Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/LOhMPnw2ucGLe1xR2rjLFXH6smY.roa
File: LOhMPnw2ucGLe1xR2rjLFXH6smY.roa (raw, json)
Hash identifier: KVf8FwxIpwWzcXyvIp7cKE6SgQyP85FX7J9kiOxl6pI=
Subject key identifier: 2C:E8:4C:3E:7C:36:B9:C1:8B:7B:5C:51:DA:B8:CB:15:71:FA:B2:66
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 0193C053DF7F2CFECF1FDEBF78F6E16A5C6C
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/LOhMPnw2ucGLe1xR2rjLFXH6smY.roa
Signing time: Fri 13 Dec 2024 14:02:22 +0000
ROA not before: Fri 13 Dec 2024 14:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47790
IP address blocks: 91.206.210.0/24 maxlen: 24
91.206.211.0/24 maxlen: 24
91.224.216.0/23 maxlen: 24
91.226.196.0/24 maxlen: 24
91.226.197.0/24 maxlen: 24
91.230.8.0/24 maxlen: 24
91.230.9.0/24 maxlen: 24
185.48.28.0/22 maxlen: 24
185.142.160.0/22 maxlen: 24
185.142.160.0/24 maxlen: 24
185.142.161.0/24 maxlen: 24
185.142.162.0/24 maxlen: 24
185.142.163.0/24 maxlen: 24
185.152.120.0/24 maxlen: 24
185.152.121.0/24 maxlen: 24
185.152.122.0/24 maxlen: 24
185.152.123.0/24 maxlen: 24
2a14:7a80::/29 maxlen: 32
2a14:7a80::/30 maxlen: 30
2a14:7a84::/30 maxlen: 30
Validation: Failed, certificate revoked on Mon 16 Dec 2024 13:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:53:df:7f:2c:fe:cf:1f:de:bf:78:f6:e1:6a:5c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Dec 13 14:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ce84c3e7c36b9c18b7b5c51dab8cb1571fab266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:89:98:59:aa:3d:3c:2c:42:89:02:2b:8e:71:
74:b0:3b:0b:c5:6d:a0:8e:30:95:c1:ac:50:52:67:
b4:85:87:49:c7:0e:cc:18:1d:a2:d1:49:f4:62:64:
16:86:32:52:87:74:a4:d6:a6:8b:de:2e:c1:5f:08:
4f:63:dc:e0:af:04:03:2b:bc:43:10:0b:fa:45:ed:
5a:20:4f:17:ce:12:d6:72:b7:af:0a:0e:09:24:b2:
6b:53:5e:40:1a:5b:40:b6:93:31:9c:73:bb:72:9b:
d2:28:5c:f3:50:cb:5d:b7:49:b0:b3:7d:bc:26:7c:
9a:8b:3d:ac:40:52:d9:7c:7d:5a:2c:ce:f0:f6:1c:
63:52:d3:d5:f1:ff:b5:65:6b:18:f4:9f:7e:6e:84:
9c:3d:41:cc:38:25:78:50:fc:d9:58:d5:e1:d3:9f:
81:4b:ac:f3:ec:13:a5:b8:7b:84:b5:78:37:41:27:
45:b2:a2:47:9d:b2:95:c3:93:14:47:d2:11:9d:39:
5b:dc:6d:1e:3e:11:d8:a5:b0:d3:ea:f2:4a:20:86:
02:ba:47:4a:67:eb:ac:6f:27:56:4e:44:60:78:68:
d9:f6:ee:c1:ca:b7:f3:8e:eb:be:a0:03:de:9f:e6:
9f:fa:8c:ad:f1:ad:61:68:41:b6:22:0f:fc:99:09:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E8:4C:3E:7C:36:B9:C1:8B:7B:5C:51:DA:B8:CB:15:71:FA:B2:66
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/LOhMPnw2ucGLe1xR2rjLFXH6smY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.210.0/23
91.224.216.0/23
91.226.196.0/23
91.230.8.0/23
185.48.28.0/22
185.142.160.0/22
185.152.120.0/22
IPv6:
2a14:7a80::/29
Signature Algorithm: sha256WithRSAEncryption
0c:29:8f:6e:99:d0:c2:57:87:ab:2d:e5:89:c8:89:ee:1f:e6:
75:e3:01:e5:31:36:40:10:59:d2:8c:9b:30:43:fe:59:ca:0a:
61:58:76:77:a5:ad:b9:c3:54:bd:40:42:58:74:7b:56:c6:6c:
2d:33:08:88:ef:03:a5:08:8a:c8:75:ea:62:e9:58:a3:2b:71:
7b:83:9b:05:ea:59:f8:aa:72:7e:7b:eb:49:c1:05:93:83:f8:
6a:f2:70:96:cd:f3:bf:70:44:35:69:15:86:fb:6d:30:c3:6f:
ae:ec:aa:e8:e3:ed:d3:ec:29:b1:dc:cf:78:d7:8d:aa:07:02:
c1:60:bb:cc:8e:b2:3b:e2:8a:bc:84:d2:27:cc:74:a9:66:6f:
60:ce:7c:4e:02:f7:ad:17:9e:85:a3:68:44:f9:e6:a0:51:a7:
cb:af:00:98:20:2f:3e:53:69:f0:81:c7:1d:93:29:f6:88:9b:
8b:90:7a:b0:43:d0:3a:0f:54:86:c9:15:37:13:e7:a1:a7:a1:
84:44:84:4b:86:30:aa:e6:93:b8:bc:a8:61:bf:21:92:06:d7:
de:c8:23:b1:b0:18:0c:45:c6:5c:f1:71:83:f8:45:1b:e6:95:
87:10:2c:45:35:1f:b4:8e:5b:66:d8:df:60:c3:d6:fa:48:fc:
7e:1b:7a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:54 2025 by rpki-client