Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/lZKq-LTNHMDloy326uPCzqSyqeI.roa
File: lZKq-LTNHMDloy326uPCzqSyqeI.roa (raw, json)
Hash identifier: kMYyRfImxXZpI27udoLWtniDRUAt87727bqFhEkpgPk=
Subject key identifier: 95:92:AA:F8:B4:CD:1C:C0:E5:A3:2D:F6:EA:E3:C2:CE:A4:B2:A9:E2
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 01958B4D52B5F4670EAC58C2BEE69B67A7B2
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/lZKq-LTNHMDloy326uPCzqSyqeI.roa
Signing time: Wed 12 Mar 2025 17:00:55 +0000
ROA not before: Wed 12 Mar 2025 17:00:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 193.36.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Mar 2025 18:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:52:b5:f4:67:0e:ac:58:c2:be:e6:9b:67:a7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Mar 12 17:00:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9592aaf8b4cd1cc0e5a32df6eae3c2cea4b2a9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b6:4d:be:e2:69:aa:ce:31:e7:47:13:a4:23:
d7:5a:a0:45:4c:ba:8c:e5:1c:14:0c:49:c7:94:df:
7e:00:76:9f:a1:79:79:50:92:7d:8b:22:28:b3:87:
3c:80:95:7c:8d:7f:87:ad:b2:5b:b9:1f:91:e7:ff:
94:67:eb:e3:98:bf:6e:08:cd:61:62:05:ed:08:eb:
95:e7:0a:69:00:ed:4a:94:21:43:e5:ea:4c:88:b1:
47:30:8c:e7:d5:57:59:aa:a7:d5:70:32:36:c2:07:
5a:22:c7:bc:0f:f8:f5:41:35:12:ec:ac:9b:df:6d:
a4:69:de:5c:42:8c:b8:15:0a:6b:23:9d:21:0a:d2:
57:d4:36:c9:2e:81:88:b9:a3:d9:8c:27:60:1e:bd:
0c:b5:ed:e9:e2:e9:98:8b:c3:fc:29:0c:63:8b:d8:
86:fb:27:77:4e:1b:09:f8:fd:52:60:f9:f8:41:40:
89:4f:80:78:c0:62:3f:79:e0:01:cb:a5:02:74:9a:
6f:27:18:17:70:d9:57:6e:cb:93:53:06:8e:49:a6:
85:a5:0f:6e:46:a6:d4:4e:da:59:77:6d:3e:ad:fa:
f3:84:fb:5a:88:3e:76:e2:e4:2e:3e:f5:65:24:61:
68:fd:90:3b:1a:8c:06:35:61:f5:01:08:71:64:05:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:92:AA:F8:B4:CD:1C:C0:E5:A3:2D:F6:EA:E3:C2:CE:A4:B2:A9:E2
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/lZKq-LTNHMDloy326uPCzqSyqeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.162.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ef:33:33:99:6c:73:b8:a4:1f:43:84:31:b5:d2:be:fe:55:
42:1b:f3:70:e6:c0:a1:d3:a2:08:46:9c:ab:b1:da:7c:5e:7f:
96:86:db:27:5c:dc:7c:a1:e6:a3:51:08:4d:01:fa:0e:44:7e:
14:07:c4:1f:df:66:46:1d:fb:b9:0e:8c:63:3f:a0:f9:c8:f4:
96:13:62:75:5a:9b:b5:55:9a:97:f2:73:c4:08:fd:e7:82:3b:
dc:d5:96:7a:b4:54:91:05:fa:f8:bf:2b:e5:26:58:79:30:7d:
6a:8e:cb:02:86:c7:10:64:4b:f1:6a:5d:5d:e2:f9:1e:1c:d1:
ef:84:6d:e7:a3:29:37:49:2f:a0:e1:32:f2:6b:31:83:b6:bc:
6b:6b:5b:32:3e:85:35:d9:61:f5:bb:9f:fa:7d:be:bf:d9:39:
9a:d3:4d:5c:91:48:93:ff:59:8e:79:27:52:f6:97:39:83:01:
85:8a:65:b2:a2:3d:e5:66:a3:77:a8:77:06:a8:57:ea:9b:62:
9b:d3:9c:27:a5:85:67:96:71:12:08:02:b5:a4:19:50:4a:58:
1f:54:9f:30:cf:a8:ab:62:1f:90:7d:2f:17:12:60:3c:48:e9:
03:38:b9:3a:e6:8b:e0:40:05:de:be:89:6c:8f:0b:94:40:14:
0d:ce:65:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:06:11 2025 by rpki-client