Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/lNECwLwLCvKx3x7agTqY6yAqUCA.roa
File: lNECwLwLCvKx3x7agTqY6yAqUCA.roa (raw, json)
Hash identifier: h7VT45gBbEfo97fy0n+RCmWSHFbx7l1zR++5oVgfSIw=
Subject key identifier: 94:D1:02:C0:BC:0B:0A:F2:B1:DF:1E:DA:81:3A:98:EB:20:2A:50:20
Certificate issuer: /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Certificate serial: 01957F92FC2954A3F074CBCDA1A97A394A79
Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/lNECwLwLCvKx3x7agTqY6yAqUCA.roa
Signing time: Mon 10 Mar 2025 10:21:33 +0000
ROA not before: Mon 10 Mar 2025 10:21:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199039
IP address blocks: 176.110.96.0/22 maxlen: 22
176.110.98.0/24 maxlen: 24
185.134.52.0/22 maxlen: 24
193.187.74.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 13 Mar 2025 16:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:92:fc:29:54:a3:f0:74:cb:cd:a1:a9:7a:39:4a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Validity
Not Before: Mar 10 10:21:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94d102c0bc0b0af2b1df1eda813a98eb202a5020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:91:a1:1b:08:b3:fb:1c:f2:c3:30:9a:ae:
c8:76:6a:28:6c:ac:99:26:b0:3f:c0:60:b8:9b:91:
27:a4:af:e8:0b:5f:9c:57:70:3a:b6:b2:01:f3:30:
cc:f3:bc:54:f0:de:b6:e4:78:8d:c6:3a:93:86:76:
9e:f3:3e:fd:4b:eb:e3:3b:5b:36:dc:11:76:9b:f2:
56:b3:da:8b:d6:e7:87:b4:e2:8a:19:db:e4:15:9d:
e2:99:b8:40:ee:b9:e7:a4:c3:8f:f5:6e:90:89:33:
e6:8d:31:b8:da:dd:22:76:8f:94:22:34:94:f3:f3:
02:9c:06:fa:88:aa:31:7e:a3:48:24:ac:cb:74:10:
62:fe:f9:b5:35:6a:ba:ea:5e:5a:d9:eb:25:a9:2a:
5e:b9:76:35:40:a3:98:71:92:65:af:da:f0:5e:98:
1d:e4:a1:26:12:bf:12:a6:54:0b:bf:11:7f:b0:a9:
c4:ca:75:7b:f2:ad:4f:ea:73:96:96:a6:60:3e:0e:
ed:b4:4b:35:f7:8c:d9:5e:6f:b4:b9:de:a5:ee:24:
96:23:b3:6d:e7:49:d1:a9:a2:4c:d4:f5:51:64:15:
ed:ce:6c:17:eb:70:87:b4:c3:bc:9f:0f:0d:20:42:
92:53:dd:aa:6b:7f:31:c4:75:e2:ca:a5:65:65:93:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D1:02:C0:BC:0B:0A:F2:B1:DF:1E:DA:81:3A:98:EB:20:2A:50:20
X509v3 Authority Key Identifier:
keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/lNECwLwLCvKx3x7agTqY6yAqUCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.96.0/22
185.134.52.0/22
193.187.74.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:02:54:aa:d1:f7:57:41:4b:d8:15:4f:b2:1d:9b:0b:36:cc:
54:0d:c8:0a:35:cb:db:36:d9:11:2d:1c:d6:f1:31:6f:ee:59:
d1:48:a5:b5:1c:22:9b:41:22:3d:66:23:d2:a9:36:8b:7c:7f:
c4:6c:74:15:24:d2:0a:2e:63:97:0e:97:e1:92:21:06:a8:76:
94:34:17:d2:2c:b9:98:2f:19:13:19:1e:6f:c5:fe:63:55:22:
16:fa:b9:31:9d:cd:38:69:57:6b:1d:15:bb:3a:59:d9:66:ff:
13:cd:18:be:93:b8:43:30:40:f7:d9:9b:32:29:f9:9f:35:31:
76:83:b8:ee:e5:74:e9:07:0b:09:6e:05:5b:c9:94:9c:b1:58:
8e:27:eb:e2:9c:50:8d:13:dc:e4:c7:b8:14:49:9c:01:08:a1:
42:4c:30:6e:99:84:df:4e:4e:c4:89:a8:2e:15:34:0a:34:f2:
d4:5e:43:11:62:8d:b5:fc:d6:f1:b9:5e:1b:d3:24:df:fa:8a:
79:62:c2:8e:84:02:1b:bf:32:fa:32:f7:51:ca:29:b5:c0:c6:
08:58:7f:53:d6:d4:af:20:be:21:7e:85:bf:3d:36:08:4b:1f:
ee:3a:63:c1:08:0a:40:8a:ba:b4:2f:c7:82:d1:1c:27:92:5b:
fb:36:5b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:29:12 2025 by rpki-client