Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/luxDrvkZVJ1qlIVII9TcdMBwtHA.roa
File: luxDrvkZVJ1qlIVII9TcdMBwtHA.roa (raw, json)
Hash identifier: Q62p7leRxc0w/bt4PBcfwAcI0a2ymVy16xmkhVQIDYk=
Subject key identifier: 96:EC:43:AE:F9:19:54:9D:6A:94:85:48:23:D4:DC:74:C0:70:B4:70
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018FD41DB5A424A337604D5B7DCBB246D0AC
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/luxDrvkZVJ1qlIVII9TcdMBwtHA.roa
Signing time: Sat 01 Jun 2024 14:04:27 +0000
ROA not before: Sat 01 Jun 2024 14:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 37.46.149.0/24 maxlen: 24
45.83.29.0/24 maxlen: 24
45.88.20.0/24 maxlen: 24
45.88.22.0/24 maxlen: 24
45.89.36.0/24 maxlen: 24
45.89.38.0/24 maxlen: 24
45.92.2.0/24 maxlen: 24
45.134.138.0/24 maxlen: 24
45.143.54.0/24 maxlen: 24
45.145.46.0/24 maxlen: 24
45.146.187.0/24 maxlen: 24
87.247.148.0/22 maxlen: 24
89.31.216.0/24 maxlen: 24
91.190.96.0/24 maxlen: 24
91.190.99.0/24 maxlen: 24
91.190.104.0/24 maxlen: 24
91.217.250.0/24 maxlen: 24
185.184.135.0/24 maxlen: 24
185.205.189.0/24 maxlen: 24
185.239.241.0/24 maxlen: 24
185.244.137.0/24 maxlen: 24
185.245.5.0/24 maxlen: 24
185.245.7.0/24 maxlen: 24
188.240.75.0/24 maxlen: 24
193.84.132.0/24 maxlen: 24
193.218.32.0/24 maxlen: 24
217.74.16.0/24 maxlen: 24
2a0b:64c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 09 Jun 2024 09:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d4:1d:b5:a4:24:a3:37:60:4d:5b:7d:cb:b2:46:d0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 1 14:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96ec43aef919549d6a94854823d4dc74c070b470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:94:02:14:8b:54:0f:07:25:e8:7b:81:d8:
c6:ae:9c:b8:a8:c4:82:65:d2:e1:7d:6d:46:3e:20:
6e:4c:41:70:83:b9:3a:c5:de:9a:92:7d:a8:ce:ca:
e6:9b:08:e9:4a:0c:81:b3:72:e4:6b:43:c8:0e:fc:
ac:09:7c:44:df:a1:7a:fc:b6:6a:53:93:10:f2:89:
b9:64:03:9a:72:6c:3e:71:9d:98:c3:95:42:28:1f:
bb:94:25:d0:ff:4b:11:ac:7d:9f:71:38:d1:df:0c:
ce:c0:f6:8e:33:55:16:29:c2:fa:b7:af:1f:25:e0:
90:2a:8b:e7:f9:8d:c7:f8:2b:14:dd:06:68:82:87:
98:ed:b8:a5:6f:fb:13:a2:45:9b:18:6a:3f:34:8e:
56:90:64:1b:1c:d0:8f:f7:2f:e7:fa:ad:50:49:2c:
5d:df:81:fc:91:a3:a3:15:30:d1:ea:ac:25:af:3b:
8e:87:4b:12:f7:92:c1:ce:a4:ae:74:c0:77:5e:b0:
73:06:77:9c:ef:8b:69:ca:bc:f3:f5:8f:d8:6f:b8:
8c:11:8e:c6:d3:02:57:ba:68:4f:81:e1:1e:3e:9c:
9b:2f:e6:e1:2f:b7:49:53:1b:2c:ce:40:57:25:e6:
07:ab:60:2b:59:33:c2:64:23:c3:b4:eb:a8:0c:a0:
76:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EC:43:AE:F9:19:54:9D:6A:94:85:48:23:D4:DC:74:C0:70:B4:70
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/luxDrvkZVJ1qlIVII9TcdMBwtHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.149.0/24
45.83.29.0/24
45.88.20.0/24
45.88.22.0/24
45.89.36.0/24
45.89.38.0/24
45.92.2.0/24
45.134.138.0/24
45.143.54.0/24
45.145.46.0/24
45.146.187.0/24
87.247.148.0/22
89.31.216.0/24
91.190.96.0/24
91.190.99.0/24
91.190.104.0/24
91.217.250.0/24
185.184.135.0/24
185.205.189.0/24
185.239.241.0/24
185.244.137.0/24
185.245.5.0/24
185.245.7.0/24
188.240.75.0/24
193.84.132.0/24
193.218.32.0/24
217.74.16.0/24
IPv6:
2a0b:64c1::/32
Signature Algorithm: sha256WithRSAEncryption
0f:a4:51:2c:32:29:3f:44:aa:ca:a6:60:c2:fb:f3:2a:0c:29:
3b:91:77:42:66:e8:ac:40:54:80:86:d9:5c:53:e6:69:05:2a:
b0:46:14:1e:db:70:eb:71:2d:8e:42:d3:fd:ce:b2:bb:85:67:
00:d1:e7:c8:47:2e:f7:9c:51:02:60:51:13:39:1f:30:0e:57:
b0:3c:b2:e2:6a:b8:9e:40:34:79:ca:d9:68:24:a3:30:6c:87:
fd:b1:5c:5e:09:e9:12:72:06:42:86:37:83:76:ad:29:76:89:
49:fe:2b:9b:36:35:e5:0f:cf:39:31:7d:51:29:62:95:ef:23:
a8:2b:ea:d1:64:e3:0e:f8:74:47:7e:4c:8a:91:69:b6:ec:c5:
fb:cc:a5:29:87:a9:97:be:1b:c7:b5:f0:0c:aa:22:23:cc:c2:
38:23:35:44:c3:e4:ce:58:7e:75:98:72:ec:fa:1e:68:ab:21:
7e:77:af:7e:fe:f3:de:9f:ca:e2:0c:6d:4b:6d:24:20:37:95:
98:02:15:38:d3:f5:cc:5a:ff:00:74:7e:d6:f5:d3:c3:8c:86:
a3:a1:99:63:5a:fd:a4:92:34:93:75:02:36:a6:6e:89:de:34:
da:c1:86:57:95:b9:20:9f:f6:af:fc:c1:33:06:a6:36:47:2a:
64:df:58:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 10:22:34 2024 by rpki-client on console-ams.rpki-client.org