Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/LWSTX27u0sLVF5fORpk1S8hX6sk.roa
File: LWSTX27u0sLVF5fORpk1S8hX6sk.roa (raw, json)
Hash identifier: MNpEbasBbiv4QdaEZyAeo1LS9pNjEuP3xCJNgKYpat0=
Subject key identifier: 2D:64:93:5F:6E:EE:D2:C2:D5:17:97:CE:46:99:35:4B:C8:57:EA:C9
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 0186DF48C7090D3EE98DADA773099462934E
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/LWSTX27u0sLVF5fORpk1S8hX6sk.roa
Signing time: Tue 14 Mar 2023 08:42:13 +0000
ROA not before: Tue 14 Mar 2023 08:42:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 37.1.174.0/24 maxlen: 24
37.1.175.0/24 maxlen: 24
37.1.173.0/24 maxlen: 24
37.252.204.0/24 maxlen: 24
37.252.206.0/24 maxlen: 24
37.252.205.0/24 maxlen: 24
37.252.200.0/21 maxlen: 21
37.252.207.0/24 maxlen: 24
185.15.32.0/22 maxlen: 22
37.1.169.0/24 maxlen: 24
37.1.168.0/21 maxlen: 21
37.1.168.0/24 maxlen: 24
37.1.171.0/24 maxlen: 24
37.1.170.0/24 maxlen: 24
37.1.172.0/24 maxlen: 24
2a03:b7c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 10 Aug 2023 07:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:48:c7:09:0d:3e:e9:8d:ad:a7:73:09:94:62:93:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Mar 14 08:42:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d64935f6eeed2c2d51797ce4699354bc857eac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1f:d0:f2:20:72:54:4d:42:55:ca:8f:73:74:
5a:36:b4:19:af:d2:b7:02:69:a1:3e:38:85:3a:61:
9e:25:e8:b6:60:f4:66:a3:91:fa:0c:b0:e5:55:db:
ac:8e:57:c3:35:71:0a:c3:37:27:72:17:0f:20:35:
8a:ea:12:f5:ed:32:29:57:50:6a:4c:b8:5c:57:45:
94:b8:c7:2c:86:04:3e:fd:33:fb:a8:fb:28:54:37:
87:fa:d2:cd:4a:19:a6:6f:6a:1d:11:5a:35:12:5e:
65:28:6a:ef:88:d4:31:ce:22:fc:b2:af:a7:81:14:
92:0f:5a:e7:09:7b:fb:d4:ff:dc:f0:0e:fa:d7:36:
d1:b8:fe:6b:24:b0:fd:3b:e9:8b:d9:2e:8b:10:d2:
2a:3f:70:04:18:22:69:15:36:67:f3:f3:8b:5c:42:
34:27:4e:3a:1c:3f:2f:c6:3d:3f:3f:05:06:ab:ea:
f0:58:67:1b:c4:a8:c1:a9:da:b2:69:f9:fa:c4:d2:
2e:94:38:b5:1b:92:21:65:2e:ce:69:a2:dd:88:71:
e4:b3:db:fd:77:72:18:c9:47:e0:dc:d5:ff:15:a0:
e8:bc:d1:6d:91:c8:99:0d:83:ee:26:8d:27:34:74:
13:a2:a5:50:aa:80:c7:ea:37:41:00:3e:7d:ba:4a:
7a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:64:93:5F:6E:EE:D2:C2:D5:17:97:CE:46:99:35:4B:C8:57:EA:C9
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/LWSTX27u0sLVF5fORpk1S8hX6sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.168.0/21
37.252.200.0/21
185.15.32.0/22
IPv6:
2a03:b7c0::/32
Signature Algorithm: sha256WithRSAEncryption
26:a4:11:be:ff:15:38:2c:7f:70:50:41:f5:83:89:f9:6d:db:
a5:10:f6:fe:44:e9:75:ae:c7:e8:4d:de:a0:b3:be:98:34:64:
ac:f8:06:12:4e:56:a4:70:4b:36:16:2f:54:db:6d:88:2c:7f:
b8:8c:ba:ee:bf:55:6b:d0:9f:91:f2:11:34:99:1f:7f:4d:d3:
bd:19:b1:22:59:f8:28:bc:c4:0a:d7:5b:00:75:78:7d:b3:c7:
c1:37:a6:39:14:46:29:02:a1:dc:52:20:b8:bd:54:0b:de:0e:
87:c4:e5:8b:18:c1:40:23:d9:8d:1d:59:88:31:2c:25:dc:2c:
f5:9e:56:a1:20:3e:1b:e9:ab:e7:56:26:4c:c5:dd:9f:ca:8e:
12:b7:98:c8:5a:b8:df:c6:8c:d2:bb:e3:fb:21:14:56:c9:3a:
9c:0e:55:8c:56:21:32:ac:56:22:e6:a8:bc:18:40:01:69:20:
f1:ce:a2:a5:8a:a8:01:66:ba:d1:62:0c:09:c5:1c:e9:8d:38:
66:78:29:c6:96:ba:f3:fb:dd:3a:19:86:3a:38:a1:45:cf:35:
a8:5c:1b:34:fe:e7:03:ff:fc:49:c4:cf:13:62:be:cc:fb:94:
1e:5e:61:da:d5:b1:99:77:a1:19:4b:0e:2e:e2:b2:a7:71:3e:
05:73:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:58 2024 by rpki-client on console-fra.rpki-client.org