Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/_llAeNuPCJbLarzOwW41g5ITY1A.roa
File: _llAeNuPCJbLarzOwW41g5ITY1A.roa (raw, json)
Hash identifier: pMb7uJSC9Sl6o+4BWXy+FUA0wNp6DNLMhOxaICa/cGc=
Subject key identifier: FE:59:40:78:DB:8F:08:96:CB:6A:BC:CE:C1:6E:35:83:92:13:63:50
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B67488077A2DF0CF0194E0011C199E
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/_llAeNuPCJbLarzOwW41g5ITY1A.roa
Signing time: Thu 02 Jan 2025 15:50:56 +0000
ROA not before: Thu 02 Jan 2025 15:50:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6762
IP address blocks: 2.16.19.0/24 maxlen: 24
2.16.70.0/23 maxlen: 23
2.16.146.0/23 maxlen: 23
2.16.220.0/22 maxlen: 22
2.18.0.0/22 maxlen: 22
2.18.31.0/24 maxlen: 24
2.19.16.0/20 maxlen: 20
2.20.4.0/22 maxlen: 22
2.20.47.0/24 maxlen: 24
2.20.109.0/24 maxlen: 24
2.20.252.0/24 maxlen: 24
2.21.2.0/24 maxlen: 24
2.21.14.0/24 maxlen: 24
2.21.100.0/22 maxlen: 22
2.22.216.0/22 maxlen: 22
2.22.234.0/24 maxlen: 24
88.221.28.0/22 maxlen: 22
88.221.100.0/22 maxlen: 22
92.122.68.0/22 maxlen: 22
92.122.225.0/24 maxlen: 24
92.122.248.0/22 maxlen: 22
92.123.48.0/24 maxlen: 24
92.123.106.0/24 maxlen: 24
92.123.208.0/22 maxlen: 22
95.100.136.0/22 maxlen: 22
95.101.35.0/24 maxlen: 24
95.101.68.0/22 maxlen: 22
95.101.114.0/24 maxlen: 24
95.101.156.0/22 maxlen: 22
2a02:26f0:b00::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 Jan 2025 13:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:74:88:07:7a:2d:f0:cf:01:94:e0:01:1c:19:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe594078db8f0896cb6abccec16e358392136350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:37:54:f1:85:4d:c3:40:ee:3c:77:8c:92:
75:95:35:72:d3:ec:fb:a2:cc:d9:b2:55:96:d8:af:
14:23:4b:01:b4:1d:ab:5b:0a:30:b4:a1:9d:d7:a7:
ec:91:15:ad:f8:77:d7:45:fc:6b:2c:8a:e6:18:be:
59:a1:6f:d8:d7:e9:83:e2:e9:c2:a5:12:76:c7:80:
d4:a1:13:5e:3d:66:83:2c:7d:a9:3c:42:6b:1d:5a:
08:21:09:be:d7:d8:ff:17:52:9e:8e:54:01:47:28:
f1:1d:8e:1d:9c:c5:ca:a6:f4:4e:09:34:a1:26:dc:
55:69:05:c7:15:4f:2d:87:cf:1b:75:c6:0c:87:3a:
9d:30:af:59:c4:09:a8:7b:85:ab:31:57:91:b3:0a:
3d:eb:20:ac:8c:92:6a:85:a9:b9:7b:41:ce:f2:f8:
50:96:8f:9f:6a:8c:e4:a4:7f:81:95:1a:08:97:4f:
18:d7:1c:3d:d7:3b:6a:fb:dd:82:f4:f1:f8:64:9b:
f1:b2:e1:b5:79:69:df:f8:6f:44:04:97:8d:e7:bf:
e7:96:70:c3:2b:23:bf:f5:e4:1e:cc:ea:a2:0f:bd:
c6:6a:10:e2:cc:8e:1c:b9:b1:2a:fa:68:c7:27:a0:
65:5d:bb:94:d1:a6:c9:bd:2b:c5:bf:43:a4:38:66:
c5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:59:40:78:DB:8F:08:96:CB:6A:BC:CE:C1:6E:35:83:92:13:63:50
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/_llAeNuPCJbLarzOwW41g5ITY1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.19.0/24
2.16.70.0/23
2.16.146.0/23
2.16.220.0/22
2.18.0.0/22
2.18.31.0/24
2.19.16.0/20
2.20.4.0/22
2.20.47.0/24
2.20.109.0/24
2.20.252.0/24
2.21.2.0/24
2.21.14.0/24
2.21.100.0/22
2.22.216.0/22
2.22.234.0/24
88.221.28.0/22
88.221.100.0/22
92.122.68.0/22
92.122.225.0/24
92.122.248.0/22
92.123.48.0/24
92.123.106.0/24
92.123.208.0/22
95.100.136.0/22
95.101.35.0/24
95.101.68.0/22
95.101.114.0/24
95.101.156.0/22
IPv6:
2a02:26f0:b00::/48
Signature Algorithm: sha256WithRSAEncryption
4f:d6:a2:44:c8:50:33:08:04:6e:d6:ae:dc:43:43:e0:8f:be:
72:4d:e1:6d:b2:4a:14:d3:49:ee:07:d3:e6:26:67:a0:a6:3f:
c2:22:32:82:20:70:6f:a4:41:ab:7b:92:2f:fe:ff:08:63:8a:
95:8e:75:d4:a8:26:f7:2b:06:3a:b0:6c:71:5f:7f:6c:3e:fb:
a3:b7:1a:cf:1e:13:c0:58:f7:d8:dc:47:6e:e1:9f:c7:8f:61:
de:ba:ca:8a:e4:bc:ca:60:d3:bb:de:32:d5:5b:25:6e:99:a3:
6f:f8:89:6f:ac:d8:2e:56:32:e1:67:8d:34:9a:34:8a:af:f0:
ef:79:5b:11:95:5a:e4:78:3d:b4:d0:24:27:eb:05:e7:91:2c:
b6:60:7b:53:bf:5e:f5:9f:bf:61:9f:ae:97:2f:af:44:bc:56:
a3:fc:61:72:e4:ac:51:3e:72:09:f5:cc:64:b1:e0:22:80:44:
84:6e:1a:30:c5:16:43:44:46:d0:8e:b4:dd:f4:c4:11:f1:99:
0f:30:c3:97:3b:49:0f:b7:85:02:78:57:11:63:c2:2a:48:37:
9e:d5:0c:69:29:db:1b:65:ab:22:e8:9b:39:1a:eb:1d:8d:9d:
b1:49:95:49:4c:13:2e:51:2d:38:ef:2b:e1:9b:d3:68:42:36:
7e:50:72:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:34:36 2025 by rpki-client