Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Lv6yTG89yV_i9xEEWS4JI7hgChw.roa
File: Lv6yTG89yV_i9xEEWS4JI7hgChw.roa (raw, json)
Hash identifier: P8uaQxDBNYeJEYVoekTkGNl2MOovmuBb8822NTb57/4=
Subject key identifier: 2E:FE:B2:4C:6F:3D:C9:5F:E2:F7:11:04:59:2E:09:23:B8:60:0A:1C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0193D9130BD0E67E449215CB2B920FABAEE0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Lv6yTG89yV_i9xEEWS4JI7hgChw.roa
Signing time: Wed 18 Dec 2024 09:22:04 +0000
ROA not before: Wed 18 Dec 2024 09:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61112
IP address blocks: 82.152.90.0/23 maxlen: 24
82.153.55.0/24 maxlen: 24
82.153.65.0/24 maxlen: 24
82.153.135.0/24 maxlen: 24
82.163.16.0/24 maxlen: 24
89.213.40.0/24 maxlen: 24
89.213.182.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.219.0/24 maxlen: 24
89.213.239.0/24 maxlen: 24
194.105.81.0/24 maxlen: 24
213.218.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:13:0b:d0:e6:7e:44:92:15:cb:2b:92:0f:ab:ae:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 18 09:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2efeb24c6f3dc95fe2f71104592e0923b8600a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:32:03:ac:04:71:e1:b4:d5:96:be:a6:6a:13:
3a:8d:5a:12:83:53:95:2c:47:a3:3f:a9:ec:8f:2a:
66:e1:ed:3e:2e:97:13:ea:0d:12:92:a8:72:ef:b7:
5f:bc:43:14:c0:b6:96:b9:62:5f:e7:2d:09:d6:8d:
b5:c8:d5:5f:1e:5b:15:a7:cd:9e:b7:75:2d:db:d3:
dd:fc:c9:8a:8f:56:a7:30:f2:ca:0f:ca:b0:25:f0:
27:c0:3c:0f:fa:23:55:cb:63:b0:6a:24:11:63:74:
28:4b:1b:6b:0a:2b:7d:1d:45:c1:c8:04:70:fd:52:
c1:ed:94:78:22:51:f1:a3:70:72:c2:63:e9:08:eb:
a1:ba:bd:2c:11:c7:23:d7:95:9e:7c:f1:a2:fa:52:
9f:dd:aa:88:29:64:f4:d4:28:53:ec:96:db:ea:45:
35:c0:ae:ff:74:07:66:02:8e:7b:fc:f9:0d:55:67:
09:5d:95:7c:5e:93:89:d7:58:f9:c8:bf:7d:72:0d:
da:1a:73:8b:65:fc:4e:de:71:25:cd:40:a3:60:34:
e3:24:58:18:3e:56:f5:7b:f9:1b:e5:52:a0:25:96:
c6:7c:46:ba:70:80:3d:45:90:d4:a7:b3:d5:ae:d0:
90:4e:87:60:e4:20:ef:60:74:78:76:3e:31:24:c5:
d1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FE:B2:4C:6F:3D:C9:5F:E2:F7:11:04:59:2E:09:23:B8:60:0A:1C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Lv6yTG89yV_i9xEEWS4JI7hgChw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.90.0/23
82.153.55.0/24
82.153.65.0/24
82.153.135.0/24
82.163.16.0/24
89.213.40.0/24
89.213.182.0/24
89.213.184.0/24
89.213.219.0/24
89.213.239.0/24
194.105.81.0/24
213.218.254.0/24
Signature Algorithm: sha256WithRSAEncryption
83:23:41:c3:47:d9:10:65:d2:0b:ed:b5:9b:4c:4c:5d:07:51:
2c:3a:c1:1c:cc:79:36:25:9c:e7:f0:7d:06:6b:32:6a:ce:b8:
bc:30:7c:fa:c7:e6:1d:4e:e3:af:13:32:5a:72:61:89:a4:32:
98:2d:fc:8b:40:fd:54:04:ac:6a:5e:77:30:81:27:49:37:df:
9e:fa:29:35:45:63:85:75:97:1b:ab:bb:1c:76:0c:f7:99:5d:
83:9c:8f:67:2b:68:83:8e:b3:84:06:cd:34:d2:00:ca:b1:4e:
a6:e8:24:c1:a5:96:0c:65:7d:f2:8e:61:a4:11:53:dd:d1:dd:
a0:70:2d:51:7d:49:e3:34:90:d3:81:17:2b:83:d9:2a:db:4b:
27:ae:d6:e7:cc:90:5d:45:39:4d:43:5a:6b:25:c1:2d:45:40:
3b:1c:61:36:9f:62:89:ce:46:78:8d:66:ae:da:b5:a1:6e:e6:
00:22:f7:ab:a9:20:65:2a:ec:a8:15:f1:25:bd:6d:0d:98:f7:
97:08:24:8c:2a:c7:59:d4:32:7e:f1:4b:2f:bb:c2:1a:1d:59:
5a:4b:2b:f4:35:0f:15:ab:eb:0d:c3:3d:0f:78:31:9a:8f:a4:
85:96:48:d0:61:a4:92:93:77:31:5f:c8:41:54:31:dd:60:c4:
03:ef:ff:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:04:27 2025 by rpki-client