Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/lmUYrMyLlkhdADgUlxqakeyNSvI.roa
File: lmUYrMyLlkhdADgUlxqakeyNSvI.roa (raw, json)
Hash identifier: u7tzEj9WnCptu8DESYCbazng98ZsnsMkY2P/bZ+H9Ao=
Subject key identifier: 96:65:18:AC:CC:8B:96:48:5D:00:38:14:97:1A:9A:91:EC:8D:4A:F2
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA4196527AE040DC566009E17E7D73
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/lmUYrMyLlkhdADgUlxqakeyNSvI.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 93.127.160.0/24 maxlen: 24
93.127.161.0/24 maxlen: 24
93.127.164.0/24 maxlen: 24
93.127.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 08:22:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:41:96:52:7a:e0:40:dc:56:60:09:e1:7e:7d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=966518accc8b96485d003814971a9a91ec8d4af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ab:0b:7e:9f:bf:4e:69:c7:88:18:dd:be:a6:
46:55:b1:49:da:6c:91:26:24:dc:02:3a:67:b9:83:
a0:ee:67:30:dc:62:48:f6:e5:a2:94:93:db:83:2a:
0b:a9:b4:d3:9e:f1:3d:b8:18:79:e9:b5:78:2d:3d:
93:d7:a7:5a:7f:f9:18:59:3d:b2:a3:95:f9:2d:12:
c6:40:4a:b9:f7:af:43:8a:96:78:3c:ed:a8:4f:3b:
84:74:4a:b9:5d:4f:88:f7:1c:b8:38:88:2b:37:2f:
17:ed:48:fb:54:fb:2a:e8:56:e6:7e:06:67:f5:63:
db:6f:99:f0:54:a9:ac:af:8b:af:cb:1e:d1:d7:a7:
81:2a:81:39:b7:c6:22:cd:15:a6:91:16:25:e3:04:
f7:cc:2a:1a:73:9c:84:87:49:ea:61:44:3b:66:92:
41:5d:1f:ed:38:7f:19:86:d7:34:af:58:df:a7:20:
b8:70:46:b4:0b:82:bb:79:50:63:0d:d6:ba:10:ba:
1e:76:a4:ae:9d:6d:f2:c3:8d:7c:2b:da:9e:71:12:
4c:15:d3:19:fd:ac:81:d3:d8:9b:05:81:60:d8:22:
05:88:df:0c:6e:c5:39:a8:c5:d1:54:e7:e1:cf:5b:
52:2e:fe:54:9f:90:79:0e:12:4f:18:78:db:6f:0b:
27:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:65:18:AC:CC:8B:96:48:5D:00:38:14:97:1A:9A:91:EC:8D:4A:F2
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/lmUYrMyLlkhdADgUlxqakeyNSvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.160.0/23
93.127.164.0/24
93.127.184.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:bd:cc:6b:d0:8d:f3:13:4b:81:a8:72:84:da:f0:5a:92:62:
21:73:4a:fd:77:a7:11:2a:40:ee:71:93:12:2f:6e:a1:19:8b:
d5:42:a7:4a:10:0b:28:75:59:39:30:a2:fe:88:f6:c8:18:38:
24:05:f6:d0:0d:e4:26:da:5e:3d:26:3b:57:3a:f7:84:e3:34:
2d:15:5e:7a:bc:34:42:12:9a:db:33:07:96:ed:6a:77:49:e1:
fc:c8:a9:cd:db:2a:0c:dc:50:2d:a8:16:98:c1:89:82:b0:15:
c2:16:f0:3e:62:a3:d5:d1:90:a6:c7:cf:29:cf:87:7b:3f:c2:
79:22:6c:57:74:13:5c:02:3f:63:86:e6:45:33:fe:06:5c:4d:
d5:a2:21:93:02:a8:fd:af:13:65:61:ef:d7:1b:53:5d:ca:7e:
cd:2e:89:18:d4:d7:1e:19:eb:62:c2:df:3e:e7:5a:28:a3:1d:
34:c6:7a:e3:49:b3:ca:b0:c7:a0:ce:37:3a:c6:eb:92:9f:37:
41:26:f4:d2:f5:88:bb:3d:0b:99:b8:e5:13:7e:05:c1:30:4d:
63:db:0c:ec:87:45:ef:1a:31:da:b6:6b:76:d1:ab:e2:b7:10:
87:13:bb:8e:d5:2a:40:f5:b3:12:ca:25:89:cd:3c:53:31:e1:
1a:4d:43:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:33 2025 by rpki-client