Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/lltsg-4i7XkVWIR8F_QRiU-7iiA.roa
File: lltsg-4i7XkVWIR8F_QRiU-7iiA.roa (raw, json)
Hash identifier: WEafMBPg5ofQy7mgM7otkdv7M2uIx/LaR1Fznkfn+MI=
Subject key identifier: 96:5B:6C:83:EE:22:ED:79:15:58:84:7C:17:F4:11:89:4F:BB:8A:20
Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial: 0190E4FA42FD374C6741CC1DF64C4D6B4962
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/lltsg-4i7XkVWIR8F_QRiU-7iiA.roa
Signing time: Wed 24 Jul 2024 13:42:04 +0000
ROA not before: Wed 24 Jul 2024 13:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43594
IP address blocks: 95.215.124.0/22 maxlen: 22
95.215.124.0/24 maxlen: 24
95.215.125.0/24 maxlen: 24
95.215.126.0/24 maxlen: 24
95.215.127.0/24 maxlen: 24
185.184.232.0/22 maxlen: 22
185.184.232.0/24 maxlen: 24
185.184.233.0/24 maxlen: 24
185.184.234.0/24 maxlen: 24
185.184.235.0/24 maxlen: 24
2a0b:4380::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 10 Nov 2024 09:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e4:fa:42:fd:37:4c:67:41:cc:1d:f6:4c:4d:6b:49:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
Validity
Not Before: Jul 24 13:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=965b6c83ee22ed791558847c17f411894fbb8a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4f:ed:b8:e0:93:5c:cc:f8:b2:e8:4c:c9:c0:
eb:2f:d7:fe:f3:e7:44:65:58:b7:cf:08:06:33:06:
da:79:57:02:dd:b2:09:82:22:5b:eb:32:ef:e0:27:
3b:ee:4b:1e:da:f1:32:f8:c2:f5:27:d3:64:e1:28:
cc:3f:20:7e:9d:91:2c:ef:72:70:77:1f:12:f5:07:
74:04:10:07:ed:46:e7:07:db:55:20:e5:98:15:e2:
ac:85:4e:5b:e5:a6:6c:46:b9:84:e3:3f:5f:e1:ac:
16:21:40:8b:93:e6:86:10:1a:b4:3c:f0:82:fd:16:
89:e1:5b:71:cb:05:a9:58:33:62:d3:e4:01:d8:f5:
15:ad:01:7d:c5:b4:8e:61:58:fc:f9:f5:77:d1:51:
cb:18:2b:c1:60:54:c0:4f:88:85:d4:4c:a4:62:24:
9b:8a:a9:54:9e:48:57:6a:44:05:c9:01:81:c8:a1:
54:a9:c6:a5:af:3a:b1:b9:a9:44:68:82:02:05:02:
b1:42:72:62:1d:4a:96:33:ed:b4:e7:6e:60:32:d6:
e4:94:26:8b:5b:c3:9c:75:06:18:14:ee:e6:55:2d:
f2:70:ab:18:11:c3:5b:74:56:fb:f2:e0:57:e1:f0:
1d:4f:e1:e3:dd:7b:d6:d5:61:16:e9:5d:ed:77:72:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5B:6C:83:EE:22:ED:79:15:58:84:7C:17:F4:11:89:4F:BB:8A:20
X509v3 Authority Key Identifier:
keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/lltsg-4i7XkVWIR8F_QRiU-7iiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.124.0/22
185.184.232.0/22
IPv6:
2a0b:4380::/32
Signature Algorithm: sha256WithRSAEncryption
35:fb:15:cb:d6:ab:8a:ae:89:b2:d4:12:7d:fc:14:20:12:2a:
e4:2d:40:ac:83:70:6e:4f:91:23:42:8d:70:c0:7c:03:8c:b5:
a6:af:49:86:b7:02:a8:da:77:6b:16:9e:95:44:c9:1e:82:20:
63:5d:a2:14:c2:74:c2:33:a6:d8:07:64:c3:6c:be:d6:dc:4d:
31:14:60:ea:40:28:48:a7:06:20:7f:b3:59:6b:96:b2:e9:3b:
a5:fc:0f:56:fd:9f:49:b2:d1:07:63:2a:50:00:89:54:6f:9b:
27:75:24:81:ec:08:b5:9d:b7:fa:90:a4:a3:31:aa:aa:b7:95:
0d:28:6b:1f:ab:3b:4e:89:6a:70:fb:b4:32:c3:65:0d:c8:49:
55:7d:8c:62:4a:be:ec:cf:8c:d7:cf:fe:61:90:d6:59:df:45:
f8:89:6d:02:7d:13:13:82:60:b9:f9:91:f3:f0:7a:4d:00:34:
8f:3f:60:33:1d:cf:59:9e:5e:14:56:27:3d:fa:21:13:2f:d7:
e3:de:ba:43:db:ac:10:e1:2d:4f:a7:65:46:cd:e6:ad:c2:db:
17:a1:b4:f5:1e:58:7b:d3:2b:90:fd:5e:2d:db:1b:87:18:99:
13:69:9e:8a:ed:15:a6:2a:d6:76:fc:1f:f0:48:85:d8:a8:03:
0e:94:31:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:27 2025 by rpki-client