Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/lhqqvbajLCjfnRRn-Ooy1P20Avw.roa
File: lhqqvbajLCjfnRRn-Ooy1P20Avw.roa (raw, json)
Hash identifier: BFM08mFTf+jUd/ovXouhZ0xx3wimU5CSDErUlVdjn8s=
Subject key identifier: 96:1A:AA:BD:B6:A3:2C:28:DF:9D:14:67:F8:EA:32:D4:FD:B4:02:FC
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018E182E25CDD8FD66DC432589B35D5E7FC3
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/lhqqvbajLCjfnRRn-Ooy1P20Avw.roa
Signing time: Thu 07 Mar 2024 09:11:01 +0000
ROA not before: Thu 07 Mar 2024 09:11:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211619
IP address blocks: 45.9.168.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
88.209.206.0/24 maxlen: 24
88.209.219.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.236.0/24 maxlen: 24
88.209.237.0/24 maxlen: 24
88.209.239.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
88.209.254.0/24 maxlen: 24
92.52.217.0/24 maxlen: 24
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 13:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:2e:25:cd:d8:fd:66:dc:43:25:89:b3:5d:5e:7f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 7 09:11:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=961aaabdb6a32c28df9d1467f8ea32d4fdb402fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:af:fc:52:cf:52:9a:ba:4d:9b:1d:30:52:
e0:a0:02:08:c9:e9:3c:4d:24:f6:b4:a1:be:1b:19:
62:ff:42:6c:d3:11:f0:9c:b3:6a:21:3c:0c:42:3f:
c5:23:1d:3c:5f:ec:11:32:33:42:1b:ab:b8:99:93:
1d:0d:5d:9b:96:27:d7:64:cf:86:e6:50:68:a8:71:
f7:93:eb:87:6c:ac:fd:f5:13:fd:72:91:d0:c8:70:
62:49:6e:da:b1:b9:0a:5d:e0:e7:8f:8e:10:da:09:
46:b7:c5:d0:7a:cf:c7:77:f9:4b:23:7c:22:45:fb:
d7:f4:07:85:ce:56:ea:7b:1a:5b:37:7b:e7:c5:85:
35:78:92:11:14:e2:8e:b9:b4:77:80:a8:9e:7d:80:
dd:e7:f8:ca:00:7b:6d:7b:17:4c:fb:86:b0:9b:6f:
ac:6f:01:28:c3:da:0b:5f:75:75:13:7b:5a:32:bd:
5d:31:b6:0d:a9:2f:c9:00:63:26:1c:bb:18:29:93:
3c:4b:3b:31:9d:dc:de:02:57:01:1b:dd:8e:05:96:
bf:b1:f5:a0:fc:0c:98:46:26:f0:2c:13:cd:7c:33:
ee:54:ee:9d:93:5b:01:c8:88:a2:e8:6d:60:f5:77:
6e:10:86:04:dd:ed:67:18:b9:24:8d:46:f1:fa:6e:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1A:AA:BD:B6:A3:2C:28:DF:9D:14:67:F8:EA:32:D4:FD:B4:02:FC
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/lhqqvbajLCjfnRRn-Ooy1P20Avw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.168.0/24
83.137.157.0/24
88.209.206.0/24
88.209.219.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.254.0/24
92.52.217.0-92.52.218.255
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f0:a9:78:1c:9c:8c:8f:74:23:ef:df:93:38:11:08:2e:bf:
44:ec:ed:c0:1d:f4:01:7e:a2:90:50:16:2a:5a:92:66:56:ac:
63:34:10:30:80:0f:ba:02:79:dc:79:97:3b:9c:1e:64:f3:de:
46:23:70:74:9b:8e:14:48:84:93:c0:5e:c8:11:8b:65:1a:ff:
7a:83:bf:81:58:05:19:03:ee:77:dd:7a:2f:ef:95:90:e4:cb:
e4:6c:b7:ea:35:2e:17:88:b7:1b:a2:9a:07:64:8a:87:49:0b:
2b:92:f3:ee:d1:6f:af:19:92:b6:35:2f:14:d9:55:d6:e5:73:
25:99:7c:1a:2a:2f:d3:a9:f2:60:f0:cf:62:ce:08:f3:5f:07:
2e:4e:95:36:41:1d:7c:c3:9c:3b:a5:10:da:b6:5a:e7:83:f8:
65:63:d7:56:f9:18:86:08:dc:eb:41:b0:3a:75:bb:72:1f:39:
a4:f3:e3:32:ea:b4:ca:52:1b:5f:74:b2:a6:fe:02:e7:2f:7c:
d1:b0:62:9a:17:c1:77:3b:b6:87:c0:6b:86:d2:b7:09:d1:ed:
66:a9:1b:39:db:b7:94:5e:c9:d5:02:b5:e1:79:06:50:86:27:
c8:e6:a3:e5:09:86:fc:a2:5b:2d:a5:11:05:fd:4d:c4:ac:03:
81:6c:a5:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 8 17:09:51 2024 by rpki-client on console-ams.rpki-client.org