Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/lsKtxHO4-H5wjpggp5cvbTLjatk.roa
File: lsKtxHO4-H5wjpggp5cvbTLjatk.roa (raw, json)
Hash identifier: Q264PZ4hLHRE9CZIApXL/B2SFcJrADgkE+XOfFGld2Q=
Subject key identifier: 96:C2:AD:C4:73:B8:F8:7E:70:8E:98:20:A7:97:2F:6D:32:E3:6A:D9
Certificate issuer: /CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Certificate serial: 0193BFF0FF3263D8258FF2A6D6941AFC4A94
Authority key identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/lsKtxHO4-H5wjpggp5cvbTLjatk.roa
Signing time: Fri 13 Dec 2024 12:14:22 +0000
ROA not before: Fri 13 Dec 2024 12:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34718
IP address blocks: 62.209.128.0/19 maxlen: 19
80.80.208.0/20 maxlen: 20
80.80.208.0/23 maxlen: 23
80.80.210.0/24 maxlen: 24
80.80.211.0/24 maxlen: 24
80.80.212.0/22 maxlen: 22
80.80.216.0/21 maxlen: 21
89.236.192.0/18 maxlen: 18
185.6.40.0/22 maxlen: 22
185.248.44.0/22 maxlen: 22
194.55.92.0/22 maxlen: 22
217.30.164.0/22 maxlen: 22
217.30.168.0/24 maxlen: 24
217.30.174.0/24 maxlen: 24
2a02:f10::/32 maxlen: 32
2a03:540::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 14 Dec 2024 06:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:f0:ff:32:63:d8:25:8f:f2:a6:d6:94:1a:fc:4a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Validity
Not Before: Dec 13 12:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96c2adc473b8f87e708e9820a7972f6d32e36ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:ec:15:fa:99:0d:27:de:9d:b4:39:67:e0:
49:da:f3:65:57:cd:94:26:64:94:2d:f2:48:88:2a:
8c:70:f0:af:1f:d0:5c:74:86:3c:96:ea:b1:9a:ce:
a1:1c:4a:a8:53:b2:c8:99:0c:75:d8:1e:c7:0c:86:
ff:46:60:43:43:d7:be:82:43:e6:62:64:48:73:ab:
5f:f2:03:78:da:85:a8:9d:6d:ee:4b:b3:36:6f:83:
81:71:92:b4:0f:68:9a:7d:59:36:b1:7d:b0:65:08:
a1:f8:e5:12:e7:52:e6:45:54:63:fb:f7:aa:3d:48:
a4:7b:b3:7f:b0:06:30:31:10:76:d2:41:67:0e:99:
7d:dd:c7:88:88:0e:f5:a9:58:af:c9:84:11:fa:0b:
9a:f5:b6:1b:45:e3:e1:2c:35:f5:4c:30:89:55:d7:
a0:95:cb:45:dd:98:57:0f:f2:91:79:5b:dd:c2:80:
3e:9d:db:2e:5f:a2:58:cc:08:ad:7c:7a:10:7d:64:
59:02:67:55:f6:86:57:75:93:68:d9:72:67:61:32:
98:98:cf:1b:c1:21:e0:02:fc:96:8d:f7:4f:92:35:
68:89:68:22:33:e3:65:71:89:f0:34:1f:74:b7:f2:
11:56:09:fd:78:a9:42:a0:2f:a1:f3:c3:e1:3c:4f:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C2:AD:C4:73:B8:F8:7E:70:8E:98:20:A7:97:2F:6D:32:E3:6A:D9
X509v3 Authority Key Identifier:
keyid:99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/lsKtxHO4-H5wjpggp5cvbTLjatk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.209.128.0/19
80.80.208.0/20
89.236.192.0/18
185.6.40.0/22
185.248.44.0/22
194.55.92.0/22
217.30.164.0-217.30.168.255
217.30.174.0/24
IPv6:
2a02:f10::/32
2a03:540::/32
Signature Algorithm: sha256WithRSAEncryption
ba:c3:75:5e:d8:cb:42:64:d1:03:5b:82:a7:54:46:09:82:c1:
a1:d2:bd:03:33:be:e3:82:02:58:e9:0a:63:54:e4:6e:3b:70:
03:9c:ee:14:1e:57:2c:da:ca:69:e0:36:a8:13:90:ab:d9:eb:
67:4a:65:1b:c8:f2:77:20:dd:6e:f5:d7:ec:21:39:bd:20:0b:
30:69:73:cf:89:59:b3:78:59:1f:57:e2:d8:4a:80:f2:3b:a7:
04:bb:d2:60:f7:02:81:ac:46:bb:c6:3f:87:62:88:a7:3b:4d:
c6:76:f0:cb:47:00:c4:d6:38:66:60:4e:44:c9:80:cb:7b:d0:
94:75:37:08:e2:49:41:92:51:e1:55:a4:0b:aa:58:ce:ac:0a:
59:36:70:26:d4:aa:aa:10:d7:7f:67:50:48:61:40:2d:65:12:
92:ea:26:5b:b4:92:e7:03:b5:bc:3e:53:46:6c:dc:0a:1e:f6:
88:a1:ce:2e:1f:1f:82:fa:2f:0f:4e:c7:b0:af:7d:22:c0:59:
f6:0b:97:73:af:73:54:f3:1d:11:2d:ab:51:dd:d1:09:80:a0:
55:d1:32:81:4c:eb:4a:d0:65:1b:78:41:21:42:f4:c7:71:0b:
d5:d1:94:18:3e:85:63:57:bf:67:ca:02:6b:26:c3:3d:a0:18:
d4:7c:44:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:51:16 2025 by rpki-client