Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/LK3Kcz94n7e-VUi2Q_1XQgLi-Tc.roa
File: LK3Kcz94n7e-VUi2Q_1XQgLi-Tc.roa (raw, json)
Hash identifier: TGYHr2DmuMIU8sNdPasFH/5zviOtWTZY9cMJiwvddPg=
Subject key identifier: 2C:AD:CA:73:3F:78:9F:B7:BE:55:48:B6:43:FD:57:42:02:E2:F9:37
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019271B75075E6E14C3FD77965428A86E137
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/LK3Kcz94n7e-VUi2Q_1XQgLi-Tc.roa
Signing time: Wed 09 Oct 2024 14:38:12 +0000
ROA not before: Wed 09 Oct 2024 14:38:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 95.214.38.0/24 maxlen: 24
95.214.39.0/24 maxlen: 24
212.87.201.0/24 maxlen: 24
212.87.202.0/24 maxlen: 24
212.87.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 07:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:b7:50:75:e6:e1:4c:3f:d7:79:65:42:8a:86:e1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Oct 9 14:38:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cadca733f789fb7be5548b643fd574202e2f937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2b:4b:26:6d:16:77:b3:a8:0e:bb:97:af:ab:
7c:73:d6:61:aa:82:0d:9c:0c:96:ad:1f:d9:9c:2a:
ba:39:93:a5:22:e2:8b:b0:1c:7c:38:f1:0b:93:60:
78:18:7a:1c:39:bc:86:3d:23:c0:d5:66:a2:77:04:
c7:92:b6:de:cf:be:5f:c1:46:f1:46:79:08:34:c9:
9b:3a:68:ab:35:fb:29:24:b7:27:49:11:22:eb:dc:
b1:a8:bb:24:62:95:75:18:d5:e3:8b:9d:0a:3f:95:
a3:1b:49:78:43:c5:05:08:d0:2c:cd:de:1f:8a:4b:
1d:91:9c:1d:79:96:1a:20:77:06:19:92:14:ef:e7:
af:cb:e1:fd:1e:ec:7e:f9:55:58:11:da:8c:46:b5:
af:86:59:fa:66:31:11:38:9b:36:d9:fa:1b:69:d5:
28:f8:f9:f7:bf:73:d6:5f:d3:94:fd:e9:d9:4d:60:
8f:fe:e9:3c:6c:20:4c:eb:9d:0e:c7:be:92:01:b0:
5d:bf:2f:52:34:db:be:af:6e:22:78:ea:9a:10:bd:
b4:34:12:a1:8e:86:00:2b:0f:d0:68:a9:b6:9a:73:
cb:a0:75:9a:1b:60:9d:1e:f0:28:e7:07:e7:8a:24:
09:3f:e6:78:64:fe:fe:fb:fc:1c:40:c5:be:33:9d:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AD:CA:73:3F:78:9F:B7:BE:55:48:B6:43:FD:57:42:02:E2:F9:37
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/LK3Kcz94n7e-VUi2Q_1XQgLi-Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.38.0/23
212.87.201.0-212.87.203.255
Signature Algorithm: sha256WithRSAEncryption
76:0b:df:07:4e:86:44:13:3b:c7:6d:82:13:de:8d:57:b2:5c:
ef:1a:6b:f0:50:75:71:34:5d:18:b4:c4:90:7f:d7:a2:e9:95:
28:ba:76:74:7e:ee:38:b1:80:91:8b:8d:e7:23:b0:b0:5d:4a:
29:4f:86:c8:43:44:6b:12:0d:79:bd:fd:2a:1b:02:8a:20:5c:
93:af:93:4a:40:17:e5:a6:a9:95:2b:8d:8a:a1:12:a4:11:13:
df:11:45:1e:79:21:93:f9:7f:a1:67:8b:9a:f3:1b:5a:29:ee:
d1:8a:68:f4:31:e0:5f:44:8e:e9:24:34:1d:93:3e:18:51:f7:
c4:78:2d:d7:56:74:7d:85:b1:80:62:2f:c2:61:b5:35:1e:ff:
dc:66:a3:74:9d:38:f1:2d:56:c6:f4:c2:bd:f6:2d:db:f7:46:
dd:6d:88:23:ec:22:8e:cc:bb:d5:cf:56:8c:53:1e:2f:2a:67:
8e:1c:80:5b:1d:d8:54:19:90:46:02:15:0f:c2:ed:1f:cc:1c:
ae:c1:94:af:ce:41:d8:e0:a2:58:06:80:c9:47:40:4f:4f:65:
35:5d:bb:8e:42:9c:32:cd:db:ef:56:a9:ea:26:ed:96:1a:e3:
83:40:e2:26:e1:e3:24:49:86:cf:06:dd:0a:1b:9b:b3:12:53:
02:08:3d:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:40 2025 by rpki-client