Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/LU-77kWFDEHBumZmpQPbz-OK4pc.roa
File: LU-77kWFDEHBumZmpQPbz-OK4pc.roa (raw, json)
Hash identifier: GqBLyV4yX9JFhLhJQkd5uFRkI9DDsxQmRA34atE3f3E=
Subject key identifier: 2D:4F:BB:EE:45:85:0C:41:C1:BA:66:66:A5:03:DB:CF:E3:8A:E2:97
Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Certificate serial: 0193E3C7758A984759EE81F92D5850DD758F
Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/LU-77kWFDEHBumZmpQPbz-OK4pc.roa
Signing time: Fri 20 Dec 2024 11:15:19 +0000
ROA not before: Fri 20 Dec 2024 11:15:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215992
IP address blocks: 147.78.88.0/22 maxlen: 22
147.78.88.0/24 maxlen: 24
147.78.89.0/24 maxlen: 24
147.78.90.0/24 maxlen: 24
147.78.91.0/24 maxlen: 24
2a09:2040::/29 maxlen: 29
2a09:2040:1::/48 maxlen: 48
2a09:2040:2::/48 maxlen: 48
2a09:2040:3::/48 maxlen: 48
2a09:2040:4::/48 maxlen: 48
2a09:2040:5::/48 maxlen: 48
2a09:2040:6::/48 maxlen: 48
2a09:2040:7::/48 maxlen: 48
2a09:2040:8::/48 maxlen: 48
2a09:2040:a::/48 maxlen: 48
2a09:2040:b::/48 maxlen: 48
2a09:2040:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Dec 2024 09:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:c7:75:8a:98:47:59:ee:81:f9:2d:58:50:dd:75:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Validity
Not Before: Dec 20 11:15:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d4fbbee45850c41c1ba6666a503dbcfe38ae297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:a7:4e:2d:82:57:69:84:e9:0f:a2:ad:c6:
a8:0a:18:44:b9:46:19:c9:55:65:16:8c:67:fb:f0:
74:ba:a9:08:cc:99:a8:e2:e2:e6:f8:62:4b:2c:41:
08:8d:44:01:d2:45:9b:61:f4:59:8c:81:60:fa:21:
27:15:b4:bc:9b:7f:8a:ab:51:5a:95:fc:69:fc:f4:
ee:c9:15:b0:3c:17:77:9b:ac:9d:c2:e2:61:98:82:
fc:53:e5:1c:5d:a8:0a:86:df:c2:66:2d:74:9c:07:
ee:8f:4a:61:58:5b:9a:34:97:9e:ae:21:03:95:79:
ad:09:9d:63:08:5d:2c:5d:1d:81:d6:2b:a4:c4:6f:
c7:15:78:61:09:c0:e2:6f:b9:03:5b:63:f6:f9:a2:
ad:a4:a8:e0:94:61:94:16:72:1f:0f:eb:64:f7:a6:
41:af:a6:97:a4:85:68:50:13:b5:92:ee:82:37:34:
12:c8:73:54:8b:0e:3a:c5:08:d9:74:04:41:99:44:
57:2e:01:4d:38:34:d0:98:a1:ab:67:a9:4d:a8:3d:
ba:6b:84:e1:41:57:9d:69:ab:16:80:bf:dd:df:a8:
4b:00:c8:e6:28:3b:dd:80:d3:d8:b6:b6:ce:9f:b6:
ba:7c:5e:08:39:cd:0c:b1:fb:6c:a8:5a:d0:07:ed:
10:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4F:BB:EE:45:85:0C:41:C1:BA:66:66:A5:03:DB:CF:E3:8A:E2:97
X509v3 Authority Key Identifier:
keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/LU-77kWFDEHBumZmpQPbz-OK4pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.88.0/22
IPv6:
2a09:2040::/29
Signature Algorithm: sha256WithRSAEncryption
7b:49:65:61:d5:54:4e:cd:e6:7f:72:bb:f8:79:68:29:36:17:
65:47:d4:76:df:bc:7e:c0:9e:8e:43:e8:15:c4:f4:80:c9:d3:
05:48:92:3e:76:76:72:e7:4c:6c:42:40:14:92:e7:0b:02:9d:
08:9b:cc:c3:66:fb:ad:fe:d0:3b:22:f1:b9:74:4a:3f:13:b2:
eb:b5:07:91:d9:f6:6c:49:4a:12:42:df:04:1d:74:bd:ae:41:
e3:e4:53:f8:4c:ad:f3:c5:17:5d:85:2c:32:ac:9f:7c:61:ad:
50:79:1e:eb:a7:50:b4:40:a9:71:d1:e7:72:05:4b:22:f3:b8:
76:24:71:0e:b2:4c:de:38:e9:bf:50:ad:56:5c:b1:23:5b:89:
1b:12:88:93:0e:7c:9b:42:bc:e0:ed:08:db:88:b0:64:aa:fc:
17:f9:0e:ae:c9:da:36:1b:df:4e:a5:77:fb:cd:4c:ad:52:fd:
f0:4b:a6:56:5d:5c:9e:df:d2:65:b1:79:28:d2:66:9b:d3:cf:
60:d9:46:b4:92:8d:24:98:af:75:fc:5e:2b:de:1a:5b:f6:fe:
b3:64:17:b5:a6:0c:2a:d8:c9:2d:d1:6b:3a:2b:53:0a:68:58:
1f:6e:d1:2c:e4:23:32:ab:08:30:47:9a:c5:5c:40:aa:f3:2c:
46:86:85:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:37:17 2025 by rpki-client