Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/lfZO-nWkaoTXZTi4RoQHSm318ow.roa
File: lfZO-nWkaoTXZTi4RoQHSm318ow.roa (raw, json)
Hash identifier: 9Kr4yTNhbS0HlCD1uQ6QMxvXnJa73wNUTUUE6wDZR5k=
Subject key identifier: 95:F6:4E:FA:75:A4:6A:84:D7:65:38:B8:46:84:07:4A:6D:F5:F2:8C
Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial: 019426D9B7101661553FAE52A3D95A3EC493
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/lfZO-nWkaoTXZTi4RoQHSm318ow.roa
Signing time: Thu 02 Jan 2025 11:49:49 +0000
ROA not before: Thu 02 Jan 2025 11:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51728
IP address blocks: 80.66.160.0/20 maxlen: 20
91.190.192.0/21 maxlen: 21
146.66.24.0/21 maxlen: 21
185.40.88.0/22 maxlen: 22
185.40.88.0/24 maxlen: 24
185.40.89.0/24 maxlen: 24
185.40.90.0/24 maxlen: 24
185.40.91.0/24 maxlen: 24
2a00:ac00::/32 maxlen: 32
2a00:ac01::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 08 Apr 2025 20:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b7:10:16:61:55:3f:ae:52:a3:d9:5a:3e:c4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95f64efa75a46a84d76538b84684074a6df5f28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:e1:18:e3:e3:3a:14:a5:1a:85:00:77:02:
84:ea:c6:23:be:95:57:bc:ed:63:ba:6f:e9:4e:c2:
87:0a:72:83:ab:d0:46:0d:a7:1e:a7:a5:47:0a:d8:
d5:bd:55:3c:8e:62:f5:45:f7:f1:c5:f9:4d:65:aa:
cf:fd:d9:b6:14:ab:3a:8f:a4:8f:33:38:cb:ab:75:
3b:29:c0:30:5b:12:9a:e2:e2:08:29:22:f5:74:b6:
b0:c1:1a:e4:8d:14:54:54:8a:ed:72:8b:9c:a8:07:
a0:71:fa:c2:94:c7:95:13:e7:c4:f9:82:f4:00:23:
11:b7:0d:d6:b7:a9:9a:d2:6b:00:fd:c3:52:b3:68:
bb:40:91:7c:74:dc:9c:34:1e:b6:14:2b:80:a6:da:
f7:d7:96:fa:3d:a1:28:3c:50:59:ab:9c:94:42:2f:
39:d5:32:d8:62:2c:a1:1c:bd:71:0f:0d:f7:83:ce:
2d:50:c0:7e:63:9f:35:fb:a6:c4:f4:e3:bd:6e:3c:
6a:a2:86:bf:be:ef:5e:c0:69:d0:24:ce:9b:81:5a:
58:d9:b2:5e:82:6e:0f:f5:ba:b0:72:38:66:e7:35:
44:6e:4f:26:94:d2:75:8f:85:55:4b:dd:2e:7a:d1:
b0:9c:8e:a4:2c:9c:4a:36:aa:8b:af:03:db:39:3c:
d8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F6:4E:FA:75:A4:6A:84:D7:65:38:B8:46:84:07:4A:6D:F5:F2:8C
X509v3 Authority Key Identifier:
keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/lfZO-nWkaoTXZTi4RoQHSm318ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.160.0/20
91.190.192.0/21
146.66.24.0/21
185.40.88.0/22
IPv6:
2a00:ac00::/31
Signature Algorithm: sha256WithRSAEncryption
37:39:de:75:d8:3d:a9:71:07:50:40:67:d2:2b:64:a4:fa:50:
fe:fe:76:05:3d:03:c2:02:c8:c6:cb:11:e0:d1:79:86:29:03:
dc:f8:12:6c:7f:09:64:54:5a:ea:8c:72:35:25:5a:dc:1a:e7:
eb:ce:ee:a9:90:18:18:81:7d:28:d1:af:70:3a:cc:e7:8c:05:
72:ab:0e:d4:bc:d8:55:b0:9c:cd:ed:d9:77:ec:7a:ca:86:ef:
3a:0f:f6:83:03:ae:11:f6:33:41:fc:c1:2d:ac:73:ae:a0:ac:
08:e5:45:4f:07:11:9d:b0:8c:b4:6c:c1:dc:0b:01:bd:3b:8f:
ec:cb:15:5e:7d:3b:3b:43:c1:1f:2c:e4:03:7e:95:10:6c:03:
50:f0:16:04:64:ce:e4:5e:e7:cd:0a:27:a3:5f:80:18:41:39:
e4:86:78:bd:19:cc:83:c7:51:fd:7d:fd:bf:61:66:0d:43:5d:
85:53:22:e9:35:b5:4e:8c:77:a9:3c:ea:2a:f2:0e:28:a8:41:
92:d9:56:a8:f7:38:1f:13:f2:f2:55:8d:86:4c:47:1b:2f:0a:
78:8c:98:89:fc:61:da:74:dc:5a:90:d2:3c:77:97:2c:95:0b:
d9:c9:31:d4:83:c0:08:03:81:06:f9:8c:fd:e2:86:c3:61:7c:
d8:34:fc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 12:56:13 2025 by rpki-client