Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/lNh3p7dvxUQzOPCK3PAmLEV4JCE.roa
File: lNh3p7dvxUQzOPCK3PAmLEV4JCE.roa (raw, json)
Hash identifier: 8ZjnpMVEyRuBCBLX8l2V55j7fkBJZE14Oc/6Xk6CqFs=
Subject key identifier: 94:D8:77:A7:B7:6F:C5:44:33:38:F0:8A:DC:F0:26:2C:45:78:24:21
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018EBEBF4F696168DCFD4C569EEFCBF3A17A
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/lNh3p7dvxUQzOPCK3PAmLEV4JCE.roa
Signing time: Mon 08 Apr 2024 17:26:32 +0000
ROA not before: Mon 08 Apr 2024 17:26:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15723
IP address blocks: 5.178.10.0/24 maxlen: 24
5.178.12.0/24 maxlen: 24
5.178.13.0/24 maxlen: 24
5.178.15.0/24 maxlen: 24
46.23.100.0/22 maxlen: 22
62.217.129.0/24 maxlen: 24
62.217.131.0/24 maxlen: 24
62.217.134.0/24 maxlen: 24
62.217.138.0/24 maxlen: 24
62.217.141.0/24 maxlen: 24
62.217.142.0/24 maxlen: 24
62.217.146.0/24 maxlen: 24
62.217.147.0/24 maxlen: 24
62.217.148.0/24 maxlen: 24
62.217.149.0/24 maxlen: 24
62.217.151.0/24 maxlen: 24
62.217.156.0/24 maxlen: 24
62.217.157.0/24 maxlen: 24
62.217.158.0/24 maxlen: 24
62.217.159.0/24 maxlen: 24
164.215.97.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
188.64.8.0/24 maxlen: 24
188.64.9.0/24 maxlen: 24
188.64.10.0/24 maxlen: 24
188.64.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 17:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:bf:4f:69:61:68:dc:fd:4c:56:9e:ef:cb:f3:a1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Apr 8 17:26:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94d877a7b76fc5443338f08adcf0262c45782421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:07:38:83:f1:e7:2d:18:c8:3e:f7:fe:13:
fe:36:cb:e1:a3:39:00:17:95:dc:5d:1a:bf:9f:7a:
27:9e:db:49:c5:bf:43:5d:a2:18:ef:61:fb:a6:4c:
d9:f0:9e:00:c9:12:b8:da:38:1a:e2:d2:8f:ed:f7:
f1:ab:8f:90:83:28:91:01:06:a5:56:dc:f7:3b:65:
09:35:b1:68:fb:2e:0b:7a:60:5c:f6:7b:32:83:57:
18:2e:99:db:15:6c:55:8f:df:c9:e1:f3:f8:bc:be:
15:f1:69:2d:79:8c:59:99:78:b0:8f:8c:fc:ca:a7:
7e:7a:d6:a0:f5:1f:1e:7c:41:a4:50:80:33:6c:6e:
67:9d:d6:a2:ba:94:a9:4b:59:6d:09:8b:0f:91:2a:
3e:0d:6d:98:80:77:4d:97:b5:39:11:45:a3:f5:c1:
7b:4d:58:14:77:67:2f:99:69:27:5e:71:90:a7:80:
66:a8:62:2f:17:a4:99:39:69:4a:7c:75:12:77:5b:
61:0e:d9:e3:d4:c8:73:c0:ee:6d:a1:d1:de:a0:ae:
a7:8a:94:3e:0b:4a:9a:1d:b4:0e:24:b2:7f:fe:ad:
42:7c:6a:0f:bc:ca:69:0e:90:ca:2c:40:3e:3e:84:
4c:ac:de:97:80:1f:43:25:f9:32:5e:95:b4:e2:b5:
66:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D8:77:A7:B7:6F:C5:44:33:38:F0:8A:DC:F0:26:2C:45:78:24:21
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/lNh3p7dvxUQzOPCK3PAmLEV4JCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.10.0/24
5.178.12.0/23
5.178.15.0/24
46.23.100.0/22
62.217.129.0/24
62.217.131.0/24
62.217.134.0/24
62.217.138.0/24
62.217.141.0-62.217.142.255
62.217.146.0-62.217.149.255
62.217.151.0/24
62.217.156.0/22
164.215.97.0/24
185.81.217.0/24
188.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:82:fc:95:8b:62:57:00:08:31:a0:66:d3:04:85:7b:6d:fc:
d2:15:65:58:ef:f4:df:d7:13:07:21:16:b6:73:a3:18:7e:ae:
93:80:9a:22:e4:a1:14:02:f3:30:4a:85:50:c0:29:58:60:5b:
31:27:7a:52:5f:e4:b3:e5:c9:52:04:01:e7:14:e8:4b:87:69:
9a:ee:0f:d0:05:2e:8c:2b:f5:ed:48:ab:1d:7e:45:da:66:1d:
4c:88:75:96:50:6f:cc:03:23:7a:18:8d:2a:95:0d:20:54:af:
43:85:5e:b7:9a:e9:6b:89:94:e9:6e:a0:58:1f:b9:c9:2e:d6:
dc:46:cd:7f:e5:01:d2:e6:89:54:75:2e:85:92:a3:8a:6d:e7:
49:07:70:2d:3d:4d:4b:c1:17:ac:c1:04:9f:04:b7:cd:f4:57:
ea:7e:6e:f4:db:19:fc:18:13:ff:b0:5c:9c:f0:eb:9f:56:1f:
a1:37:86:f5:13:eb:87:57:82:a3:de:6f:04:40:9e:b6:ab:ba:
4f:00:67:f0:b0:04:5c:60:54:38:11:db:16:a3:88:8c:26:84:
a3:59:e9:5c:0f:e3:da:6b:bf:f2:53:ca:f8:ae:62:c9:87:22:
36:a8:3e:0c:43:ef:43:76:3e:97:64:d6:f0:73:63:c1:83:ba:
b2:b9:e7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:22 2025 by rpki-client