Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LzNuzpM-_h0HD15HtNkZ6Tw3gtE.roa
File: LzNuzpM-_h0HD15HtNkZ6Tw3gtE.roa (raw, json)
Hash identifier: EIZHxsPuxXXdiF6wR9ppNIr3tOUlp3q+LI1RCo42RaY=
Subject key identifier: 2F:33:6E:CE:93:3E:FE:1D:07:0F:5E:47:B4:D9:19:E9:3C:37:82:D1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190BC60BCECA4B8618FA4F6A44050416D91
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LzNuzpM-_h0HD15HtNkZ6Tw3gtE.roa
Signing time: Tue 16 Jul 2024 16:29:34 +0000
ROA not before: Tue 16 Jul 2024 16:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 80.240.88.0/21 maxlen: 24
82.152.12.0/24 maxlen: 24
82.152.174.0/23 maxlen: 23
82.153.208.0/22 maxlen: 22
82.163.19.0/24 maxlen: 24
82.163.24.0/21 maxlen: 24
89.213.58.0/24 maxlen: 24
89.213.60.0/23 maxlen: 24
89.213.108.0/23 maxlen: 24
89.213.110.0/24 maxlen: 24
89.213.122.0/24 maxlen: 24
89.213.126.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.147.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.194.0/23 maxlen: 24
89.213.198.0/23 maxlen: 24
89.213.200.0/23 maxlen: 24
89.213.202.0/23 maxlen: 24
89.213.204.0/23 maxlen: 24
89.213.240.0/23 maxlen: 24
89.213.250.0/24 maxlen: 24
213.210.16.0/24 maxlen: 24
213.210.18.0/24 maxlen: 24
213.210.33.0/24 maxlen: 24
213.210.51.0/24 maxlen: 24
213.218.220.0/24 maxlen: 24
217.144.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 19:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bc:60:bc:ec:a4:b8:61:8f:a4:f6:a4:40:50:41:6d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 16 16:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f336ece933efe1d070f5e47b4d919e93c3782d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:f2:1d:3e:6b:1f:4e:6b:3b:0f:73:e8:11:
7a:39:83:0b:4d:1d:a3:e0:b1:1e:c6:9f:1e:8a:23:
f4:91:2e:f7:bc:86:78:b6:f3:f5:2e:8b:b8:9e:fd:
38:cb:23:48:69:17:7e:83:d2:82:7e:93:f7:ee:96:
8b:75:3b:38:da:2b:36:1a:91:ca:96:cc:17:b0:bc:
b3:24:22:17:b0:8e:4d:bf:9b:41:0d:6f:85:7d:bd:
a1:d7:eb:61:1a:4a:c7:f1:a6:21:af:ed:9e:b1:e3:
8d:84:1f:f4:2c:d6:d6:a7:33:92:3f:e7:e6:69:57:
52:f2:50:e2:53:ca:28:13:80:64:b8:f4:d9:33:55:
c1:91:28:81:77:6d:71:5c:24:c0:95:2d:06:9e:04:
ad:7f:ba:89:c2:a0:33:34:d5:cf:52:b6:03:a8:65:
a8:93:b2:da:6b:e0:d8:ba:a2:72:84:cb:5f:06:33:
2a:23:6f:06:32:39:bd:b6:a8:c0:90:26:fd:80:61:
b0:37:fd:55:2c:e8:d6:82:cc:25:99:e9:28:8c:7c:
c3:c3:30:dc:18:5c:52:c3:7f:c9:67:7f:3a:76:9e:
c5:aa:c0:9c:52:76:5d:f2:f4:c0:86:3e:bb:2f:a1:
97:79:34:80:3a:c1:e3:38:73:1e:a2:7f:e9:5f:3e:
03:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:33:6E:CE:93:3E:FE:1D:07:0F:5E:47:B4:D9:19:E9:3C:37:82:D1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LzNuzpM-_h0HD15HtNkZ6Tw3gtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.88.0/21
82.152.12.0/24
82.152.174.0/23
82.153.208.0/22
82.163.19.0/24
82.163.24.0/21
89.213.58.0/24
89.213.60.0/23
89.213.108.0-89.213.110.255
89.213.122.0/24
89.213.126.0/24
89.213.143.0/24
89.213.147.0/24
89.213.181.0/24
89.213.194.0/23
89.213.198.0-89.213.205.255
89.213.240.0/23
89.213.250.0/24
213.210.16.0/24
213.210.18.0/24
213.210.33.0/24
213.210.51.0/24
213.218.220.0/24
217.144.151.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a4:17:2f:6c:ba:2d:f9:33:4b:6d:e8:23:e1:c8:58:4e:0e:
88:6c:28:5f:36:3e:05:11:a4:84:66:ef:fb:59:e0:dd:b3:92:
62:b5:ac:d1:a7:41:3c:e0:aa:77:31:2d:20:25:90:73:0f:fc:
72:82:dd:a7:d1:be:e5:69:32:2d:37:d9:cc:98:1a:6f:2c:a2:
0b:40:46:e2:fb:38:88:d7:d9:a5:80:ee:17:39:20:32:71:05:
a6:3b:5c:07:65:b2:a7:a7:64:6f:9f:de:68:81:6e:2b:75:51:
72:f7:80:e9:07:ca:51:bf:ba:62:7d:05:80:52:95:fa:a2:25:
94:7e:44:30:a1:c6:b5:59:97:fe:87:16:3c:fb:bf:a0:5f:2f:
bd:af:71:df:33:e8:d6:8b:55:92:ab:76:04:bd:59:f8:80:5d:
fb:8e:6a:f3:d2:cb:c5:2f:1d:c6:c0:1e:14:38:b1:0b:c0:5f:
bc:95:b9:39:47:9e:b6:26:d2:97:cc:42:51:a3:a9:57:48:70:
12:27:77:61:81:63:2c:1d:58:67:09:26:10:99:aa:70:67:20:
5a:f0:6d:56:68:a1:d6:fd:52:a1:70:64:7f:d2:32:d5:47:b6:
53:ce:1e:40:9b:f7:09:49:61:b2:14:85:e5:79:d5:ef:3e:07:
73:ec:ae:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:19:06 2025 by rpki-client