Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/s30YdqGrDSRtMOy5pCotpOG_lng.roa
File: s30YdqGrDSRtMOy5pCotpOG_lng.roa (raw, json)
Hash identifier: GHCQV2EuxSKjdj3i8BauxHvy2HOTg7aDngmR9IAXjAw=
Subject key identifier: B3:7D:18:76:A1:AB:0D:24:6D:30:EC:B9:A4:2A:2D:A4:E1:BF:96:78
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 0186FE501933B4DE1AD4150E3A227E39D86C
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/s30YdqGrDSRtMOy5pCotpOG_lng.roa
Signing time: Mon 20 Mar 2023 09:18:27 +0000
ROA not before: Mon 20 Mar 2023 09:18:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48951
IP address blocks: 93.122.80.0/22 maxlen: 22
93.122.84.0/22 maxlen: 22
81.7.208.0/22 maxlen: 22
81.7.208.0/21 maxlen: 21
93.122.88.0/22 maxlen: 22
93.122.92.0/22 maxlen: 22
81.7.216.0/21 maxlen: 21
81.7.216.0/22 maxlen: 22
81.7.220.0/22 maxlen: 22
93.122.28.0/22 maxlen: 22
93.122.32.0/22 maxlen: 22
93.122.36.0/22 maxlen: 22
93.122.44.0/22 maxlen: 22
93.122.40.0/22 maxlen: 22
93.122.48.0/22 maxlen: 22
93.122.52.0/22 maxlen: 22
93.122.56.0/22 maxlen: 22
93.122.60.0/22 maxlen: 22
93.122.64.0/22 maxlen: 22
81.7.192.0/19 maxlen: 19
93.122.68.0/22 maxlen: 22
93.122.72.0/21 maxlen: 21
82.210.192.0/18 maxlen: 18
82.210.224.0/19 maxlen: 19
93.122.16.0/22 maxlen: 22
93.122.20.0/22 maxlen: 22
93.122.24.0/22 maxlen: 22
78.140.64.0/24 maxlen: 24
78.140.64.0/21 maxlen: 21
82.210.254.0/24 maxlen: 24
78.140.65.0/24 maxlen: 24
78.140.64.0/18 maxlen: 18
78.140.67.0/24 maxlen: 24
82.210.255.0/24 maxlen: 24
78.140.66.0/24 maxlen: 24
78.140.68.0/24 maxlen: 24
78.140.72.0/22 maxlen: 22
78.140.72.0/24 maxlen: 24
78.140.76.0/24 maxlen: 24
78.140.76.0/22 maxlen: 22
78.140.81.0/24 maxlen: 24
78.140.80.0/23 maxlen: 23
78.140.80.0/24 maxlen: 24
2a01:667::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 20 Mar 2023 10:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:50:19:33:b4:de:1a:d4:15:0e:3a:22:7e:39:d8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Mar 20 09:18:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b37d1876a1ab0d246d30ecb9a42a2da4e1bf9678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c2:0e:32:dd:a5:e2:75:22:5b:a7:cd:b5:b1:
ff:ce:54:cf:47:5d:9a:b0:65:6c:b0:75:98:7a:56:
80:ca:fa:47:0e:eb:bf:b6:6f:f3:f8:36:b0:0f:3f:
20:88:9a:8a:bb:13:fc:f5:9c:b9:3d:b4:b0:ac:75:
56:56:67:0d:e9:91:89:a5:0a:6b:c0:bb:92:c0:c3:
99:b3:6b:32:9b:18:4e:d0:e7:26:34:0f:0d:77:49:
14:0c:c9:30:c9:3b:ba:d9:b5:4b:32:05:a3:4a:09:
23:39:7d:56:d7:af:ba:a4:16:70:49:dd:c6:5d:fb:
e0:ee:50:c6:ef:42:1a:c7:19:e0:33:09:f5:78:7e:
fc:c5:99:07:fb:78:a4:1e:db:84:ca:dc:dd:a7:f4:
58:6e:49:8f:4f:82:b9:85:2a:3c:8a:76:a3:6e:31:
c5:38:69:a6:74:a7:fd:52:e6:9f:b6:8c:e2:06:2e:
ff:c1:93:97:80:9d:0b:dd:fd:23:f9:fe:8c:b3:0a:
75:62:70:cc:0f:aa:a8:64:1a:60:9f:96:72:34:49:
fe:0b:7b:74:b2:8b:1f:01:aa:e2:00:aa:18:91:4e:
db:d1:70:32:33:c4:42:c7:77:66:3b:ab:0d:e0:24:
88:e8:f9:78:95:32:36:22:8a:27:c2:ef:ca:a4:e6:
18:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7D:18:76:A1:AB:0D:24:6D:30:EC:B9:A4:2A:2D:A4:E1:BF:96:78
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/s30YdqGrDSRtMOy5pCotpOG_lng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.140.64.0/18
81.7.192.0/19
82.210.192.0/18
93.122.16.0-93.122.95.255
IPv6:
2a01:667::/40
Signature Algorithm: sha256WithRSAEncryption
d0:df:31:bf:af:56:92:19:ed:9f:45:7b:f9:80:ff:49:7f:75:
12:aa:28:ad:f7:1d:6e:85:33:46:9c:b8:c7:f6:fc:d4:81:17:
36:72:5d:8f:3d:43:1c:62:16:c8:d2:59:7b:c9:87:49:81:67:
3e:b0:56:5b:ed:33:2a:b8:d8:ea:f5:7a:9f:19:56:9a:1f:f4:
9d:78:51:11:78:1c:e4:04:7a:f1:45:01:dd:a3:a1:9b:ff:dd:
43:7b:32:44:b6:1a:c1:c9:d5:e5:04:6a:b5:75:e2:61:44:cc:
4c:a9:c7:b4:07:d7:2f:d1:f2:e1:93:d0:7d:39:c0:91:1e:86:
81:81:bb:cf:79:c7:64:d7:57:a2:ae:33:48:52:98:ee:83:6e:
3e:3e:7c:a6:f3:c2:68:70:f6:b0:d0:e4:b8:f1:c4:0c:95:4c:
07:ed:76:5e:9f:94:f3:1e:20:3b:14:b5:ee:73:b0:25:dc:de:
d1:f2:55:78:7f:dd:4b:94:e3:e3:f9:27:98:6b:76:41:3f:64:
c5:c3:dc:d9:e6:6f:66:f6:80:1a:59:10:98:f7:24:65:a1:10:
98:36:02:57:e1:c8:43:a9:10:14:80:12:d7:c6:bf:26:7f:55:
91:67:8e:68:af:1e:5c:fa:83:f1:90:66:4d:c5:5b:eb:4d:b0:
90:0e:92:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-fra.rpki-client.org