Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/Lc5geUj98G2_Mvp-qocqQAAy33U.roa
File: Lc5geUj98G2_Mvp-qocqQAAy33U.roa (raw, json)
Hash identifier: +rLFnfW32zk8VL6aP623rgYb+e89ZAhBaQG5DejRNXg=
Subject key identifier: 2D:CE:60:79:48:FD:F0:6D:BF:32:FA:7E:AA:87:2A:40:00:32:DF:75
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 018E1D5BD47014B8C82235695F158754A24A
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/Lc5geUj98G2_Mvp-qocqQAAy33U.roa
Signing time: Fri 08 Mar 2024 09:19:01 +0000
ROA not before: Fri 08 Mar 2024 09:19:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25540
IP address blocks: 45.81.212.0/22 maxlen: 22
77.81.49.0/24 maxlen: 24
89.37.107.0/24 maxlen: 24
93.114.176.0/22 maxlen: 22
94.177.28.0/24 maxlen: 24
94.177.144.0/24 maxlen: 24
130.93.0.0/17 maxlen: 17
130.93.128.0/18 maxlen: 22
185.9.248.0/22 maxlen: 22
185.12.0.0/22 maxlen: 22
185.120.176.0/22 maxlen: 22
185.122.160.0/22 maxlen: 22
185.133.128.0/22 maxlen: 22
185.137.72.0/22 maxlen: 22
185.153.172.0/22 maxlen: 22
193.84.89.0/24 maxlen: 24
195.68.224.0/22 maxlen: 22
2a02:ec00::/29 maxlen: 29
2a0e:4180::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 18 Mar 2024 15:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1d:5b:d4:70:14:b8:c8:22:35:69:5f:15:87:54:a2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Mar 8 09:19:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dce607948fdf06dbf32fa7eaa872a400032df75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:ec:22:15:db:74:4d:e6:8d:0a:54:b7:11:
46:00:b1:d5:cb:9f:09:4d:7e:59:ed:6b:fb:6b:00:
e8:80:a4:e2:ec:75:f4:db:fb:23:5f:b5:fc:e7:53:
9c:84:df:67:54:16:78:32:54:35:41:62:45:82:46:
fd:f1:1d:83:f0:92:e6:24:16:4e:06:77:ca:a8:b8:
f9:39:c1:f0:a6:db:fe:b4:ba:a5:54:d9:a0:4e:56:
67:ee:9e:42:42:17:be:12:1b:7f:5f:da:c0:cc:41:
c2:5f:79:a6:fa:0c:0c:51:7e:9a:79:b4:0a:f9:63:
91:9f:3f:15:51:1f:4e:e9:78:d7:24:23:e6:cc:e6:
4d:45:4e:ab:4e:9b:8f:dc:ac:ed:f1:b8:96:c1:e2:
da:38:9e:ac:1c:41:49:dd:d9:4d:34:7b:73:17:a9:
87:01:74:eb:3b:00:da:f6:49:ed:ec:8a:7a:86:9a:
83:ed:d2:5b:52:7c:bf:f8:fd:a2:93:fc:51:5a:ae:
a4:6a:7f:74:09:e0:0d:9d:85:67:20:57:98:4d:29:
04:8d:c8:3d:4f:04:77:87:51:fa:01:d3:d6:35:64:
a0:cc:6a:73:13:b9:9e:5b:d9:86:bb:4b:3b:31:af:
30:e0:8b:26:98:63:9d:c3:48:4c:b8:a2:46:45:1d:
fd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CE:60:79:48:FD:F0:6D:BF:32:FA:7E:AA:87:2A:40:00:32:DF:75
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/Lc5geUj98G2_Mvp-qocqQAAy33U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.212.0/22
77.81.49.0/24
89.37.107.0/24
93.114.176.0/22
94.177.28.0/24
94.177.144.0/24
130.93.0.0-130.93.191.255
185.9.248.0/22
185.12.0.0/22
185.120.176.0/22
185.122.160.0/22
185.133.128.0/22
185.137.72.0/22
185.153.172.0/22
193.84.89.0/24
195.68.224.0/22
IPv6:
2a02:ec00::/29
2a0e:4180::/29
Signature Algorithm: sha256WithRSAEncryption
8a:24:dd:87:32:49:ac:6b:b0:30:b9:87:0d:34:1c:29:3e:92:
af:46:45:9b:3f:9a:ed:95:14:1a:76:d9:94:42:87:43:55:09:
e2:b0:87:17:8b:50:5c:1b:6a:55:f1:91:d0:51:1b:eb:af:c9:
61:41:0b:8c:84:ad:f0:30:b0:2c:57:90:9a:d7:23:8e:a3:63:
6f:9c:fa:c5:6e:f3:c3:38:39:49:d0:60:ab:a2:32:a2:5c:d5:
6a:5f:2e:67:3c:2a:38:96:4d:cb:37:0e:a4:39:00:a6:3e:97:
74:4c:80:88:6d:9f:00:d0:be:07:3c:0b:69:98:4c:8d:31:bd:
9b:4c:6d:ee:19:54:29:61:5f:64:91:21:9b:95:e3:9c:c9:0b:
30:44:34:db:ee:dd:61:e3:47:06:4d:9a:07:ca:03:52:be:fa:
01:37:25:0a:34:62:3d:8b:43:51:18:27:46:50:13:6b:ae:11:
fa:4b:b5:36:4e:35:f2:c5:9b:65:7c:1f:f1:67:21:98:d2:b1:
8e:59:53:10:48:73:c8:da:2c:ab:1a:f7:d8:c0:f6:9b:3a:19:
b4:ef:1b:cd:fd:94:95:af:d4:e1:59:98:6b:7d:0f:c2:bf:1c:
3b:4e:cc:28:bf:2d:3d:d1:6d:1e:1a:4e:13:1c:71:87:89:38:
73:eb:8c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:10 2024 by rpki-client on console-ams.rpki-client.org