Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/lgxcKgVv_ga-kQ8l-IXt7oaWrww.roa
File: lgxcKgVv_ga-kQ8l-IXt7oaWrww.roa (raw, json)
Hash identifier: iZEH5X132MyelH64zK6XcxLf4Lw0N+dIMQ6qrHSHgxM=
Subject key identifier: 96:0C:5C:2A:05:6F:FE:06:BE:91:0F:25:F8:85:ED:EE:86:96:AF:0C
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 01942368D74CB41EFA5402C70ACD684304DE
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/lgxcKgVv_ga-kQ8l-IXt7oaWrww.roa
Signing time: Wed 01 Jan 2025 19:47:40 +0000
ROA not before: Wed 01 Jan 2025 19:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 62.69.144.0/24 maxlen: 24
62.69.146.0/23 maxlen: 23
193.42.155.0/24 maxlen: 24
194.9.117.0/24 maxlen: 24
194.59.190.0/24 maxlen: 24
194.146.118.0/24 maxlen: 24
2001:7f8:8::/64 maxlen: 64
2001:7f8:8:5::/64 maxlen: 64
2001:7f8:8:10::/64 maxlen: 64
2001:7f8:8:20::/64 maxlen: 64
2001:7f8:2c:1000::/64 maxlen: 64
Validation: Failed, certificate revoked on Wed 26 Mar 2025 04:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:d7:4c:b4:1e:fa:54:02:c7:0a:cd:68:43:04:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Jan 1 19:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=960c5c2a056ffe06be910f25f885edee8696af0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:dc:39:eb:f1:6c:31:e7:62:90:02:09:c9:
29:59:2b:f8:8b:c6:dc:f6:dd:b7:18:23:85:ec:13:
da:48:b2:43:be:dd:32:f3:2d:e1:00:51:8b:33:5f:
94:f8:52:e6:24:a5:ab:81:e4:2e:34:f4:ef:8f:4a:
73:18:0e:0f:5b:5c:39:ca:23:12:63:d0:07:69:4f:
e9:02:dc:d1:06:39:46:4a:fb:73:4a:cb:22:bf:f1:
f4:db:f9:a6:a3:6d:f8:35:d7:8a:ca:b9:69:a4:95:
4e:8b:4b:02:63:5c:20:ea:dc:37:8e:22:d1:82:b8:
ce:1c:53:55:90:61:65:52:bf:af:0b:01:26:53:c4:
01:46:7c:d2:86:2f:1e:32:49:e2:a8:18:3b:85:0f:
2e:f0:18:18:a0:cb:9a:11:6b:7c:fb:87:b1:90:c6:
95:68:17:87:97:86:42:c6:70:2a:f6:3a:16:30:b2:
fa:e7:25:11:4f:a5:1e:e6:0a:62:2d:59:68:55:80:
7b:02:31:f3:e6:7e:c2:51:4c:ff:ab:d1:f9:dd:31:
e1:e6:79:5f:ab:39:20:f0:65:16:d0:5c:5c:90:9e:
03:cb:3e:da:69:ed:76:68:03:92:8f:0c:0d:fd:30:
a4:6e:f9:3f:d3:a3:5c:f5:41:c6:a1:73:7d:55:5d:
c3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0C:5C:2A:05:6F:FE:06:BE:91:0F:25:F8:85:ED:EE:86:96:AF:0C
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/lgxcKgVv_ga-kQ8l-IXt7oaWrww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.144.0/24
62.69.146.0/23
193.42.155.0/24
194.9.117.0/24
194.59.190.0/24
194.146.118.0/24
IPv6:
2001:7f8:8::/64
2001:7f8:8:5::/64
2001:7f8:8:10::/64
2001:7f8:8:20::/64
2001:7f8:2c:1000::/64
Signature Algorithm: sha256WithRSAEncryption
43:6e:78:eb:6c:b6:ec:0f:c1:27:e1:36:bb:a8:86:8f:ef:9f:
d4:6d:06:7b:dc:fb:da:87:81:50:36:93:1b:82:0f:82:27:1b:
14:f9:67:63:37:17:72:f4:0d:4f:03:02:d4:96:83:ff:3d:8e:
e6:06:f0:1f:63:23:c4:49:3b:39:84:43:b4:b2:6b:7d:77:82:
cd:dc:2f:1d:ed:9f:48:d9:3f:c5:ed:ac:64:89:fc:cd:9b:54:
3d:2a:6a:4d:4b:e8:cb:13:92:55:de:1a:06:a0:14:91:67:60:
28:f4:46:9b:ff:cc:c2:de:c4:9d:b2:fc:ad:a1:84:b9:38:86:
6c:ef:66:7f:bf:9d:3d:f0:60:a2:a1:03:bf:95:e7:7c:62:34:
8f:fb:25:10:a2:08:db:48:f3:0d:54:a0:39:e6:10:03:44:d7:
97:37:d6:6f:90:fe:f7:75:aa:9e:de:f3:a7:a5:38:d6:a5:04:
2d:3c:19:d0:94:10:06:51:3c:dc:cd:69:09:7f:38:99:a6:23:
84:80:83:7c:81:cc:9a:73:07:1a:6b:d1:50:f2:a5:79:ef:30:
e8:42:ec:5e:16:de:7e:b2:bf:e7:9c:75:3f:ed:2f:fd:92:34:
be:e4:06:0b:f5:c6:b0:1f:af:0c:af:07:77:17:c0:db:6b:46:
67:d5:ff:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:55:04 2025 by rpki-client