Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/LiUoJkzRTp8734UCThSyE1gjgZM.roa
File: LiUoJkzRTp8734UCThSyE1gjgZM.roa (raw, json)
Hash identifier: u9x67+7sCIRDape3XnsVpYY52OGzYiyNDU+NWI5Qh3g=
Subject key identifier: 2E:25:28:26:4C:D1:4E:9F:3B:DF:85:02:4E:14:B2:13:58:23:81:93
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 019508EDE26E0C13AA651E6132E21C99479D
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/LiUoJkzRTp8734UCThSyE1gjgZM.roa
Signing time: Sat 15 Feb 2025 09:26:02 +0000
ROA not before: Sat 15 Feb 2025 09:26:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209564
IP address blocks: 82.146.23.0/24 maxlen: 24
84.238.223.0/24 maxlen: 24
185.32.149.0/24 maxlen: 24
185.32.150.0/24 maxlen: 24
185.32.151.0/24 maxlen: 24
185.240.182.0/24 maxlen: 24
185.240.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Feb 2025 09:34:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:08:ed:e2:6e:0c:13:aa:65:1e:61:32:e2:1c:99:47:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Feb 15 09:26:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e2528264cd14e9f3bdf85024e14b21358238193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:1c:0f:a1:6c:a8:04:e1:75:a9:c9:8c:ec:
7c:65:2a:7d:70:0d:f1:93:fe:ca:db:7a:44:d7:d0:
ee:1f:e0:7e:28:b9:9f:21:d9:76:15:49:8e:92:7e:
fb:d8:d7:4f:84:3b:78:cc:b6:97:ee:3e:30:b1:30:
7c:91:54:bd:11:6d:03:6c:fc:a0:98:be:54:40:37:
16:e3:a5:d8:5b:4f:ca:89:d8:4d:a2:2c:b6:fd:48:
7c:e2:2f:b8:ff:74:b9:44:68:54:56:7c:6f:90:5b:
84:e1:3a:1f:0d:6a:8d:77:c9:7b:6e:4b:4a:d7:66:
2b:fd:e3:ce:50:ce:db:c3:df:f8:dc:15:24:10:ec:
03:8e:d8:5f:90:35:ac:86:52:4e:57:19:fc:56:19:
c4:28:11:41:b9:33:12:b0:1a:55:87:0a:99:df:e3:
ee:2d:b4:12:7a:8a:d8:11:e6:e8:5f:ec:4f:e2:ed:
73:b4:f1:a1:37:27:c5:63:46:1b:77:ab:a8:6c:35:
b9:1c:02:95:84:c6:26:7d:26:ff:4e:c4:ef:c5:96:
0a:85:2e:68:32:8d:fe:2b:37:50:83:34:18:ea:31:
b3:e3:dc:26:6d:8f:5f:a8:6a:d9:bb:68:85:c7:fd:
4b:c9:3b:16:73:be:90:bd:6e:de:67:6c:8d:c8:ef:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:25:28:26:4C:D1:4E:9F:3B:DF:85:02:4E:14:B2:13:58:23:81:93
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/LiUoJkzRTp8734UCThSyE1gjgZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.23.0/24
84.238.223.0/24
185.32.149.0-185.32.151.255
185.240.182.0/23
Signature Algorithm: sha256WithRSAEncryption
67:b5:59:a0:dd:84:23:53:c5:65:ee:e3:fb:a4:c2:3e:0f:e5:
41:bc:f0:45:77:0d:ae:bb:b0:02:23:7c:b1:9e:af:e0:6b:01:
06:2e:2a:5d:3e:57:b7:f3:e6:d2:49:a4:d9:17:34:65:c5:31:
47:82:50:7c:3f:e2:6a:23:31:fa:82:c6:a1:7c:08:f0:14:02:
b9:f7:c2:26:db:d1:20:89:47:e9:ee:f1:fb:73:c8:97:b0:85:
61:4b:8c:d3:54:66:f6:c3:b6:30:89:34:6a:c1:05:2b:b5:07:
ce:7c:a0:f1:4f:72:7a:6f:23:58:fc:33:49:98:6d:3d:d8:01:
6d:21:25:b6:62:40:ad:38:23:d9:ba:47:96:75:f4:6e:be:96:
e8:5d:5a:f4:a2:43:dc:d0:7a:d3:81:4a:b4:1c:c7:c4:b3:f2:
a1:58:3f:d0:de:c9:78:61:57:0d:8c:f2:3d:b4:71:7a:eb:34:
7c:14:a2:7e:f2:03:64:1b:cf:ac:3a:29:0c:4a:3a:1c:49:4d:
0c:7c:6a:c2:25:eb:31:b9:3c:1f:37:7d:49:ff:45:b9:70:2d:
b2:e5:d1:eb:3a:19:7c:71:20:f5:d2:e6:9b:aa:f1:e9:35:fb:
f5:da:83:0d:0a:81:fd:e7:7b:ef:21:2f:e8:83:e5:f7:98:49:
ac:5e:da:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:46:12 2025 by rpki-client