Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/LMN_-UTM618miOXuWBEDtnqWEzo.roa
File: LMN_-UTM618miOXuWBEDtnqWEzo.roa (raw, json)
Hash identifier: cugUF/qObRYYwCGLR/w5Y+DNa3ORpI8I5B++jKKWBwk=
Subject key identifier: 2C:C3:7F:F9:44:CC:EB:5F:26:88:E5:EE:58:11:03:B6:7A:96:13:3A
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019169AA6F0D44B4EB754689CED44FD6B7FA
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/LMN_-UTM618miOXuWBEDtnqWEzo.roa
Signing time: Mon 19 Aug 2024 08:04:22 +0000
ROA not before: Mon 19 Aug 2024 08:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8903
IP address blocks: 45.10.104.0/22 maxlen: 22
45.83.50.0/23 maxlen: 23
45.83.50.0/24 maxlen: 24
45.83.51.0/24 maxlen: 24
80.66.112.0/23 maxlen: 23
80.66.114.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
80.66.116.0/24 maxlen: 24
80.66.117.0/24 maxlen: 24
80.66.118.0/24 maxlen: 24
80.66.119.0/24 maxlen: 24
80.66.120.0/23 maxlen: 23
80.66.120.0/24 maxlen: 24
80.66.121.0/24 maxlen: 24
80.66.122.0/24 maxlen: 24
80.66.123.0/24 maxlen: 24
80.66.124.0/24 maxlen: 24
80.66.125.0/24 maxlen: 24
80.66.126.0/24 maxlen: 24
80.66.127.0/24 maxlen: 24
85.209.72.0/22 maxlen: 22
89.42.70.0/24 maxlen: 24
89.42.71.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
89.44.151.0/24 maxlen: 24
89.45.208.0/24 maxlen: 24
89.45.209.0/24 maxlen: 24
91.132.31.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
94.198.47.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
178.19.34.0/24 maxlen: 24
178.19.35.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
178.19.45.0/24 maxlen: 24
178.19.46.0/23 maxlen: 23
178.19.47.0/24 maxlen: 24
185.71.28.0/24 maxlen: 24
185.203.21.0/24 maxlen: 24
185.203.22.0/24 maxlen: 24
185.203.23.0/24 maxlen: 24
185.229.212.0/24 maxlen: 24
185.229.213.0/24 maxlen: 24
185.229.214.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
193.178.212.0/24 maxlen: 24
193.178.218.0/24 maxlen: 24
193.186.1.0/24 maxlen: 24
193.186.11.0/24 maxlen: 24
194.15.140.0/24 maxlen: 24
194.15.146.0/24 maxlen: 24
194.15.182.0/24 maxlen: 24
194.15.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 08:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:aa:6f:0d:44:b4:eb:75:46:89:ce:d4:4f:d6:b7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 19 08:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cc37ff944cceb5f2688e5ee581103b67a96133a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:ac:72:f8:9d:d9:61:e7:5c:73:c5:6e:38:
c0:f5:16:6b:7c:46:d5:e9:37:3d:b1:80:be:60:e6:
82:dd:4c:d6:f4:04:db:be:6b:3f:f6:cf:6b:45:64:
7c:7e:e0:2d:bc:d9:2e:e7:65:99:34:06:c7:5f:a9:
69:69:a4:3c:7b:a8:7b:dd:95:5d:58:f3:ea:a0:2d:
db:83:15:eb:52:35:24:9a:98:13:76:f9:08:8f:ed:
ef:d1:5e:e2:f3:97:a2:50:fd:65:ca:23:c0:4b:24:
fd:0f:24:e9:07:d2:a8:37:6f:57:d4:cf:36:47:c6:
7a:c1:f7:6f:45:99:a8:51:b1:9d:e7:11:c4:41:80:
c0:63:af:12:20:45:fd:be:13:c9:41:02:6e:e9:fe:
97:9d:f8:72:23:30:ee:6c:d8:8b:0b:2c:9f:f4:c8:
a0:60:db:6f:be:85:e5:e9:ac:c2:c3:47:9e:b1:17:
3e:6d:3a:06:7c:b0:99:ee:17:4b:46:c6:72:c7:5e:
ef:1a:2d:f6:7b:1d:30:ff:a1:df:5e:f5:36:e6:d7:
6c:11:bc:7f:81:ce:b8:fb:bf:6f:a3:05:fc:28:a5:
8b:dd:4a:4f:5f:bf:a7:3d:e1:e3:31:41:b4:67:63:
4d:a9:9f:9a:9d:6e:1a:73:bc:28:44:1f:ce:25:70:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C3:7F:F9:44:CC:EB:5F:26:88:E5:EE:58:11:03:B6:7A:96:13:3A
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/LMN_-UTM618miOXuWBEDtnqWEzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.104.0/22
45.83.50.0/23
80.66.112.0/20
85.209.72.0/22
89.42.70.0/23
89.44.150.0/23
89.45.208.0/23
91.132.31.0/24
94.198.46.0/23
178.19.33.0-178.19.35.255
178.19.44.0/22
185.71.28.0/24
185.203.21.0-185.203.23.255
185.229.212.0/22
185.242.175.0/24
193.178.212.0/24
193.178.218.0/24
193.186.1.0/24
193.186.11.0/24
194.15.140.0/24
194.15.146.0/24
194.15.182.0/24
194.15.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e6:56:f5:3b:52:16:e2:0b:b5:db:7f:d6:86:73:b4:ed:6e:
4e:1f:2d:d2:36:cd:41:5c:24:88:2f:49:2a:b2:a3:12:3a:fc:
57:ee:c8:ef:2a:d4:8b:92:5c:d2:cf:07:f3:38:e8:14:df:d8:
77:8a:95:db:26:8b:14:9b:e1:a2:ed:26:4d:5b:e5:5f:56:f1:
70:6b:1c:bf:d3:62:4e:2c:11:89:1e:a8:60:cd:e9:58:4d:48:
8a:d3:10:44:64:2b:b3:8c:09:3c:ba:78:ad:e7:4c:a1:9c:59:
29:6d:c5:bb:9f:06:fa:5e:5e:03:7e:51:bd:e7:e4:e4:59:a6:
1f:53:75:6b:5f:42:7a:8e:8b:4d:b7:60:ff:09:35:f5:46:8e:
4d:3b:e0:56:a8:6c:dc:6e:f4:d9:03:6b:3f:c1:49:84:20:16:
6f:76:45:62:55:ee:b9:ee:93:d5:0d:b3:e0:15:87:15:70:11:
0a:06:52:72:19:d8:62:46:d8:15:65:bf:c9:a1:d6:c0:f6:36:
76:0b:8a:92:96:76:a1:8d:4a:b2:db:ed:9b:62:ab:c6:32:4d:
ee:8a:83:1f:1b:5a:e0:a8:af:2d:c1:0f:90:95:80:d3:1c:91:
ae:70:5f:1b:e3:24:e1:e3:47:83:de:20:2a:3b:fc:c4:a8:35:
31:91:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 10:22:48 2024 by rpki-client on console-fra.rpki-client.org