Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/LvbajWzi9e4mXPBDYjUfWdRs0ZQ.roa
File: LvbajWzi9e4mXPBDYjUfWdRs0ZQ.roa (raw, json)
Hash identifier: 1b1pKEZyR2qz+BKamngOWVVqcNp6yyH8Yc1I4g/d+Pg=
Subject key identifier: 2E:F6:DA:8D:6C:E2:F5:EE:26:5C:F0:43:62:35:1F:59:D4:6C:D1:94
Certificate issuer: /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Certificate serial: 01953C95C3770EF223148C1C0811EC447906
Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/LvbajWzi9e4mXPBDYjUfWdRs0ZQ.roa
Signing time: Tue 25 Feb 2025 10:10:02 +0000
ROA not before: Tue 25 Feb 2025 10:10:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31037
IP address blocks: 194.147.125.0/24 maxlen: 24
194.147.126.0/24 maxlen: 24
194.147.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 11:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:95:c3:77:0e:f2:23:14:8c:1c:08:11:ec:44:79:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Validity
Not Before: Feb 25 10:10:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ef6da8d6ce2f5ee265cf04362351f59d46cd194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:f7:96:ce:03:34:49:c9:c4:c0:75:cc:fc:
fe:6c:bf:29:81:b1:8f:dc:ab:59:c0:ae:17:b7:a9:
a3:ed:e1:f1:4f:56:88:f5:4a:89:07:48:6f:56:63:
7d:05:df:c4:cc:f0:96:bc:08:85:bd:59:8c:09:b6:
d6:88:93:a0:a1:45:a4:95:56:e8:85:c0:bf:96:73:
bb:6a:71:6d:c8:bb:98:84:8a:28:79:08:ae:47:c7:
f6:4e:43:b7:51:32:0a:c4:e6:1e:28:75:4c:80:0e:
53:d2:80:32:57:19:4d:82:b2:04:70:61:7b:81:8e:
dc:7f:21:8d:28:b3:9a:dc:b0:75:d0:84:c7:43:2e:
85:6d:45:b3:07:ca:44:c3:25:35:60:f2:32:2c:2d:
4f:5b:96:96:9d:7a:90:03:4e:2a:1d:db:be:85:e7:
ea:d6:c1:c3:55:e8:b8:cc:b8:be:85:cd:5b:d8:f4:
21:b7:73:c9:e9:ef:cc:52:e0:17:e3:29:64:5d:8a:
98:08:dd:b4:a8:a1:62:d3:26:a9:71:4e:47:ec:6c:
eb:f8:94:94:31:73:ba:b2:f0:21:b9:6c:24:68:52:
50:e2:0f:ad:e3:7e:e2:83:7c:c6:96:4d:d0:0c:8e:
e7:6f:41:41:55:7f:d3:77:d3:d0:6e:fd:99:e3:af:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F6:DA:8D:6C:E2:F5:EE:26:5C:F0:43:62:35:1F:59:D4:6C:D1:94
X509v3 Authority Key Identifier:
keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/LvbajWzi9e4mXPBDYjUfWdRs0ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.125.0-194.147.127.255
Signature Algorithm: sha256WithRSAEncryption
0c:40:09:f2:e6:06:7a:52:c4:0d:91:3d:25:9c:15:41:1e:ca:
76:c1:4c:e7:9d:98:3d:14:17:8c:dc:56:47:fb:92:d6:63:b6:
f1:5a:b7:3a:03:2f:6f:6f:9c:68:d2:00:a0:5b:f2:d6:5d:15:
5f:15:44:61:a8:da:94:4a:c0:60:ec:f5:f5:27:b4:83:62:c9:
0e:63:75:d6:90:7f:3c:42:10:72:08:b7:af:f2:d8:41:a6:25:
80:80:36:23:8f:ef:42:d3:28:94:22:32:be:9f:d9:df:f8:7c:
30:f3:5e:22:bc:7d:1d:6c:dc:ed:1a:fd:eb:58:8c:36:5e:f7:
0c:7f:5c:48:f6:1c:f2:65:e6:8b:0d:81:98:94:28:1c:aa:03:
ea:16:06:8e:c8:d5:ec:96:a3:86:40:2e:43:c7:09:c8:58:2c:
0f:cb:1c:ec:d8:49:84:01:ab:47:a3:50:56:bf:83:56:0b:60:
48:52:97:f0:41:d0:b4:8e:66:72:42:4b:3b:bf:b0:bf:d4:53:
7b:77:7a:41:9d:ce:47:58:76:16:ca:bd:08:e0:99:ad:29:18:
a0:e1:d8:a2:81:e9:44:8f:26:d2:69:7b:b9:3c:c6:76:4f:e2:
11:79:78:d1:02:16:86:fb:5f:e9:07:da:68:61:19:e0:78:18:
7d:5c:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:19:03 2025 by rpki-client