Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/Lg_cxGzC3EL-OQRiFa7D3Su1fpU.roa
File: Lg_cxGzC3EL-OQRiFa7D3Su1fpU.roa (raw, json)
Hash identifier: AkhzGsTRU3JKvWbXGklg0gBw0H7A/Lp/OH88Lwr3nY0=
Subject key identifier: 2E:0F:DC:C4:6C:C2:DC:42:FE:39:04:62:15:AE:C3:DD:2B:B5:7E:95
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 01933036ADC736B0E7D02733DA639DEE8654
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/Lg_cxGzC3EL-OQRiFa7D3Su1fpU.roa
Signing time: Fri 15 Nov 2024 14:25:09 +0000
ROA not before: Fri 15 Nov 2024 14:25:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62205
IP address blocks: 79.174.184.0/21 maxlen: 21
91.209.128.0/23 maxlen: 23
91.209.130.0/24 maxlen: 24
139.28.180.0/22 maxlen: 22
139.28.180.0/23 maxlen: 23
139.28.182.0/23 maxlen: 23
185.44.164.0/22 maxlen: 24
185.77.228.0/22 maxlen: 22
185.77.240.0/22 maxlen: 22
2a01:72a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:30:36:ad:c7:36:b0:e7:d0:27:33:da:63:9d:ee:86:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Nov 15 14:25:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e0fdcc46cc2dc42fe39046215aec3dd2bb57e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:fd:80:f7:9e:1f:f5:2f:50:27:7d:36:a9:
25:a8:2c:c2:70:1d:9b:ea:f7:01:92:3c:e1:51:a8:
1e:b6:87:0e:d3:d3:d1:17:32:7e:1f:66:e8:56:87:
74:a0:48:95:46:c7:16:dd:f6:fa:26:de:3f:da:45:
cc:df:9f:3c:4c:e8:40:4c:7f:d5:d3:94:62:85:69:
97:50:04:2d:04:b2:0e:19:cf:c3:a8:c7:0f:f5:c8:
4a:51:1a:85:34:05:02:81:ca:9b:77:5e:9c:63:25:
76:c4:ff:2e:53:b1:e9:96:a3:04:a5:ca:cd:dc:e4:
0a:4c:e7:00:4e:01:fb:2e:b1:6c:2a:0a:b1:7f:9b:
c1:72:d6:de:b7:72:15:b6:6f:a3:92:f3:f6:0d:79:
d4:48:b2:3e:fb:dd:88:53:9c:2f:e2:a7:28:ec:db:
cd:69:79:16:cc:9d:31:30:c2:fa:73:87:92:3e:33:
f7:16:62:19:1c:fe:e5:7e:47:52:37:1f:5e:a4:fc:
0c:e8:7f:cf:66:86:22:d5:28:5c:b6:e4:1d:24:b6:
19:c1:0d:a5:47:5d:55:b5:a8:53:58:d0:c8:3d:02:
11:f4:09:ed:60:49:ed:51:41:8c:41:ea:7e:a9:0d:
78:8e:a0:50:72:85:d7:ba:c9:95:d9:5a:4a:3b:e8:
16:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0F:DC:C4:6C:C2:DC:42:FE:39:04:62:15:AE:C3:DD:2B:B5:7E:95
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/Lg_cxGzC3EL-OQRiFa7D3Su1fpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.184.0/21
91.209.128.0-91.209.130.255
139.28.180.0/22
185.44.164.0/22
185.77.228.0/22
185.77.240.0/22
IPv6:
2a01:72a0::/32
Signature Algorithm: sha256WithRSAEncryption
77:dd:ab:03:96:0e:bd:25:79:40:8c:ba:c6:ba:3f:27:61:f8:
f4:37:74:1c:5a:e7:a3:54:fa:e2:fd:0a:6f:b6:8d:b2:aa:8c:
99:cd:ce:9e:a1:04:1f:d0:0d:2a:59:50:c5:24:71:67:57:8f:
81:29:0a:ca:ef:1e:36:81:54:43:ec:ea:37:29:62:ce:c7:72:
b3:5a:dd:ab:22:8f:02:61:3b:e8:63:ae:ef:6b:98:1c:49:ca:
6f:eb:54:d4:3e:3d:87:af:9b:5b:cc:81:ca:c1:47:e5:4b:a9:
54:e1:72:72:2e:fe:24:ef:1e:ac:d7:38:c9:78:af:0e:10:5c:
80:d6:b0:d9:86:3b:eb:6a:3c:bf:b2:e5:a7:20:97:11:f8:f7:
71:63:7a:83:3c:c2:f8:0b:eb:a2:42:51:cd:e0:7c:20:12:8e:
a6:1d:57:18:21:b6:66:fd:f9:11:32:43:22:a4:f8:af:05:a5:
55:17:6c:7f:a3:a8:0c:3f:33:60:ed:18:56:c9:56:24:5f:c7:
ae:65:12:75:d0:25:b1:26:79:3c:e2:85:09:46:7d:f5:d5:e0:
97:9e:1c:a4:bf:6c:cf:4b:7f:6c:2d:9a:7c:c0:5d:ad:f0:7c:
56:bd:74:1f:84:05:04:01:c1:13:32:f3:cf:36:0f:8b:37:d8:
49:3c:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:34 2025 by rpki-client