Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LnlPan_uq86VbCgwOJwxRorB7GA.roa
File: LnlPan_uq86VbCgwOJwxRorB7GA.roa (raw, json)
Hash identifier: XO7zeCqXSQz1zEFpFMIqMLTI4KZYpai89pzAQaSD6d0=
Subject key identifier: 2E:79:4F:6A:7F:EE:AB:CE:95:6C:28:30:38:9C:31:46:8A:C1:EC:60
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E9EC5C67DEF5A1ED17193993875AC2FC7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LnlPan_uq86VbCgwOJwxRorB7GA.roa
Signing time: Tue 02 Apr 2024 12:25:45 +0000
ROA not before: Tue 02 Apr 2024 12:25:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 5.253.56.0/23 maxlen: 24
5.253.58.0/23 maxlen: 24
45.139.123.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
91.92.67.0/24 maxlen: 24
93.123.26.0/23 maxlen: 24
93.123.76.0/22 maxlen: 24
93.123.112.0/22 maxlen: 24
94.154.173.0/24 maxlen: 24
94.156.2.0/24 maxlen: 24
94.156.152.0/24 maxlen: 24
94.156.154.0/23 maxlen: 24
94.156.178.0/24 maxlen: 24
94.156.180.0/23 maxlen: 24
94.156.237.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
193.25.219.0/24 maxlen: 24
193.47.62.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 10:27:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:c5:c6:7d:ef:5a:1e:d1:71:93:99:38:75:ac:2f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 2 12:25:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e794f6a7feeabce956c2830389c31468ac1ec60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:b3:83:32:3b:ac:4e:e0:61:83:de:f0:c7:
a8:0d:09:26:39:9f:8b:b5:a6:e1:26:f5:8e:e5:ec:
12:1a:6d:c9:89:1f:a9:ef:95:d2:c6:76:85:dc:df:
93:99:77:24:49:14:a9:6a:b9:05:00:ce:b1:d4:97:
46:67:4e:8e:8e:6a:69:06:de:1a:70:60:1a:20:78:
b4:56:83:6d:0b:72:91:80:e2:78:1d:20:01:e4:7f:
b0:e3:bd:95:42:69:79:ab:9a:42:3c:3b:73:57:0e:
7a:31:f7:d2:85:ee:db:cb:75:e2:fb:46:cb:05:1c:
ed:c9:df:4b:df:12:72:8d:5b:f1:e7:8c:7f:55:dd:
10:05:36:36:7a:c0:63:83:84:6f:3f:f1:c3:ad:7c:
cc:c7:8d:aa:3d:54:cc:75:c0:28:ea:50:a6:19:0a:
aa:a1:d6:33:3d:76:fd:5d:17:37:1a:ac:62:a6:f3:
ee:ef:53:ad:3e:20:bd:ae:ee:1b:be:24:4b:ea:25:
65:58:fe:49:99:79:b3:ee:99:93:df:69:ff:a0:a2:
68:09:6f:54:d1:9c:82:df:a1:41:78:55:18:bb:9e:
96:eb:6b:47:88:0b:95:5f:23:5b:b7:fb:b5:c6:9d:
a5:ff:9e:ad:80:82:8f:c8:8e:29:7f:b8:e2:8d:57:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:79:4F:6A:7F:EE:AB:CE:95:6C:28:30:38:9C:31:46:8A:C1:EC:60
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LnlPan_uq86VbCgwOJwxRorB7GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/22
45.139.123.0/24
91.92.16.0/24
91.92.67.0/24
93.123.26.0/23
93.123.76.0/22
93.123.112.0/22
94.154.173.0/24
94.156.2.0/24
94.156.152.0/24
94.156.154.0/23
94.156.178.0/24
94.156.180.0/23
94.156.237.0-94.156.238.255
185.252.177.0/24
193.25.219.0/24
193.47.62.0/24
193.58.121.0/24
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
01:2d:7f:47:99:13:2f:8e:14:87:ec:19:1e:f7:26:57:57:7d:
0f:16:d3:7a:fe:78:1f:ac:4b:c9:53:77:0d:f1:1f:cd:aa:19:
6b:ab:20:0a:16:41:56:1a:15:7b:0d:f2:e4:dc:3a:fd:af:4b:
8c:a9:b7:0f:fe:a3:47:91:3b:fa:f2:e5:d7:06:4f:e7:a3:19:
7c:9e:0e:a4:57:3c:ad:1b:90:d6:04:69:fa:b6:c2:79:18:29:
19:f8:6d:0d:e1:f2:b3:2a:7e:40:e2:13:64:94:51:f0:4b:db:
18:e5:9f:0a:f6:a3:63:6a:fa:38:bd:7f:2e:fc:64:fb:48:b1:
71:a6:ef:2c:19:ed:db:18:2d:f6:6a:6f:09:9d:19:af:f6:0f:
95:e6:86:ba:78:c2:7a:b7:46:f3:4f:3f:98:8f:33:c5:b3:ec:
68:e2:77:67:48:de:27:83:c5:d7:d7:f9:f3:59:50:d2:64:81:
aa:a0:3f:01:6e:7c:d1:bb:f2:b4:0c:6c:10:72:cc:60:f7:20:
b7:79:fa:c9:d1:8a:15:7c:c9:fb:96:be:00:b2:0f:c1:b0:5e:
65:d4:03:a9:f3:5c:62:16:6d:9a:f7:78:34:0d:8d:4d:34:83:
69:a0:82:50:11:01:e0:60:33:86:d1:a3:55:69:09:5e:4c:87:
9c:13:35:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:30 2024 by rpki-client on console-ams.rpki-client.org