:a7:a6:fb:6d:31:a6:33:e5:f4:dd:b5:5b:c0:49:bd:e5:
a0:56:cd:4c:e9:d5:fa:b0:58:c0:2c:bd:4f:5f:29:7d:d1:c0:
71:58:c7:af:54:17:25:d1:fb:50:ed:01:bd:a6:ea:e9:65:2c:
4d:8a:ce:a7:c1:c6:e5:33:90:ec:8e:2b:d9:ab:8e:3d:db:7c:
f0:47:44:c2:9f:82:31:c5:32:ae:ad:4a:28:fa:bd:1e:4a:f9:
87:2f:06:6a:a1:4b:a3:d7:95:e6:58:ba:a7:7c:f0:d3:b9:ce:
53:56:64:d7:7f:5c:c8:65:e1:c2:2c:5a:12:8b:52:1e:f7:5b:
31:74:a3:1c:73:b0:b4:09:11:25:d7:aa:49:43:3c:07:a3:ce:
29:08:8a:69:14:90:e3:a0:55:43:32:42:54:da:c6:93:1a:61:
02:ff:f4:00:0e:34:ce:2f:ad:2d:72:79:f1:3f:cb:9d:0a:b1:
f0:51:a6:53:d7:26:de:a4:e6:0e:25:1f:b6:0d:66:9b:9b:e0:
50:f3:c6:a7:da:06:42:8e:c3:2c:6d:bd:ec:8b:60:0a:fd:e8:
4f:cf:4c:aa:49:ee:81:1c:ce:93:d9:21:24:0c:da:e6:5c:4a:
84:71:d9:78:97:52:dd:73:ed:a0:e3:1d:9b:ab:3f:b1:dc:ab:
21:ca:50:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:58:18 2025 by rpki-client