Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Laglhae7Bp5Mi2kXCDgWHJ0wPdE.roa
File: Laglhae7Bp5Mi2kXCDgWHJ0wPdE.roa (raw, json)
Hash identifier: enuxiVVLSeDjGVtoPxfxGlbApe0X0pj3Yw+gcK1Vs8s=
Subject key identifier: 2D:A8:25:85:A7:BB:06:9E:4C:8B:69:17:08:38:16:1C:9D:30:3D:D1
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0190E9D2030835E14E2FC36E18CEA773BB98
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Laglhae7Bp5Mi2kXCDgWHJ0wPdE.roa
Signing time: Thu 25 Jul 2024 12:16:12 +0000
ROA not before: Thu 25 Jul 2024 12:16:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3399
IP address blocks: 192.36.22.0/24 maxlen: 24
192.36.208.0/24 maxlen: 24
192.165.178.0/23 maxlen: 23
193.180.23.0/24 maxlen: 24
193.180.96.0/22 maxlen: 22
193.180.164.0/23 maxlen: 23
193.181.248.0/22 maxlen: 22
193.182.111.0/24 maxlen: 24
193.183.116.0/24 maxlen: 24
194.68.170.0/23 maxlen: 23
194.68.170.0/24 maxlen: 24
194.68.171.0/24 maxlen: 24
194.68.220.0/23 maxlen: 23
194.71.216.0/23 maxlen: 23
194.71.216.0/24 maxlen: 24
194.71.217.0/24 maxlen: 24
194.103.80.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 05 Sep 2024 14:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:d2:03:08:35:e1:4e:2f:c3:6e:18:ce:a7:73:bb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jul 25 12:16:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2da82585a7bb069e4c8b69170838161c9d303dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c2:15:26:49:49:e9:2d:08:44:95:e4:5c:66:
e0:b2:90:45:30:9e:e9:40:c1:9a:61:1f:18:02:69:
cf:df:6a:bc:01:6b:b7:71:0a:52:28:f7:52:48:8a:
69:fd:47:4c:d7:19:f8:e1:92:60:66:d1:0a:ac:f5:
1c:07:13:d6:6f:13:f2:5b:aa:c5:ae:6f:56:04:ec:
33:b6:ee:81:2a:6e:89:9d:22:66:72:b1:ee:6d:25:
02:6a:f0:e3:f2:d6:ce:d2:5f:3f:46:6c:af:05:62:
64:96:c5:b9:55:01:b7:79:a7:96:8e:ca:c8:53:66:
33:31:ca:3c:a2:0e:b8:b5:7b:6d:93:1d:e4:10:0c:
26:79:06:4d:80:86:e1:81:93:6f:f0:9e:b1:5e:6f:
7c:09:96:e5:bd:2a:f8:f3:74:eb:1f:4f:71:cb:58:
76:20:b5:14:6d:5f:aa:dd:c6:87:47:df:74:bb:e0:
5b:32:8f:18:a6:08:62:54:72:a4:6b:43:29:40:4e:
59:ad:96:34:b0:05:54:8c:a4:a2:35:eb:1a:c8:ea:
9b:31:70:2f:ab:7f:a1:22:bb:f0:7d:89:14:d1:cf:
bd:d9:5c:a4:23:44:19:50:c7:3f:8f:45:62:ef:b4:
63:71:bd:76:f6:a0:cd:c0:2a:31:a0:2a:c2:54:72:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A8:25:85:A7:BB:06:9E:4C:8B:69:17:08:38:16:1C:9D:30:3D:D1
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Laglhae7Bp5Mi2kXCDgWHJ0wPdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.22.0/24
192.36.208.0/24
192.165.178.0/23
193.180.23.0/24
193.180.96.0/22
193.180.164.0/23
193.181.248.0/22
193.182.111.0/24
193.183.116.0/24
194.68.170.0/23
194.68.220.0/23
194.71.216.0/23
194.103.80.0/22
Signature Algorithm: sha256WithRSAEncryption
81:e1:66:4f:e5:c9:1f:8c:b0:eb:69:da:7e:72:84:28:89:83:
66:36:55:eb:8b:03:4a:9c:5c:f5:6b:ce:fc:d4:33:fa:9f:75:
25:86:18:d7:32:bf:6c:22:24:1b:f5:a7:c1:b9:58:71:b6:53:
99:0e:4d:78:c4:1d:ae:2a:ea:5e:0b:a9:f7:a4:f4:cc:1e:cb:
3e:03:a0:b1:63:ba:4b:7c:e6:ab:b7:15:55:1d:ca:5f:05:89:
fa:8b:1d:79:df:a8:70:d6:aa:31:03:7b:be:68:18:40:27:50:
7b:df:30:d8:33:95:43:99:3e:66:a5:f9:27:c2:cc:49:7f:85:
44:01:07:e3:75:d5:12:b7:f7:23:63:de:4e:d4:d2:38:25:4d:
23:ed:ad:7e:a3:b6:df:48:77:25:fb:bd:0c:e5:9a:a9:35:8b:
b3:71:77:9d:e0:99:4b:c7:ac:db:56:6c:2c:3f:31:5b:3a:0a:
2f:a1:04:cb:37:44:09:f0:ae:8a:9b:79:1e:3c:12:61:f4:31:
56:6e:0d:6b:68:f4:38:6a:c2:62:c9:62:ef:68:b9:2f:c4:c7:
87:83:54:a4:f6:70:f0:42:15:5e:c5:21:0b:b7:a8:0b:7d:cb:
89:af:20:38:dd:8e:91:14:50:15:c9:97:0d:e9:a3:3e:c1:77:
f8:7d:e5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:39 2025 by rpki-client