Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lv-c-I1G8ZnI5kZQn5KjqgsIlOI.roa
File: lv-c-I1G8ZnI5kZQn5KjqgsIlOI.roa (raw, json)
Hash identifier: 5llJF7wrLuz/Ju4wg8hv4lVAO1+ZL15CUKHJ6SCOpVE=
Subject key identifier: 96:FF:9C:F8:8D:46:F1:99:C8:E6:46:50:9F:92:A3:AA:0B:08:94:E2
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0193CF4FEF39D55CD45B6BD245B0F1BAFCE7
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lv-c-I1G8ZnI5kZQn5KjqgsIlOI.roa
Signing time: Mon 16 Dec 2024 11:52:22 +0000
ROA not before: Mon 16 Dec 2024 11:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.208.110.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:4f:ef:39:d5:5c:d4:5b:6b:d2:45:b0:f1:ba:fc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 16 11:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96ff9cf88d46f199c8e646509f92a3aa0b0894e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:56:c6:6e:16:69:77:14:69:41:56:4b:a9:
ba:06:97:c0:7e:c3:8d:eb:5a:df:5d:15:d9:d1:91:
7f:33:4b:a6:4e:c3:0a:d8:46:b5:9b:75:74:e0:6d:
0e:1b:f2:27:5b:5d:a2:49:84:2c:3f:98:6e:96:a1:
f8:21:f9:56:20:b2:fa:eb:16:a5:5b:eb:c6:4b:40:
6a:75:5d:90:7d:d8:07:86:39:dc:f0:ea:aa:f6:04:
4f:31:26:ef:8e:f2:6b:05:19:09:7f:a6:4d:f6:08:
f1:21:88:d5:9d:07:27:a0:c3:97:b3:ac:1f:54:d3:
31:4e:04:d4:fe:51:66:d4:44:69:53:b2:bc:50:0e:
49:6e:63:bd:a6:fc:dd:6d:98:40:c6:db:1f:48:ef:
a6:3d:c9:20:3c:c1:85:90:19:12:11:c1:be:2f:2c:
11:13:5f:d4:d2:7f:93:d7:bb:27:37:be:2f:32:60:
d8:2e:71:bc:db:6c:e1:86:64:07:21:e5:7d:27:8e:
ef:88:45:0a:2b:68:b4:d9:a5:29:b9:42:52:fa:78:
d7:2a:53:11:25:83:29:b9:24:c3:3a:89:30:99:01:
c6:9f:53:7e:14:9c:1c:b8:50:1f:66:28:40:ff:8f:
bd:39:fb:ac:02:18:dc:c4:da:4d:28:74:1b:b0:fb:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FF:9C:F8:8D:46:F1:99:C8:E6:46:50:9F:92:A3:AA:0B:08:94:E2
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/lv-c-I1G8ZnI5kZQn5KjqgsIlOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
86.107.100.0/24
92.114.54.0/24
93.113.171.0/24
185.141.219.0/24
185.198.235.0/24
188.208.110.0/24
212.192.12.0/23
212.192.15.0/24
Signature Algorithm: sha256WithRSAEncryption
15:31:df:66:67:79:29:ed:4f:b2:93:56:c0:a8:60:eb:13:dd:
b3:4d:25:64:ba:91:91:b7:0b:28:47:2b:c2:47:03:59:12:33:
53:61:49:38:ab:77:2c:a0:37:3b:36:ed:a4:c9:8a:03:cb:d2:
e2:43:91:8e:5c:35:08:ab:01:05:e4:e3:6d:e8:ab:ee:c5:4c:
34:5e:fb:31:2f:b8:0d:4b:3d:d0:58:09:97:e6:54:d5:d4:84:
5e:fd:e5:64:bc:ec:f9:2a:9b:40:f5:61:10:df:f7:19:2d:54:
6c:6f:ee:d0:9a:75:fb:16:c3:8b:9b:9e:58:3b:0e:35:f0:fb:
aa:55:1b:c0:e2:3d:2f:a9:27:58:15:71:81:e8:d1:1c:f6:06:
7b:02:3b:38:39:8c:e2:72:da:0a:4c:e1:0a:0f:46:9d:97:88:
2a:68:fb:84:53:ad:95:93:e1:75:aa:9c:37:d7:5a:ba:8a:fe:
31:13:c5:f4:7a:01:ed:d0:d2:d5:32:60:fe:a6:0b:07:98:3d:
82:e7:61:64:72:4c:6d:bb:8f:e5:28:f8:95:28:4a:fa:19:15:
42:dd:03:d6:50:cc:10:48:4b:48:c1:4a:93:21:1e:1d:a2:71:
7f:c8:b7:29:b7:03:c6:5c:09:70:fa:9b:a6:bf:52:d1:a0:0f:
12:0d:36:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:44 2025 by rpki-client