Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/lwc-_w4uOk2BydUkkhCZK9bbZWI.roa
File: lwc-_w4uOk2BydUkkhCZK9bbZWI.roa (raw, json)
Hash identifier: vJY/2NNPb9eGOHbHIsJqQUsrK7peh3/k4cTPlGn7ZLY=
Subject key identifier: 97:07:3E:FF:0E:2E:3A:4D:81:C9:D5:24:92:10:99:2B:D6:DB:65:62
Certificate issuer: /CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Certificate serial: 018F85C979E49D8B66F5DCF8FD215AE7E563
Authority key identifier: 91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/lwc-_w4uOk2BydUkkhCZK9bbZWI.roa
Signing time: Fri 17 May 2024 09:02:04 +0000
ROA not before: Fri 17 May 2024 09:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51185
IP address blocks: 45.157.64.0/24 maxlen: 24
45.157.65.0/24 maxlen: 24
45.157.66.0/24 maxlen: 24
45.157.67.0/24 maxlen: 24
94.124.64.0/21 maxlen: 21
94.124.64.0/24 maxlen: 24
94.124.65.0/24 maxlen: 24
94.124.66.0/24 maxlen: 24
94.124.67.0/24 maxlen: 24
94.124.68.0/24 maxlen: 24
94.124.69.0/24 maxlen: 24
94.124.70.0/24 maxlen: 24
94.124.71.0/24 maxlen: 24
178.248.48.0/24 maxlen: 24
178.248.49.0/24 maxlen: 24
178.248.50.0/24 maxlen: 24
178.248.51.0/24 maxlen: 24
178.248.52.0/24 maxlen: 24
178.248.54.0/24 maxlen: 24
185.45.208.0/24 maxlen: 24
185.45.210.0/24 maxlen: 24
185.187.156.0/24 maxlen: 24
185.187.159.0/24 maxlen: 24
2a02:2890:ffff::/48 maxlen: 48
2a02:2891::/48 maxlen: 48
2a02:2891:2::/48 maxlen: 48
2a02:2891:4::/48 maxlen: 48
2a02:2891:9::/48 maxlen: 48
2a02:2891:10::/48 maxlen: 48
2a02:2891:12::/48 maxlen: 48
2a02:2891:13::/48 maxlen: 48
2a02:2891:15::/48 maxlen: 48
2a02:2891:16::/48 maxlen: 48
2a02:2891:18::/48 maxlen: 48
2a02:2891:29::/48 maxlen: 48
2a02:2891:ff::/48 maxlen: 48
2a02:2892:32::/48 maxlen: 48
2a02:2892:40::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 21 May 2024 11:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:85:c9:79:e4:9d:8b:66:f5:dc:f8:fd:21:5a:e7:e5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Validity
Not Before: May 17 09:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97073eff0e2e3a4d81c9d5249210992bd6db6562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:3d:91:0d:a5:c9:fc:90:88:7e:73:3c:17:
bf:8e:9c:2c:f2:00:e5:78:a3:f7:8e:69:ed:c9:e0:
fa:07:73:e4:6c:64:e5:39:61:11:00:24:81:3d:84:
88:bc:f7:1e:3a:29:88:bf:4f:36:19:a7:8b:31:1f:
a1:c6:ba:a8:16:81:3e:ed:ee:53:72:b8:e7:b1:e8:
5a:33:44:61:22:f7:bc:89:e8:10:69:95:cb:d3:ea:
15:59:90:7e:10:6b:d2:52:a4:86:9c:c8:04:83:4f:
55:1a:4b:43:b6:45:9b:c3:5d:ac:63:fb:95:7e:1b:
8f:68:12:9d:a4:64:c8:63:1a:98:e8:7a:eb:47:9a:
ec:d1:31:41:2e:5c:88:13:47:45:df:e1:a4:67:c7:
1c:5e:b3:b5:cb:e8:c6:b7:7d:95:28:67:0a:1b:b7:
3e:bf:22:bd:65:d7:9a:8b:38:61:5c:08:b9:6e:f6:
ba:33:28:90:32:56:a8:1e:f4:79:ad:61:54:fa:64:
e9:bd:8f:bd:1a:7a:5b:29:e3:c1:9b:28:05:7b:66:
4f:2e:c9:a4:dc:68:ea:e2:56:e4:16:d1:19:33:94:
16:dd:9d:ff:57:3c:75:54:64:fc:ef:76:78:a6:61:
52:07:43:c9:e4:74:17:cd:a2:30:81:4f:ea:2d:0e:
47:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:07:3E:FF:0E:2E:3A:4D:81:C9:D5:24:92:10:99:2B:D6:DB:65:62
X509v3 Authority Key Identifier:
keyid:91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/lwc-_w4uOk2BydUkkhCZK9bbZWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.64.0/22
94.124.64.0/21
178.248.48.0-178.248.52.255
178.248.54.0/24
185.45.208.0/24
185.45.210.0/24
185.187.156.0/24
185.187.159.0/24
IPv6:
2a02:2890:ffff::-2a02:2891:0:ffff:ffff:ffff:ffff:ffff
2a02:2891:2::/48
2a02:2891:4::/48
2a02:2891:9::/48
2a02:2891:10::/48
2a02:2891:12::/47
2a02:2891:15::-2a02:2891:16:ffff:ffff:ffff:ffff:ffff
2a02:2891:18::/48
2a02:2891:29::/48
2a02:2891:ff::/48
2a02:2892:32::/48
2a02:2892:40::/48
Signature Algorithm: sha256WithRSAEncryption
97:45:e5:94:a3:64:71:c8:a3:44:ec:78:e4:f5:b1:34:6d:3c:
4f:66:8a:f7:87:bd:91:71:8c:8a:e8:35:47:ba:6b:79:21:04:
54:f1:34:f5:35:8d:4c:f6:7f:2e:e3:fc:92:f7:25:5e:f4:da:
ad:61:2b:4e:c5:81:a2:c2:f5:0a:c1:64:9a:b0:79:eb:7f:aa:
c8:90:43:c2:65:be:39:32:83:9e:4f:10:57:9e:29:75:3a:3a:
33:0f:6e:93:a1:85:1c:27:ff:0f:96:db:06:a9:51:f1:50:17:
17:b4:37:c8:1d:d7:15:05:39:24:4e:b2:1b:60:9a:3a:b1:65:
5f:3e:52:95:08:9b:4e:63:10:8f:f4:c0:f5:25:de:23:b7:d0:
99:52:29:b0:c3:80:38:ed:dc:bb:4f:54:33:61:ab:d2:6c:91:
66:77:09:43:51:d2:bb:70:dc:5e:81:c9:99:2e:d6:0c:42:c9:
4f:ba:89:ac:94:ea:aa:25:db:33:12:b5:f1:89:06:4d:1f:4b:
03:f3:cd:f4:de:f4:6a:5d:a1:fd:56:90:e9:7d:1a:35:fa:2e:
ed:7a:52:8f:f5:c8:1a:33:4d:ad:af:58:81:23:08:27:74:90:
e8:3d:8e:b5:74:0c:ce:6b:b0:c1:91:8d:d1:12:d5:01:53:4e:
f7:85:5b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:50 2024 by rpki-client on console-ams.rpki-client.org