Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/1-LLRV4Lws5RBfk_IOBWyS08PdhY.roa
File: 1-LLRV4Lws5RBfk_IOBWyS08PdhY.roa (raw, json)
Hash identifier: w2Nu5EYLge3T/hRnhBjIuPbqdFqlZcs61kedmEN0JbA=
Subject key identifier: F8:B2:D1:57:82:F0:B3:94:41:7E:4F:C8:38:15:B2:4B:4F:0F:76:16
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 01942521B0816C4F1A3DD08D2E095642FF24
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/1-LLRV4Lws5RBfk_IOBWyS08PdhY.roa
Signing time: Thu 02 Jan 2025 03:49:12 +0000
ROA not before: Thu 02 Jan 2025 03:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212286
IP address blocks: 45.87.128.0/23 maxlen: 23
45.91.73.0/24 maxlen: 24
45.128.80.0/22 maxlen: 22
45.131.216.0/22 maxlen: 22
45.132.164.0/22 maxlen: 22
45.138.248.0/22 maxlen: 22
45.145.136.0/22 maxlen: 22
45.153.36.0/22 maxlen: 22
45.154.148.0/22 maxlen: 22
193.17.224.0/24 maxlen: 24
193.17.231.0/24 maxlen: 24
193.17.253.0/24 maxlen: 24
193.17.255.0/24 maxlen: 24
212.102.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 21:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b0:81:6c:4f:1a:3d:d0:8d:2e:09:56:42:ff:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: Jan 2 03:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8b2d15782f0b394417e4fc83815b24b4f0f7616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:f5:95:1f:51:16:48:96:c2:30:15:ac:b3:
03:df:4a:57:d4:85:30:db:af:7c:c9:25:79:08:e5:
91:64:2e:45:a6:92:f7:30:ef:ff:fb:69:3f:19:40:
de:45:8c:30:70:7b:61:46:cd:d3:cb:a6:0b:f5:fe:
5d:44:cf:9f:4b:57:48:00:5b:f0:24:60:1c:6a:7f:
e5:39:32:1d:e9:25:41:ef:76:a9:7d:58:10:fb:ac:
99:39:4d:0f:2a:a9:31:32:41:75:58:70:29:72:90:
1f:36:6c:1e:0d:c6:1b:c6:75:a9:f6:b4:32:f7:e9:
11:a3:ad:35:bf:ab:d7:31:e0:6a:80:16:6d:d2:d0:
da:4e:75:f0:3a:2f:90:d1:ba:a5:87:c4:c4:d5:1d:
c2:c6:95:20:f1:cb:dc:94:8c:4b:ef:23:c0:b1:12:
5b:d0:fe:93:c7:76:4a:49:eb:27:79:b7:19:04:35:
d2:f0:6a:28:da:9f:64:f8:78:4a:81:ce:19:ca:b7:
e3:02:2d:3d:94:70:5b:be:a9:13:e9:77:7c:79:cb:
29:90:20:2c:0a:28:61:22:10:ee:27:6d:f6:bb:52:
81:18:ad:43:42:67:25:0b:31:c7:52:b3:10:28:78:
a3:39:d8:8a:1d:96:ae:12:15:04:8b:2e:ff:cb:75:
e8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B2:D1:57:82:F0:B3:94:41:7E:4F:C8:38:15:B2:4B:4F:0F:76:16
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/1-LLRV4Lws5RBfk_IOBWyS08PdhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.128.0/23
45.91.73.0/24
45.128.80.0/22
45.131.216.0/22
45.132.164.0/22
45.138.248.0/22
45.145.136.0/22
45.153.36.0/22
45.154.148.0/22
193.17.224.0/24
193.17.231.0/24
193.17.253.0/24
193.17.255.0/24
212.102.124.0/24
Signature Algorithm: sha256WithRSAEncryption
30:04:58:de:ae:87:aa:6a:92:4a:b1:6f:3b:b7:bc:b0:d6:3d:
9c:24:da:5d:bb:94:13:8b:c9:aa:40:56:72:82:17:46:43:c9:
2d:0e:f8:14:a3:f6:49:97:b0:ec:bf:97:fc:93:2e:bd:30:0f:
43:75:6d:11:b8:ab:3d:80:c8:0c:5c:a9:52:fc:00:28:07:ad:
83:9c:e1:a3:f2:9a:76:a0:ca:6c:14:aa:61:59:1c:08:d6:98:
eb:91:e9:84:fd:f7:65:17:0f:45:62:fd:09:56:0f:c9:e0:47:
e2:18:7e:12:bf:6b:c6:65:ed:ad:cd:92:ba:de:c8:d6:5a:11:
e4:fd:41:a0:e8:5e:0e:f4:52:74:aa:ec:b8:82:c0:18:49:98:
8b:6e:ee:6e:43:a4:2f:f7:21:1f:b2:86:c4:3e:50:b6:c5:c1:
37:80:6b:74:1f:68:80:47:f8:2d:51:77:a3:fb:3a:aa:f9:a1:
60:fc:53:c0:bb:da:df:ec:01:aa:d0:3a:de:95:53:02:41:25:
c8:c5:9f:1d:1d:7b:80:3a:99:b4:aa:e8:82:3a:ba:1a:6b:7e:
98:a8:60:c0:13:df:89:f0:da:c2:cc:76:fe:2d:a9:11:2a:6f:
56:a7:32:19:a0:22:29:ce:1e:16:94:4e:4b:fd:b8:3b:97:26:
aa:df:dc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:40:19 2025 by rpki-client