Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/LB4ESqFI-4PCoxUjg4nu2nMYSMo.roa
File: LB4ESqFI-4PCoxUjg4nu2nMYSMo.roa (raw, json)
Hash identifier: U53oUMKrbKgfEvjSDJfivOFnzvwTTZVB+2BMbl07NZY=
Subject key identifier: 2C:1E:04:4A:A1:48:FB:83:C2:A3:15:23:83:89:EE:DA:73:18:48:CA
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 01900777DEB072B53F341145799A4A629D0D
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/LB4ESqFI-4PCoxUjg4nu2nMYSMo.roa
Signing time: Tue 11 Jun 2024 13:23:34 +0000
ROA not before: Tue 11 Jun 2024 13:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8648
IP address blocks: 5.11.48.0/21 maxlen: 24
5.44.96.0/20 maxlen: 24
31.47.240.0/20 maxlen: 24
37.218.248.0/21 maxlen: 24
37.228.152.0/21 maxlen: 24
45.87.136.0/22 maxlen: 24
46.243.88.0/21 maxlen: 24
77.75.248.0/21 maxlen: 24
81.88.16.0/20 maxlen: 24
81.88.27.0/24 maxlen: 24
81.88.32.0/20 maxlen: 24
82.141.0.0/18 maxlen: 24
84.254.120.0/24 maxlen: 24
85.158.176.0/21 maxlen: 24
89.22.96.0/19 maxlen: 24
91.151.16.0/21 maxlen: 24
91.203.108.0/22 maxlen: 24
91.203.212.0/22 maxlen: 24
91.206.142.0/23 maxlen: 24
91.220.49.0/24 maxlen: 24
91.226.88.0/22 maxlen: 24
93.90.176.0/20 maxlen: 24
93.190.64.0/21 maxlen: 24
94.154.148.0/22 maxlen: 24
95.130.248.0/21 maxlen: 24
109.75.176.0/20 maxlen: 24
109.237.128.0/20 maxlen: 24
128.127.64.0/21 maxlen: 24
141.101.32.0/21 maxlen: 24
178.20.96.0/21 maxlen: 24
178.250.168.0/21 maxlen: 24
185.3.232.0/22 maxlen: 24
185.32.116.0/22 maxlen: 24
185.39.220.0/22 maxlen: 24
185.51.8.0/22 maxlen: 24
185.61.40.0/22 maxlen: 24
185.65.88.0/22 maxlen: 24
185.80.92.0/22 maxlen: 24
185.84.80.0/22 maxlen: 24
185.84.82.0/24 maxlen: 24
185.117.248.0/22 maxlen: 24
185.137.168.0/22 maxlen: 24
185.143.164.0/22 maxlen: 24
185.158.212.0/22 maxlen: 24
185.207.228.0/22 maxlen: 24
185.211.60.0/22 maxlen: 24
188.64.40.0/21 maxlen: 24
192.162.84.0/22 maxlen: 24
193.22.255.0/24 maxlen: 24
193.25.114.0/23 maxlen: 24
193.38.156.0/22 maxlen: 24
194.116.186.0/23 maxlen: 24
194.145.226.0/24 maxlen: 24
195.5.120.0/23 maxlen: 24
195.34.82.0/23 maxlen: 24
195.42.120.0/23 maxlen: 24
195.62.96.0/19 maxlen: 24
195.82.152.0/23 maxlen: 24
195.110.42.0/23 maxlen: 24
195.225.133.0/24 maxlen: 24
212.110.96.0/19 maxlen: 24
213.146.96.0/19 maxlen: 24
2001:880::/32 maxlen: 32
2a00:12c0::/29 maxlen: 48
2a00:5300::/32 maxlen: 48
2a00:fa40::/32 maxlen: 48
2a01:64c0::/32 maxlen: 48
2a01:aee0::/32 maxlen: 48
2a02:248::/32 maxlen: 48
2a02:a60::/32 maxlen: 48
2a02:2b80::/32 maxlen: 48
2a04:4cc0::/29 maxlen: 48
2a04:ff40::/29 maxlen: 48
2a0b:2a40::/29 maxlen: 48
2a0b:6340::/29 maxlen: 48
2a0d:6940::/29 maxlen: 48
2a0e:fe80::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 13:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:77:de:b0:72:b5:3f:34:11:45:79:9a:4a:62:9d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jun 11 13:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c1e044aa148fb83c2a315238389eeda731848ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:82:0a:43:08:15:1c:87:d5:ea:34:af:3a:9e:
ef:b2:a7:92:15:c5:98:b4:20:df:f5:db:8b:80:40:
8b:40:d7:7e:29:71:c4:45:f0:e1:cd:07:b9:30:18:
8e:0a:b5:dc:8c:19:a8:d7:86:8d:2a:87:d6:11:39:
05:8a:b2:c5:4b:17:a8:64:b2:40:db:3b:9e:a5:9d:
d7:da:61:03:8a:be:74:ff:ba:ab:26:54:e3:b5:cb:
09:65:b8:90:2a:6a:2e:b1:8f:18:b7:6f:08:83:07:
e9:ec:5e:64:89:09:c5:bb:29:44:fd:ad:3d:f8:a4:
bf:1e:0b:1b:00:a2:bb:fe:f8:51:7c:6d:82:a5:74:
89:60:83:59:5e:1b:26:b8:5f:e8:7c:08:f8:ae:9d:
7d:f5:cc:77:fc:6e:9f:5b:7b:41:0b:32:6b:c6:77:
5d:82:c8:8f:db:45:b8:84:32:89:dd:b4:f3:db:d0:
1c:22:6f:7d:cb:6e:9a:1f:0a:77:ca:5a:cd:03:6a:
15:1d:48:81:e2:11:d4:b2:9b:72:5d:a6:d3:bf:dc:
71:8f:ff:4b:8d:3e:c7:6c:19:67:c6:46:17:e8:32:
81:a7:61:14:4a:5d:ec:7d:32:a8:66:ab:81:81:65:
30:eb:72:0e:3c:a7:85:32:ee:34:1d:fc:a3:d2:7b:
fa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1E:04:4A:A1:48:FB:83:C2:A3:15:23:83:89:EE:DA:73:18:48:CA
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/LB4ESqFI-4PCoxUjg4nu2nMYSMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.48.0/21
5.44.96.0/20
31.47.240.0/20
37.218.248.0/21
37.228.152.0/21
45.87.136.0/22
46.243.88.0/21
77.75.248.0/21
81.88.16.0-81.88.47.255
82.141.0.0/18
84.254.120.0/24
85.158.176.0/21
89.22.96.0/19
91.151.16.0/21
91.203.108.0/22
91.203.212.0/22
91.206.142.0/23
91.220.49.0/24
91.226.88.0/22
93.90.176.0/20
93.190.64.0/21
94.154.148.0/22
95.130.248.0/21
109.75.176.0/20
109.237.128.0/20
128.127.64.0/21
141.101.32.0/21
178.20.96.0/21
178.250.168.0/21
185.3.232.0/22
185.32.116.0/22
185.39.220.0/22
185.51.8.0/22
185.61.40.0/22
185.65.88.0/22
185.80.92.0/22
185.84.80.0/22
185.117.248.0/22
185.137.168.0/22
185.143.164.0/22
185.158.212.0/22
185.207.228.0/22
185.211.60.0/22
188.64.40.0/21
192.162.84.0/22
193.22.255.0/24
193.25.114.0/23
193.38.156.0/22
194.116.186.0/23
194.145.226.0/24
195.5.120.0/23
195.34.82.0/23
195.42.120.0/23
195.62.96.0/19
195.82.152.0/23
195.110.42.0/23
195.225.133.0/24
212.110.96.0/19
213.146.96.0/19
IPv6:
2001:880::/32
2a00:12c0::/29
2a00:5300::/32
2a00:fa40::/32
2a01:64c0::/32
2a01:aee0::/32
2a02:248::/32
2a02:a60::/32
2a02:2b80::/32
2a04:4cc0::/29
2a04:ff40::/29
2a0b:2a40::/29
2a0b:6340::/29
2a0d:6940::/29
2a0e:fe80::/29
Signature Algorithm: sha256WithRSAEncryption
33:43:d0:34:5a:41:2c:e9:69:b4:83:7d:68:4f:13:87:fe:6b:
9a:26:84:35:71:dd:42:9f:65:e0:cf:b8:17:8f:0f:3e:ca:69:
9d:27:7b:93:54:8a:d3:e3:6e:8b:c7:90:0a:20:b9:e1:df:da:
20:6b:af:92:90:de:36:cd:0e:da:91:04:ee:91:d1:d2:e2:18:
3e:7b:5c:eb:28:55:21:dd:b0:d9:b9:9b:74:8f:e7:f5:37:3c:
46:ab:88:a2:72:a2:19:2f:d7:d7:75:b5:c9:78:f4:95:cc:6b:
9d:79:90:1f:91:16:af:23:26:5f:73:6a:f1:a1:f6:46:3d:80:
eb:eb:b6:96:e4:32:48:5b:2a:13:ca:17:b2:28:7a:84:91:3c:
09:77:0b:3b:03:15:93:16:21:ab:f5:72:cc:52:fb:db:52:9a:
f3:a7:4b:21:ee:97:67:15:96:e8:9b:e6:ac:a7:4c:56:5f:ed:
b3:de:10:55:3a:db:13:82:52:c1:ef:81:4d:6d:05:39:23:83:
d6:34:e1:72:78:fa:6a:f0:93:1f:50:b6:6d:f1:15:29:10:c6:
50:1f:32:78:33:0d:de:40:45:c7:9c:15:a5:1d:e6:ad:84:10:
a1:2c:c9:1e:d0:4a:de:50:9f:c7:6c:60:13:03:16:85:2a:66:
8f:7d:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 17:40:40 2024 by rpki-client on console-fra.rpki-client.org