Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/LV7pKlqYZuaL_TB7Nf7OEtsNjtI.roa
File: LV7pKlqYZuaL_TB7Nf7OEtsNjtI.roa (raw, json)
Hash identifier: VS+qIRttWK9/C2+hX05TKuxSMmg+kYYMJRTmT6YI3oA=
Subject key identifier: 2D:5E:E9:2A:5A:98:66:E6:8B:FD:30:7B:35:FE:CE:12:DB:0D:8E:D2
Certificate issuer: /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial: 0193965A2346BA783B6F43B72F77576751BD
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/LV7pKlqYZuaL_TB7Nf7OEtsNjtI.roa
Signing time: Thu 05 Dec 2024 10:25:09 +0000
ROA not before: Thu 05 Dec 2024 10:25:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57269
IP address blocks: 31.14.104.0/21 maxlen: 24
31.14.192.0/21 maxlen: 24
77.81.8.0/21 maxlen: 24
79.112.0.0/15 maxlen: 24
79.116.0.0/15 maxlen: 24
86.105.120.0/21 maxlen: 24
89.34.208.0/21 maxlen: 24
89.38.168.0/21 maxlen: 24
89.41.152.0/21 maxlen: 24
89.43.176.0/22 maxlen: 24
89.45.96.0/20 maxlen: 24
89.46.48.0/21 maxlen: 24
89.46.56.0/22 maxlen: 24
89.47.204.0/22 maxlen: 24
91.232.81.0/24 maxlen: 24
92.114.112.0/20 maxlen: 24
93.114.112.0/20 maxlen: 24
93.115.64.0/21 maxlen: 24
93.118.80.0/20 maxlen: 24
93.118.192.0/18 maxlen: 24
94.176.152.0/21 maxlen: 24
176.126.176.0/20 maxlen: 24
185.105.36.0/22 maxlen: 24
185.239.200.0/22 maxlen: 24
188.240.76.0/22 maxlen: 24
188.241.224.0/20 maxlen: 24
195.135.248.0/22 maxlen: 24
2a0c:5a80::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:5a:23:46:ba:78:3b:6f:43:b7:2f:77:57:67:51:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Validity
Not Before: Dec 5 10:25:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d5ee92a5a9866e68bfd307b35fece12db0d8ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ba:90:d2:2a:0f:dd:8c:18:41:30:f8:96:c1:
73:4e:88:03:c0:ad:56:5d:34:e2:82:4d:94:02:4b:
d2:46:a7:af:50:e3:54:84:24:ac:e1:8b:6d:6d:80:
f1:11:0a:c4:68:8b:0b:03:ae:6b:bc:41:0f:ac:72:
8c:e2:6f:cc:89:c3:12:bb:fd:68:ae:a8:1d:62:06:
62:14:ee:2a:22:bf:2f:16:f0:d6:88:1b:7a:ec:17:
4a:1a:e5:fb:df:2b:18:46:0d:47:93:8d:de:83:75:
3b:21:6c:ed:e5:45:b6:1c:ce:82:50:c9:c6:39:5c:
41:06:45:0a:76:68:0c:ee:13:d5:4d:89:4d:82:63:
89:21:e0:ed:a4:4b:09:2f:cb:50:cf:c8:33:5d:15:
1e:25:1b:b9:07:2a:0a:9a:7f:8c:81:a9:b3:ee:19:
a3:1a:2a:56:a0:aa:e4:09:61:19:86:77:4d:c9:00:
f4:63:27:d9:3b:6f:9e:22:d5:90:94:65:3d:cf:15:
4f:34:1d:dd:b8:72:73:ce:7c:51:7f:2f:c6:45:c2:
a4:b5:df:0e:5f:63:c6:8d:8f:d8:67:f0:2c:e8:60:
f3:9d:21:d4:67:73:1d:28:e7:05:81:b5:2f:20:f0:
2f:73:8a:75:8d:27:c6:1a:6f:68:7a:d8:d4:0c:7a:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5E:E9:2A:5A:98:66:E6:8B:FD:30:7B:35:FE:CE:12:DB:0D:8E:D2
X509v3 Authority Key Identifier:
keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/LV7pKlqYZuaL_TB7Nf7OEtsNjtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.104.0/21
31.14.192.0/21
77.81.8.0/21
79.112.0.0/15
79.116.0.0/15
86.105.120.0/21
89.34.208.0/21
89.38.168.0/21
89.41.152.0/21
89.43.176.0/22
89.45.96.0/20
89.46.48.0-89.46.59.255
89.47.204.0/22
91.232.81.0/24
92.114.112.0/20
93.114.112.0/20
93.115.64.0/21
93.118.80.0/20
93.118.192.0/18
94.176.152.0/21
176.126.176.0/20
185.105.36.0/22
185.239.200.0/22
188.240.76.0/22
188.241.224.0/20
195.135.248.0/22
IPv6:
2a0c:5a80::/29
Signature Algorithm: sha256WithRSAEncryption
59:a9:97:82:37:60:0d:1a:1b:b5:5b:0e:61:aa:ea:71:a1:84:
fb:a6:dc:a4:c1:3f:e0:24:9e:fd:89:78:be:1e:9f:3e:bc:ab:
e4:1e:b4:a7:62:0a:2f:6d:66:1b:06:44:e0:37:04:50:18:d2:
e6:c9:ee:6d:6a:44:c1:af:54:9d:fd:04:e9:f7:30:d8:c2:7e:
d3:8b:4b:73:d1:29:e8:cb:b9:9b:24:e0:1f:01:ca:46:ee:9c:
1f:0d:6d:67:79:24:f2:6b:ff:b8:7c:b7:a9:57:c1:ee:12:dc:
f6:2f:85:64:36:b6:da:de:b0:7f:01:73:59:25:3c:c4:a8:a7:
57:4a:e8:12:f8:87:24:32:13:92:1c:54:8e:7f:e0:ae:cd:98:
f7:34:14:a2:e2:de:a3:e7:b8:b2:77:b8:34:7a:e7:4f:b3:bf:
24:43:18:b2:e0:2a:5f:c6:cb:ca:e8:28:a1:7f:8c:34:4b:c0:
5f:c7:07:51:cb:b4:e7:3c:91:a7:f9:ce:98:25:8a:a4:46:f5:
0d:10:ba:79:0c:30:75:05:77:aa:ab:51:d0:8b:03:2e:3e:4a:
51:b5:1a:98:5d:74:d4:fe:46:09:0d:c8:4f:cb:8b:b2:d9:52:
c8:f2:0c:cc:14:77:1f:6e:e9:72:ae:69:dc:d2:fd:81:82:31:
a1:04:3d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:19:11 2025 by rpki-client