Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/lUORpSH1bNUTKbVn8aWInzRVb_M.roa
File: lUORpSH1bNUTKbVn8aWInzRVb_M.roa (raw, json)
Hash identifier: ncHLi07qQX+GU19qgl/fdlM3jqwDQeISheNm1jlSbHs=
Subject key identifier: 95:43:91:A5:21:F5:6C:D5:13:29:B5:67:F1:A5:88:9F:34:55:6F:F3
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 01939C70DD44D55830F807AE83387AF10F3E
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/lUORpSH1bNUTKbVn8aWInzRVb_M.roa
Signing time: Fri 06 Dec 2024 14:47:42 +0000
ROA not before: Fri 06 Dec 2024 14:47:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29124
IP address blocks: 46.31.24.0/21 maxlen: 24
46.39.224.0/19 maxlen: 24
62.122.208.0/22 maxlen: 22
62.122.212.0/24 maxlen: 24
62.182.72.0/21 maxlen: 24
79.172.64.0/18 maxlen: 24
81.200.0.0/19 maxlen: 24
82.199.96.0/19 maxlen: 24
84.51.64.0/19 maxlen: 24
84.51.96.0/19 maxlen: 24
90.155.128.0/17 maxlen: 24
91.123.16.0/20 maxlen: 24
91.189.240.0/21 maxlen: 24
91.207.170.0/23 maxlen: 24
94.102.112.0/20 maxlen: 24
95.143.208.0/20 maxlen: 24
109.225.192.0/18 maxlen: 24
109.229.128.0/19 maxlen: 24
134.0.96.0/20 maxlen: 24
176.97.128.0/21 maxlen: 24
185.55.0.0/22 maxlen: 24
185.60.44.0/22 maxlen: 24
188.68.96.0/19 maxlen: 24
195.234.56.0/24 maxlen: 24
213.193.0.0/19 maxlen: 24
2a02:2620::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9c:70:dd:44:d5:58:30:f8:07:ae:83:38:7a:f1:0f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Dec 6 14:47:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=954391a521f56cd51329b567f1a5889f34556ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:ee:bb:e4:33:ad:6d:7b:22:73:f8:4d:8c:
0e:eb:b8:bc:44:67:bf:36:2d:05:ee:b4:6a:69:83:
ca:22:2e:70:37:1a:98:70:19:11:d2:9b:49:cb:e6:
24:30:3b:fc:36:bb:6c:1e:65:74:93:c1:2a:e9:5b:
92:d3:0c:3e:1c:c1:4d:a0:ff:51:a6:a8:2b:13:11:
91:63:5f:e1:9e:6c:fb:36:fd:b2:02:6b:99:48:38:
81:78:56:77:28:92:0a:83:50:b5:31:4c:f7:b5:e2:
18:9c:f2:5b:b4:88:be:9d:c7:73:ec:8b:d6:ca:4f:
89:42:31:3e:ee:bb:2b:ad:2e:59:b2:57:dc:5b:72:
1e:6a:4b:09:b8:09:0d:92:63:0e:25:8b:72:31:b6:
62:29:53:b4:29:21:56:a6:18:71:06:75:5f:47:7c:
bf:dd:9b:00:f6:e3:2f:b2:44:cc:0c:93:94:24:46:
5c:dc:7f:75:a7:90:8f:11:e3:6f:4c:86:2b:37:26:
8c:46:e9:a3:27:c7:30:7e:21:15:1b:42:56:d9:c3:
df:10:b0:47:55:b7:e9:97:ff:c4:c8:19:f6:49:a9:
4e:1a:4b:52:81:ac:63:36:a0:3b:91:1a:e3:56:f2:
f0:e5:33:d2:41:10:7d:63:05:19:f4:d2:39:91:a0:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:43:91:A5:21:F5:6C:D5:13:29:B5:67:F1:A5:88:9F:34:55:6F:F3
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/lUORpSH1bNUTKbVn8aWInzRVb_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.24.0/21
46.39.224.0/19
62.122.208.0-62.122.212.255
62.182.72.0/21
79.172.64.0/18
81.200.0.0/19
82.199.96.0/19
84.51.64.0/18
90.155.128.0/17
91.123.16.0/20
91.189.240.0/21
91.207.170.0/23
94.102.112.0/20
95.143.208.0/20
109.225.192.0/18
109.229.128.0/19
134.0.96.0/20
176.97.128.0/21
185.55.0.0/22
185.60.44.0/22
188.68.96.0/19
195.234.56.0/24
213.193.0.0/19
IPv6:
2a02:2620::/32
Signature Algorithm: sha256WithRSAEncryption
16:7c:fe:19:d1:a9:c3:ee:3c:31:a7:c8:9d:13:f9:57:28:d7:
6b:56:2f:47:00:24:fe:c7:18:0e:9d:53:74:bb:60:17:9d:c7:
c5:84:56:fd:bf:4d:1e:73:11:39:31:da:81:76:7d:65:f5:2d:
ef:e7:8e:31:73:57:29:03:5a:58:c1:ae:96:72:6f:79:f2:04:
1c:d0:c8:c3:a4:fb:0d:9d:d9:fb:df:a4:04:a7:02:3b:7f:4c:
66:26:5a:89:b6:d9:da:f6:55:d3:a8:69:95:20:96:4e:1c:6f:
a9:6f:6b:86:35:78:74:c6:07:24:6e:86:80:6c:7c:a5:44:1a:
9c:73:14:71:1d:34:59:bd:70:44:51:18:ce:ca:0d:35:2c:d3:
83:b2:16:d1:3c:be:f6:c0:5e:14:18:57:9f:43:22:95:86:61:
1c:50:ff:47:e4:7c:f9:24:09:f6:e8:d5:81:36:3e:6e:55:ee:
a7:4b:e6:f8:9b:ed:58:d2:58:47:19:98:23:cd:bd:a6:b3:d9:
73:4d:3a:fc:ea:eb:40:26:8d:d2:33:24:a6:f7:1a:eb:77:d5:
9a:f4:3a:81:c0:5a:3e:05:9e:3c:8f:db:0a:cd:99:f2:72:f2:
0c:36:ef:4a:4d:f9:0c:6d:e6:b5:33:1e:8c:26:71:99:5a:d8:
00:9b:e1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:03:08 2025 by rpki-client