Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/LmkZvL5Fazt0-45xvByswjk5JrI.roa
File: LmkZvL5Fazt0-45xvByswjk5JrI.roa (raw, json)
Hash identifier: QSVPZIL04wFbvo6dO9xsjRO4CTfmkVGG1jqrMujiTmM=
Subject key identifier: 2E:69:19:BC:BE:45:6B:3B:74:FB:8E:71:BC:1C:AC:C2:39:39:26:B2
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0191F9A7CBD4E37D39E055C54DE527B8B560
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/LmkZvL5Fazt0-45xvByswjk5JrI.roa
Signing time: Mon 16 Sep 2024 07:06:49 +0000
ROA not before: Mon 16 Sep 2024 07:06:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44889
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
46.38.140.0/24 maxlen: 24
46.38.144.0/23 maxlen: 23
46.38.150.0/24 maxlen: 24
185.24.150.0/24 maxlen: 24
185.29.220.0/24 maxlen: 24
185.29.221.0/24 maxlen: 24
185.143.74.0/24 maxlen: 24
185.143.75.0/24 maxlen: 24
212.16.64.0/19 maxlen: 24
212.16.71.0/24 maxlen: 24
212.16.72.0/24 maxlen: 25
212.16.81.0/24 maxlen: 24
212.16.86.0/23 maxlen: 23
212.16.89.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.12.0/24 maxlen: 24
212.80.13.0/24 maxlen: 24
212.80.14.0/24 maxlen: 24
212.80.15.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: Failed, certificate revoked on Mon 23 Sep 2024 12:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f9:a7:cb:d4:e3:7d:39:e0:55:c5:4d:e5:27:b8:b5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Sep 16 07:06:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e6919bcbe456b3b74fb8e71bc1cacc2393926b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ad:3a:1d:77:ed:a9:43:75:eb:13:90:eb:3a:
d9:13:25:bc:43:75:28:1d:81:77:34:6c:0b:15:8a:
90:31:17:91:a7:c7:45:c6:d3:8a:87:17:f1:d7:f5:
86:74:a3:fc:ed:1e:7d:15:63:c6:09:cf:f1:c6:1d:
f5:a0:3d:59:eb:79:b2:32:6e:05:fe:b2:e1:9a:5b:
94:fd:23:bb:cd:fd:c7:a5:d0:68:b9:9c:3c:5c:af:
a7:8d:2c:49:b8:f7:be:a0:31:31:1b:f6:f4:e7:9e:
fe:ce:8b:00:f9:17:44:30:11:05:c5:9c:39:ac:ed:
7b:ca:8c:38:a6:15:42:32:b5:b6:7f:c3:6a:47:6a:
b3:da:45:22:d6:e9:96:7d:87:06:78:32:bc:79:08:
8f:c0:f9:fb:7a:8f:86:85:27:08:1f:b0:29:49:1a:
6e:e3:00:6e:8d:48:21:b8:94:3c:88:4f:8b:8b:fe:
8e:bd:3b:86:e2:70:7a:c9:59:2a:78:58:0e:47:cb:
23:e0:e2:03:46:9f:76:e9:4f:29:6f:53:6f:5f:f4:
29:ae:84:75:e0:51:ee:0b:24:82:c8:1a:25:d5:f1:
72:61:dc:12:ce:cd:a8:d3:18:e8:db:7a:41:7c:4c:
e5:ed:f2:c1:a4:cf:8d:39:02:c0:bd:38:a7:2c:ae:
78:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:69:19:BC:BE:45:6B:3B:74:FB:8E:71:BC:1C:AC:C2:39:39:26:B2
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/LmkZvL5Fazt0-45xvByswjk5JrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.140.0/24
46.38.144.0/23
46.38.150.0/24
185.24.150.0/24
185.29.220.0/23
185.143.74.0/23
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
11:9d:95:b3:8d:30:f5:77:2c:ab:31:91:03:6a:8c:4a:f4:6f:
21:c2:45:3e:22:79:aa:31:f9:38:d9:d2:66:5f:fb:6a:78:80:
9c:cf:06:5c:87:37:a2:4a:7a:d4:a2:36:6f:ad:6f:53:82:60:
5a:c0:4e:10:c9:ae:7c:e9:22:05:c0:d4:5c:49:a8:8c:04:21:
05:77:59:94:e6:9f:34:57:ac:65:ce:31:ad:ea:8e:e0:7b:f5:
5d:8a:93:3e:9f:34:54:65:ec:c2:44:7a:72:ed:5f:89:cc:ba:
e6:dd:2b:9f:99:0f:51:78:3b:c0:a6:1c:40:35:66:5a:46:d1:
69:74:39:d3:20:c4:04:cf:68:81:5e:70:33:ac:52:0d:1c:21:
cf:97:15:84:3f:c9:b3:bf:53:e6:8c:3e:5a:fc:b1:b1:70:7d:
9b:76:96:c7:ec:02:ac:35:42:b1:2c:10:c8:3a:9d:26:c5:38:
87:90:a1:08:4c:55:f2:58:2f:5c:03:92:5a:57:7c:29:d2:6f:
cf:1d:dd:0a:b9:3b:7f:68:02:d8:c3:01:aa:19:f2:ac:e2:94:
fa:5e:2a:a2:b8:b4:ce:e7:8d:a2:8a:60:0a:71:67:44:43:91:
2d:4f:89:6b:52:50:ef:69:03:d5:a8:53:1f:79:ec:25:12:83:
c2:9e:0e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 15:22:07 2024 by rpki-client on console-fra.rpki-client.org