Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/LT8VBNDN7USQQjpxObuYNa3wEUQ.roa
File: LT8VBNDN7USQQjpxObuYNa3wEUQ.roa (raw, json)
Hash identifier: V6kuJxMKDk8Ay9CusCgyCvQzGkTHRAwnYbgEY48BmU0=
Subject key identifier: 2D:3F:15:04:D0:CD:ED:44:90:42:3A:71:39:BB:98:35:AD:F0:11:44
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018CC56E15322AE8AD69CD951364B4BA2973
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/LT8VBNDN7USQQjpxObuYNa3wEUQ.roa
Signing time: Mon 01 Jan 2024 14:29:35 +0000
ROA not before: Mon 01 Jan 2024 14:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202766
IP address blocks: 94.198.46.0/24 maxlen: 24
94.198.47.0/24 maxlen: 24
45.80.80.0/24 maxlen: 24
45.80.82.0/24 maxlen: 24
45.80.82.0/23 maxlen: 23
45.80.83.0/24 maxlen: 24
185.203.23.0/24 maxlen: 24
89.42.70.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
45.83.51.0/24 maxlen: 24
45.83.50.0/23 maxlen: 23
45.83.50.0/24 maxlen: 24
178.19.47.0/24 maxlen: 24
80.66.112.0/23 maxlen: 23
185.229.212.0/22 maxlen: 22
185.229.212.0/24 maxlen: 24
80.66.117.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
185.229.213.0/24 maxlen: 24
80.66.118.0/24 maxlen: 24
80.66.116.0/24 maxlen: 24
80.66.114.0/24 maxlen: 24
80.66.121.0/24 maxlen: 24
80.66.125.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
185.229.214.0/24 maxlen: 24
80.66.123.0/24 maxlen: 24
80.66.119.0/24 maxlen: 24
80.66.120.0/24 maxlen: 24
89.44.151.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
80.66.124.0/24 maxlen: 24
80.66.127.0/24 maxlen: 24
80.66.126.0/24 maxlen: 24
178.19.32.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:15:32:2a:e8:ad:69:cd:95:13:64:b4:ba:29:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d3f1504d0cded4490423a7139bb9835adf01144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:28:ae:a5:14:6c:ce:a6:58:c8:39:eb:e9:9b:
2e:30:16:59:86:33:a7:7d:4b:3a:39:55:1a:05:5e:
d5:11:33:a9:e3:41:50:ed:86:99:b3:65:f5:ce:3b:
57:41:c1:0b:54:1e:ff:77:2b:92:f8:03:64:72:e9:
58:3b:c0:92:00:db:f7:df:72:8d:b2:4f:81:11:e4:
2d:8c:d3:dc:cd:2a:ea:63:96:64:db:0a:9d:09:20:
27:24:18:79:a8:a5:c6:ae:88:ec:bc:83:35:f5:1a:
62:f5:c3:a5:57:a6:96:eb:ba:00:a1:40:f6:2b:30:
92:56:b7:d8:e8:40:b9:e2:c9:9d:4b:4a:4a:a4:b3:
c2:42:7e:ac:ba:ec:ee:ae:28:34:fe:38:9e:54:d5:
bd:fa:7e:3a:54:cd:39:58:41:47:3a:92:ae:53:ad:
69:36:77:76:37:2e:84:3d:53:1b:5a:d9:4a:c6:68:
a4:c4:3a:0b:90:9a:f8:d9:20:67:87:53:d3:ed:dc:
28:ee:5d:e8:6c:72:b8:49:94:2f:a9:65:6d:46:af:
09:5c:38:24:30:71:74:60:78:e3:f4:30:ae:10:14:
ae:82:8c:f0:27:e7:ae:67:b2:bb:e0:0f:02:d8:5e:
15:3f:e2:20:42:03:31:38:84:db:af:d7:aa:53:a1:
72:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3F:15:04:D0:CD:ED:44:90:42:3A:71:39:BB:98:35:AD:F0:11:44
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/LT8VBNDN7USQQjpxObuYNa3wEUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.80.0/24
45.80.82.0/23
45.83.50.0/23
80.66.112.0-80.66.121.255
80.66.123.0-80.66.127.255
89.42.70.0/24
89.44.150.0/23
94.198.46.0/23
178.19.32.0/23
178.19.44.0/24
178.19.47.0/24
185.203.23.0/24
185.229.212.0/22
185.242.175.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f4:f8:dd:ea:31:42:41:0e:20:74:ab:1d:2f:a7:02:4e:0a:
35:e7:83:3b:52:05:f9:c9:4d:2d:22:fb:cd:66:e7:bd:2d:be:
e5:4e:7d:a2:55:a4:6d:d4:b5:21:4c:c1:b4:4e:be:2d:96:bf:
b2:ed:af:d8:f7:80:9e:1c:40:4e:d1:a1:54:1f:85:22:d9:ab:
b3:1b:00:b2:fa:57:bb:92:f5:63:4b:60:d7:cf:46:39:c5:af:
7d:39:f7:4a:ea:ed:23:d8:fe:97:9a:ce:20:32:29:ec:58:11:
1f:2e:95:1f:5d:df:c9:36:be:d5:c2:ee:83:c7:0d:9f:f9:02:
26:a4:27:54:e8:a3:97:00:98:4c:57:2e:2f:b8:37:b8:cd:e8:
9a:66:47:bc:d8:cd:98:47:25:5d:6c:95:7f:8b:b4:0e:87:03:
ff:f2:48:d8:b8:f1:e1:55:d6:26:60:81:71:f5:3c:5f:2a:27:
b9:3e:94:3a:b6:ba:0f:23:35:52:83:99:56:12:a5:63:ff:01:
a0:8d:bf:da:35:10:28:22:da:1b:c3:f4:a5:a7:8e:e9:5d:03:
28:5f:91:7f:0d:5e:5c:ad:de:35:6a:65:ab:3f:02:94:70:20:
ce:00:9e:3f:70:41:43:17:62:96:d8:16:f2:71:68:9e:0e:fe:
5c:44:29:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:37 2024 by rpki-client on console-fra.rpki-client.org