Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LqrwprDsg_dO9yiCDt5oNI_fyr4.roa
File: LqrwprDsg_dO9yiCDt5oNI_fyr4.roa (raw, json)
Hash identifier: jvQzEwbwKn/B1IDnHBF94n1GYnMq3LApiWF9kZfUi/U=
Subject key identifier: 2E:AA:F0:A6:B0:EC:83:F7:4E:F7:28:82:0E:DE:68:34:8F:DF:CA:BE
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 018CC2DACFD02F38CEA68E373000BAC28FFB
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LqrwprDsg_dO9yiCDt5oNI_fyr4.roa
Signing time: Mon 01 Jan 2024 02:29:28 +0000
ROA not before: Mon 01 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29644
IP address blocks: 178.250.112.0/21 maxlen: 24
77.75.96.0/21 maxlen: 24
185.51.104.0/22 maxlen: 24
31.193.216.0/21 maxlen: 24
2a03:5f00:104::/48 maxlen: 48
2a03:5f00:107::/48 maxlen: 48
2a03:5f00:102::/48 maxlen: 48
2a03:5f00:105::/48 maxlen: 48
2a03:5f00::/32 maxlen: 32
2a03:5f00:108::/48 maxlen: 48
2a03:5f00:1000::/48 maxlen: 48
2a03:5f00:103::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:cf:d0:2f:38:ce:a6:8e:37:30:00:ba:c2:8f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2eaaf0a6b0ec83f74ef728820ede68348fdfcabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:fb:b7:68:c4:cf:13:48:ae:a0:65:f3:b1:
f4:ec:2b:e7:5b:e9:96:9e:a6:f3:90:cc:32:4b:07:
0e:88:e7:e4:34:a9:3d:56:e5:23:e7:d3:81:c5:8e:
4d:fd:5d:54:7a:71:f9:63:59:93:b4:c4:1f:f6:94:
64:95:c2:9c:9d:76:cf:f9:71:9a:bb:7a:17:2a:2e:
44:1d:a9:b2:da:08:53:1b:2d:91:9a:f7:15:85:5c:
db:3d:fa:b4:d0:e2:55:aa:72:2d:56:95:48:2a:88:
23:f5:bb:2c:38:16:66:d1:e7:df:f7:f6:f6:84:ac:
7b:ce:17:5f:97:74:02:b3:11:db:e5:8b:93:58:55:
dd:e9:64:e5:0c:6e:5a:84:43:cb:52:8d:a2:40:8a:
0a:a4:3b:cb:a4:17:b8:bd:11:e8:08:7b:7d:93:b9:
d3:e0:09:4a:a2:41:24:4c:d7:b3:e2:23:88:4e:f0:
79:1f:68:f8:03:4c:16:28:44:c6:e9:a4:a6:ab:db:
1b:d3:2b:f8:7a:f1:df:7d:a8:a9:e1:67:d0:17:57:
8d:f7:45:15:96:f5:0e:b9:52:97:80:f5:67:a9:6b:
1d:fd:eb:f3:09:41:68:9e:35:6d:25:b2:90:25:e5:
db:95:70:5d:99:b8:a4:c7:ea:d8:4c:27:87:6b:fa:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AA:F0:A6:B0:EC:83:F7:4E:F7:28:82:0E:DE:68:34:8F:DF:CA:BE
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LqrwprDsg_dO9yiCDt5oNI_fyr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.216.0/21
77.75.96.0/21
178.250.112.0/21
185.51.104.0/22
IPv6:
2a03:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
6d:1a:3a:5c:a7:ce:c3:93:35:ee:fa:93:e8:75:3a:24:9d:d9:
e6:31:d6:55:fc:4d:4f:25:18:02:c2:29:35:1e:f1:56:0f:8c:
d1:85:58:f9:8e:17:6b:c5:87:d5:54:e7:e5:b1:fc:4f:44:1f:
95:38:4c:98:86:35:63:a4:d7:0a:3d:bb:c7:a6:55:51:aa:52:
fb:b1:e3:6d:5f:48:e5:04:ba:60:4e:a3:68:82:04:bb:34:34:
a3:58:d1:ca:88:df:3a:5a:d8:ad:99:14:d0:b1:4d:cb:fb:2d:
d8:69:2b:05:7a:55:2d:f7:38:18:59:72:32:5b:9b:d0:8d:d1:
38:f8:1f:e7:19:d0:3f:39:a1:de:c1:e3:6f:f5:58:4e:71:fb:
40:fd:e4:1c:fc:c1:95:a7:a8:02:5c:2b:78:47:89:5f:ea:22:
62:2b:78:03:ae:60:da:be:b8:a6:f3:2a:af:b9:ff:13:1a:32:
64:cf:ac:2e:76:ea:e4:f4:d2:10:7c:cf:d1:ef:d2:5e:aa:5d:
46:fd:50:be:c4:29:d3:76:c6:b6:3d:cd:56:b7:28:e2:b6:40:
9f:fe:d0:29:5a:3b:86:24:f2:09:3f:9f:f2:08:e1:91:a0:1d:
37:4f:41:6d:79:65:62:4f:98:88:ce:ed:f7:11:c1:b4:52:3b:
b5:9a:b7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:15 2025 by rpki-client