Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/LONZanTVyQ98ZG3usi4MC-mbYm4.roa
File: LONZanTVyQ98ZG3usi4MC-mbYm4.roa (raw, json)
Hash identifier: rGqA66tyGNRSJYi9TJ5uCiyevBrmyLaQLP3M2pD/B1A=
Subject key identifier: 2C:E3:59:6A:74:D5:C9:0F:7C:64:6D:EE:B2:2E:0C:0B:E9:9B:62:6E
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 01920ED0F730C43651B359ECFF37BA0A64F7
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/LONZanTVyQ98ZG3usi4MC-mbYm4.roa
Signing time: Fri 20 Sep 2024 09:43:48 +0000
ROA not before: Fri 20 Sep 2024 09:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216154
IP address blocks: 45.10.172.0/23 maxlen: 23
45.10.172.0/24 maxlen: 24
45.10.173.0/24 maxlen: 24
84.252.102.0/23 maxlen: 23
89.46.131.0/24 maxlen: 24
89.150.34.0/23 maxlen: 23
89.150.41.0/24 maxlen: 24
89.150.59.0/24 maxlen: 24
91.132.224.0/24 maxlen: 24
103.90.72.0/23 maxlen: 23
103.90.74.0/23 maxlen: 23
103.90.74.0/24 maxlen: 24
103.90.75.0/24 maxlen: 24
103.137.248.0/22 maxlen: 22
188.241.196.0/23 maxlen: 23
2a0c:db40::/32 maxlen: 32
2a0c:db40::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Dec 2024 09:38:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:d0:f7:30:c4:36:51:b3:59:ec:ff:37:ba:0a:64:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Sep 20 09:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ce3596a74d5c90f7c646deeb22e0c0be99b626e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:30:87:fe:0d:d3:4d:9c:55:2d:3d:4c:a4:34:
26:ae:e4:28:3f:1e:b1:18:e4:54:6b:2c:18:26:e6:
6e:e7:07:77:c9:3c:3c:47:6a:0c:bd:65:04:1d:63:
ba:06:07:b8:b1:72:f5:13:0c:80:ef:83:d1:84:02:
64:a6:65:e4:2b:53:db:12:0f:0b:da:1c:a9:5e:40:
b1:e7:52:69:78:ad:2c:d6:a5:f2:b4:8a:c5:06:8c:
2d:2c:18:4c:d5:b0:b1:83:6a:43:79:e9:9f:3f:28:
4e:e3:88:5d:e3:c4:b9:3d:27:ad:66:f1:cd:fd:05:
bd:9b:57:8e:26:d3:28:05:b8:b1:b0:81:8a:1e:fb:
7d:a6:21:a3:e9:b5:f9:05:56:59:68:8b:4f:82:5e:
3b:44:15:92:c0:c6:ff:ea:96:8d:da:55:c2:ad:31:
1a:61:82:d6:85:46:6d:93:36:5f:be:00:67:6a:33:
e6:f2:bb:fe:38:2a:39:e8:28:ea:c7:9d:4d:34:63:
49:61:56:fa:43:63:95:53:e5:1a:a7:f2:47:62:c3:
73:5e:c5:de:c6:61:4f:e6:5d:95:40:e8:f8:72:1a:
f5:be:c5:73:4d:06:a2:ef:73:d9:0d:b4:16:ca:5e:
ae:ab:18:af:80:07:67:a1:18:56:67:3e:72:84:37:
1f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E3:59:6A:74:D5:C9:0F:7C:64:6D:EE:B2:2E:0C:0B:E9:9B:62:6E
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/LONZanTVyQ98ZG3usi4MC-mbYm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.172.0/23
84.252.102.0/23
89.46.131.0/24
89.150.34.0/23
89.150.41.0/24
89.150.59.0/24
91.132.224.0/24
103.90.72.0/22
103.137.248.0/22
188.241.196.0/23
IPv6:
2a0c:db40::/32
Signature Algorithm: sha256WithRSAEncryption
0f:d2:66:b4:0e:78:37:14:08:56:84:5c:d6:3b:e9:e5:31:42:
6b:bd:9b:48:8d:ca:d1:8d:bd:de:fc:e4:f5:e1:5f:92:3c:98:
35:52:63:53:3e:f7:4c:ff:a7:6f:61:10:2d:0f:c0:1c:e5:c8:
67:09:89:62:92:63:03:88:3d:c7:93:3c:f3:e1:8f:ca:b3:44:
0e:85:9f:c0:16:fe:ea:34:2b:03:53:7f:ac:bf:c2:3d:b0:c6:
e0:28:63:69:7c:7c:ee:07:48:76:9e:61:a9:62:b0:64:a7:71:
94:1b:18:e3:e0:cb:3c:e4:e6:7e:de:bc:b4:7d:44:41:51:cd:
2e:36:a0:b9:6a:61:42:3e:05:f0:8a:30:82:78:f0:b6:82:53:
8c:62:c7:0f:b8:cd:34:bb:4a:6f:3d:8d:88:00:86:a7:9d:88:
c8:8a:7c:c4:32:d5:3b:c6:7f:db:c4:95:d7:7d:f8:ba:92:62:
86:fa:00:e1:a6:9b:55:e0:4f:a1:4f:88:79:7d:96:40:ad:1d:
f9:28:50:39:42:0d:f2:bc:28:11:c0:f0:70:e8:fa:8c:13:3d:
a7:50:e8:7a:9d:7d:1e:c9:a9:2b:66:d9:e1:02:ae:f7:fa:0c:
82:fd:6b:98:bc:e3:6c:19:34:42:d4:59:61:cc:1f:80:96:b7:
b9:66:3e:f3
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAZIO0PcwxDZRs1ns/ze6CmT3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMWEzZjRhZjk0YTU4MGViOWU3YjU4NTQyYTAwODRiMjFj
MmIwOWIwHhcNMjQwOTIwMDk0MzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2UzNTk2YTc0ZDVjOTBmN2M2NDZkZWViMjJlMGMwYmU5OWI2MjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DCH/g3TTZxVLT1MpDQmruQoPx6x
GORUaywYJuZu5wd3yTw8R2oMvWUEHWO6Bge4sXL1EwyA74PRhAJkpmXkK1PbEg8L
2hypXkCx51JpeK0s1qXytIrFBowtLBhM1bCxg2pDeemfPyhO44hd48S5PSetZvHN
/QW9m1eOJtMoBbixsIGKHvt9piGj6bX5BVZZaItPgl47RBWSwMb/6paN2lXCrTEa
YYLWhUZtkzZfvgBnajPm8rv+OCo56Cjqx51NNGNJYVb6Q2OVU+Uap/JHYsNzXsXe
xmFP5l2VQOj4chr1vsVzTQai73PZDbQWyl6uqxivgAdnoRhWZz5yhDcfbwIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFCzjWWp01ckPfGRt7rIuDAvpm2JuMB8GA1UdIwQY
MBaAFLIaP0r5SlgOuee1hUKgCEshwrCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2hvX1N2bEtXQTY1NTdXRlFxQUlTeUhDc0pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85OTFmMWMtOTk5Yi00Zjc1LWIwYmYt
NTEyOTE3MmI2OTY2LzEvTE9OWmFuVFZ5UTk4WkczdXNpNE1DLW1iWW00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85OTFmMWMtOTk5Yi00Zjc1LWIwYmYtNTEyOTE3MmI2OTY2
LzEvc2hvX1N2bEtXQTY1NTdXRlFxQUlTeUhDc0pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQBLQqsAwQB
VPxmAwQAWS6DAwQBWZYiAwQAWZYpAwQAWZY7AwQAW4TgAwQCZ1pIAwQCZ4n4AwQB
vPHEMA0EAgACMAcDBQAqDNtAMA0GCSqGSIb3DQEBCwUAA4IBAQAP0ma0Dng3FAhW
hFzWO+nlMUJrvZtIjcrRjb3e/OT14V+SPJg1UmNTPvdM/6dvYRAtD8Ac5chnCYli
kmMDiD3Hkzzz4Y/Ks0QOhZ/AFv7qNCsDU3+sv8I9sMbgKGNpfHzuB0h2nmGpYrBk
p3GUGxjj4Ms85OZ+3ry0fURBUc0uNqC5amFCPgXwijCCePC2glOMYscPuM00u0pv
PY2IAIannYjIinzEMtU7xn/bxJXXffi6kmKG+gDhpptV4E+hT4h5fZZArR35KFA5
Qg3yvCgRwPBw6PqMEz2nUOh6nX0eyakrZtnhAq73+gyC/WuYvONsGTRC1FlhzB+A
lre5Zj7z
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:33 2025 by rpki-client