Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/LnCNPQ9caJy8DiZTKQUuckkJ_h8.roa
File: LnCNPQ9caJy8DiZTKQUuckkJ_h8.roa (raw, json)
Hash identifier: nPpxY/pvxYsuD/j81UekfhpPFvsRcsRJG40hq+QjtdM=
Subject key identifier: 2E:70:8D:3D:0F:5C:68:9C:BC:0E:26:53:29:05:2E:72:49:09:FE:1F
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019031D5359F6986F78B0189421BB601AE25
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/LnCNPQ9caJy8DiZTKQUuckkJ_h8.roa
Signing time: Wed 19 Jun 2024 18:49:34 +0000
ROA not before: Wed 19 Jun 2024 18:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207569
IP address blocks: 5.180.136.0/24 maxlen: 24
5.180.137.0/24 maxlen: 24
5.252.116.0/24 maxlen: 24
45.89.64.0/24 maxlen: 24
45.133.245.0/24 maxlen: 24
46.17.106.0/24 maxlen: 24
85.209.0.0/24 maxlen: 24
95.214.8.0/24 maxlen: 24
139.28.220.0/24 maxlen: 24
139.28.221.0/24 maxlen: 24
185.17.2.0/24 maxlen: 24
185.58.207.0/24 maxlen: 24
185.94.167.0/24 maxlen: 24
185.104.250.0/24 maxlen: 24
185.105.118.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.188.181.0/24 maxlen: 24
193.109.84.0/24 maxlen: 24
194.53.54.0/24 maxlen: 24
194.67.200.0/24 maxlen: 24
195.66.87.0/24 maxlen: 24
2a0a:9300::/32 maxlen: 32
2a0a:9300:1::/48 maxlen: 48
2a0a:9300:aaaa::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 02 Aug 2024 07:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:31:d5:35:9f:69:86:f7:8b:01:89:42:1b:b6:01:ae:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jun 19 18:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e708d3d0f5c689cbc0e265329052e724909fe1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:da:a9:70:a5:76:38:a7:73:ee:74:35:e1:
a4:98:48:b7:a5:2c:ee:4e:14:a7:e2:a5:a2:f3:f1:
ea:3b:ea:76:2c:b0:9f:7a:e4:d9:f9:e4:ad:36:a6:
5f:fe:43:1b:74:89:cd:a9:c2:ff:75:3e:52:ca:e7:
ff:1e:f9:21:1a:46:f1:0f:02:f9:a4:d0:72:5e:72:
68:f0:41:a5:9a:5e:7b:5d:c5:93:e2:f6:ea:68:77:
a2:86:f2:7b:b2:33:e8:3d:b6:00:3f:29:c5:cd:9e:
23:64:01:a4:9a:0e:e4:df:ac:a2:73:46:ff:ff:50:
35:c2:38:0b:28:5d:65:df:b9:ad:cc:6a:f7:3b:d1:
c1:6d:6e:c7:8e:a1:0f:be:98:b3:8b:8f:48:2c:39:
b6:7a:93:ac:0e:f7:0a:96:86:7a:31:76:9d:29:76:
3a:aa:f9:8d:3a:8e:01:d2:07:94:1f:88:d2:e7:d4:
72:a9:d0:fb:c5:77:d6:98:6b:ff:6f:05:58:2b:5b:
d2:d9:5b:6b:80:60:ca:0e:40:78:c8:86:9c:0c:eb:
dc:05:bb:e1:33:7c:d7:95:af:d6:19:53:a6:fe:9e:
07:eb:41:e4:b0:d2:2b:ef:45:2e:fe:8d:c7:7f:75:
31:07:44:85:24:b0:b0:d7:e2:c3:68:e2:61:25:d0:
69:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:70:8D:3D:0F:5C:68:9C:BC:0E:26:53:29:05:2E:72:49:09:FE:1F
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/LnCNPQ9caJy8DiZTKQUuckkJ_h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.136.0/23
5.252.116.0/24
45.89.64.0/24
45.133.245.0/24
46.17.106.0/24
85.209.0.0/24
95.214.8.0/24
139.28.220.0/23
185.17.2.0/24
185.58.207.0/24
185.94.167.0/24
185.104.250.0/24
185.105.118.0/24
185.125.231.0/24
185.188.181.0/24
193.109.84.0/24
194.53.54.0/24
194.67.200.0/24
195.66.87.0/24
IPv6:
2a0a:9300::/32
Signature Algorithm: sha256WithRSAEncryption
55:97:87:bf:a7:30:d8:ae:d7:08:88:65:c7:37:69:46:87:9c:
5d:64:a8:ed:cb:29:ae:be:bd:56:08:5a:10:28:f7:b5:84:69:
f9:89:be:80:4a:1f:6f:5c:13:24:b6:f2:fb:91:23:57:69:ed:
35:d7:3b:6a:68:ab:07:83:ee:8c:97:aa:52:0d:5e:f8:b7:e0:
da:4c:4e:7f:a6:9a:6a:5e:c5:2b:e4:30:e8:f9:28:63:19:30:
90:2f:33:8d:b4:49:d8:da:90:69:9a:d8:1f:07:33:92:77:7f:
2f:d7:c5:ea:71:4b:c9:a5:86:b3:e4:76:fb:15:cf:2d:11:38:
0b:3d:80:0d:c2:3f:36:f1:4c:bb:96:b3:ed:08:3c:e7:9b:e0:
cb:cf:59:6f:ca:eb:09:37:94:79:89:1f:3d:04:20:19:97:ba:
7a:2e:6a:ca:66:e8:ab:bd:16:15:92:1e:70:b0:be:a2:02:fc:
58:4a:e6:7d:43:6a:dc:6d:15:7b:ac:c7:bd:3b:9a:cc:60:a4:
45:7c:02:ff:73:b6:6a:d5:5f:e5:ac:a0:1c:8e:ca:c2:13:4b:
c9:0f:8a:de:d1:37:7d:5b:71:37:cd:4f:ff:fc:b0:23:23:06:
6e:34:3b:77:76:f2:74:7f:bf:65:70:ab:d0:b8:43:aa:dc:9f:
5b:d5:c4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 09:58:15 2024 by rpki-client on console-fra.rpki-client.org