Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/LyqGmq-IRzGqdHlvTwocyCDlIBo.roa
File: LyqGmq-IRzGqdHlvTwocyCDlIBo.roa (raw, json)
Hash identifier: KRliUZOrnNWgbYTfweIBKUmqtARTzz1AfyUO8F2Fm1I=
Subject key identifier: 2F:2A:86:9A:AF:88:47:31:AA:74:79:6F:4F:0A:1C:C8:20:E5:20:1A
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 0193BF8E1F954FD1B5185DC99E2140A106E0
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/LyqGmq-IRzGqdHlvTwocyCDlIBo.roa
Signing time: Fri 13 Dec 2024 10:26:22 +0000
ROA not before: Fri 13 Dec 2024 10:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397192
IP address blocks: 5.226.176.0/21 maxlen: 24
78.143.244.0/24 maxlen: 24
78.143.245.0/24 maxlen: 24
78.143.246.0/24 maxlen: 24
78.143.247.0/24 maxlen: 24
2a03:a860:51::/48 maxlen: 48
2a03:a860:61::/48 maxlen: 48
2a03:a860:a00::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:8e:1f:95:4f:d1:b5:18:5d:c9:9e:21:40:a1:06:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Dec 13 10:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f2a869aaf884731aa74796f4f0a1cc820e5201a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:45:4a:61:0e:74:d4:a7:99:f1:0e:6d:b7:
37:3d:61:7b:e4:1b:b6:b3:40:7b:b6:87:12:d9:9e:
45:a8:0d:30:1a:2f:20:d4:0b:8e:94:03:ca:d7:74:
42:65:40:e8:94:d9:00:81:ad:17:98:b6:55:ee:8a:
79:c0:23:80:c6:eb:a0:bb:75:7d:e2:14:0f:a3:b2:
cf:92:b2:5e:3b:e8:e4:ba:61:14:86:06:70:3b:8b:
98:d2:ba:cc:28:76:21:f4:37:96:05:8a:05:e5:67:
c1:9c:37:ca:b3:8a:95:70:6e:13:44:99:de:af:9c:
ef:7d:f7:6c:f8:b2:09:8d:c9:a6:93:a7:b8:21:0a:
44:9e:cd:80:af:ff:54:7a:05:ae:b9:78:e0:c8:d0:
a6:14:fa:63:8d:ce:5f:a4:f9:71:45:f1:68:ba:69:
d6:0f:c8:58:b8:5f:8d:28:2f:e5:a9:ec:e3:c6:14:
15:32:36:c7:e6:6b:bf:ed:81:57:eb:3e:ff:61:ef:
14:27:5e:5d:7a:e7:df:df:8f:5d:b3:89:47:ef:ae:
6d:9c:46:ae:0a:7b:be:65:8f:9e:27:0b:d4:ca:da:
4b:9c:fe:da:d6:1f:06:77:d6:4b:f4:6a:63:ee:98:
e8:0d:b8:2c:1e:92:8e:bb:be:4d:4c:63:5a:59:b5:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2A:86:9A:AF:88:47:31:AA:74:79:6F:4F:0A:1C:C8:20:E5:20:1A
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/LyqGmq-IRzGqdHlvTwocyCDlIBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.176.0/21
78.143.244.0/22
IPv6:
2a03:a860:51::/48
2a03:a860:61::/48
2a03:a860:a00::/40
Signature Algorithm: sha256WithRSAEncryption
80:8e:f5:e8:41:d5:4c:67:79:57:74:6a:86:5a:71:94:04:e5:
91:12:71:c8:ae:da:f0:01:71:fb:48:43:4b:5f:e3:be:93:c3:
d3:58:bd:9d:1d:6a:9f:80:41:d5:90:ce:93:ab:87:96:fd:4e:
8b:76:bd:a3:70:b0:62:1e:0e:97:49:50:cf:47:36:6c:58:ca:
57:ed:fc:c6:32:44:2e:d5:f6:6b:23:e8:4c:c4:37:1d:bc:06:
0d:eb:21:79:f4:3c:82:d1:e8:ee:cc:21:33:f3:92:79:16:c9:
38:48:9b:a7:4c:57:83:2e:ec:e4:43:b0:ca:17:6b:88:82:2f:
fa:69:ed:55:56:bd:68:94:04:1b:07:bb:c2:08:87:c6:ac:4d:
a8:57:85:db:ff:d6:e0:65:17:6a:dc:03:7e:d7:d0:0c:c2:d0:
71:6e:a9:6c:67:f7:3a:d4:ad:73:80:35:6b:c9:da:07:a5:75:
5d:22:b8:5d:81:60:85:79:70:9d:b0:36:00:0f:a8:aa:d9:4c:
e1:e0:0a:11:44:78:0a:de:8d:b1:ef:44:65:bd:42:57:ca:ea:
bc:44:bb:db:10:bf:a7:20:dd:90:08:7a:96:22:6f:74:a8:e7:
b9:7d:80:1e:4c:66:3e:01:51:72:7e:71:53:5e:0a:d5:b9:bc:
66:2a:80:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:18:44 2025 by rpki-client