Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/L-kM9MDkZylAwWd_ThNoBoUcuoc.roa
File: L-kM9MDkZylAwWd_ThNoBoUcuoc.roa (raw, json)
Hash identifier: FAmLdf3ND6Fdy7xb8n7Ct7/fKU+NwAQwrt0cfvhgOa4=
Subject key identifier: 2F:E9:0C:F4:C0:E4:67:29:40:C1:67:7F:4E:13:68:06:85:1C:BA:87
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 018CC26D45E445FBBBCD66D15BF2EF86DDCA
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/L-kM9MDkZylAwWd_ThNoBoUcuoc.roa
Signing time: Mon 01 Jan 2024 00:29:50 +0000
ROA not before: Mon 01 Jan 2024 00:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34573
IP address blocks: 78.140.35.0/24 maxlen: 24
78.140.34.0/24 maxlen: 24
78.140.33.0/24 maxlen: 24
78.140.32.0/20 maxlen: 20
78.140.32.0/24 maxlen: 24
78.140.38.0/24 maxlen: 24
78.140.37.0/24 maxlen: 24
78.140.36.0/24 maxlen: 24
78.140.42.0/24 maxlen: 24
78.140.41.0/24 maxlen: 24
78.140.40.0/24 maxlen: 24
78.140.39.0/24 maxlen: 24
78.140.44.0/24 maxlen: 24
78.140.43.0/24 maxlen: 24
78.140.47.0/24 maxlen: 24
78.140.46.0/24 maxlen: 24
78.140.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:45:e4:45:fb:bb:cd:66:d1:5b:f2:ef:86:dd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fe90cf4c0e4672940c1677f4e136806851cba87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d9:23:ca:94:9e:59:6d:35:16:30:4b:56:5a:
f9:cc:42:28:5d:84:48:63:34:c8:31:01:ca:b6:0b:
a6:cb:83:e8:d3:1b:5d:b7:9f:c3:e6:4b:27:32:76:
62:01:b0:6f:4c:99:bc:15:cd:62:a3:1f:02:d9:2e:
93:ba:bd:a8:f6:47:21:64:98:e5:3b:a3:12:47:56:
8a:2c:a3:a4:ca:d7:7a:65:68:f9:c4:59:d6:c8:b9:
0b:97:3c:a6:2b:de:97:e4:bd:14:2e:98:3d:36:94:
ed:56:69:7a:a8:18:6e:9e:6f:0a:30:e5:7a:90:c9:
5a:47:00:da:40:ff:bc:e8:03:ad:9e:4b:c5:dd:89:
05:76:05:91:46:14:d3:93:13:7c:20:c6:7c:bf:34:
3c:d9:ae:d5:ae:3b:a6:81:eb:18:6b:f4:38:57:1e:
a0:5c:37:1c:e6:76:6c:b7:53:29:23:80:5a:09:67:
d2:e2:49:6d:63:e1:3d:88:9c:2e:8f:17:52:f0:16:
c3:70:a8:5c:39:0e:dd:c9:42:3d:72:09:7f:35:d2:
24:dd:a4:1c:30:cb:78:e4:37:68:e2:49:29:f1:91:
61:7f:86:94:0a:c2:8b:26:b7:f8:fe:1d:0e:ba:10:
97:42:5a:40:00:26:bc:b1:bf:74:85:49:33:34:f3:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E9:0C:F4:C0:E4:67:29:40:C1:67:7F:4E:13:68:06:85:1C:BA:87
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/L-kM9MDkZylAwWd_ThNoBoUcuoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.140.32.0/20
Signature Algorithm: sha256WithRSAEncryption
25:68:ad:e5:e1:21:b4:46:c0:0e:12:1a:db:8a:99:4b:54:8b:
f6:dc:c4:fd:79:4a:a5:ae:3b:0a:2a:f8:ab:0e:28:5b:78:27:
b4:1b:bc:76:16:60:e8:89:93:1c:c3:19:04:ee:41:12:d9:4c:
d8:25:d9:eb:ff:ed:4b:6c:f3:f3:a7:80:7b:4b:2c:dc:16:cf:
8a:ed:5e:53:3f:ed:ff:db:8e:0a:03:4d:08:39:55:0e:f6:cc:
4f:93:57:fd:c0:cc:10:b4:5a:2d:8d:f3:9b:f9:5d:b4:43:e6:
39:05:52:b4:2d:6a:4b:33:ce:90:79:68:8a:5c:52:25:50:da:
dd:68:c5:95:76:7c:a4:bb:75:73:7d:69:e0:c1:5b:b9:01:7b:
ef:b0:7a:d8:6e:c2:99:ac:d1:0c:42:f1:76:2b:a0:52:cf:39:
be:80:56:ce:a1:d0:ba:07:c1:f1:c1:d3:ce:ef:96:9d:8e:a7:
e6:cb:3e:b2:f0:e4:7f:e8:ae:46:52:ad:80:68:4b:b8:42:65:
2d:67:79:88:e6:97:6e:80:94:63:7e:fa:0d:13:6c:06:69:32:
07:59:8c:bb:d2:2c:78:f3:a3:61:94:5c:78:2d:60:e1:61:0a:
7b:1a:ec:5d:3e:66:ba:57:3b:5a:c2:00:6c:e6:7c:33:53:e9:
d2:bc:7d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:30 2025 by rpki-client