Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/lbC5b2dlZsVTEBrcgebi0wXm4L8.roa
File: lbC5b2dlZsVTEBrcgebi0wXm4L8.roa (raw, json)
Hash identifier: HZ/sBrOw27vDyUbZ9riD5vwi73vEqmhZT0G2Ul+AX+w=
Subject key identifier: 95:B0:B9:6F:67:65:66:C5:53:10:1A:DC:81:E6:E2:D3:05:E6:E0:BF
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 0194228D7C61A1CB20352C9B18F10BA2EEE9
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/lbC5b2dlZsVTEBrcgebi0wXm4L8.roa
Signing time: Wed 01 Jan 2025 15:48:05 +0000
ROA not before: Wed 01 Jan 2025 15:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3360
IP address blocks: 195.203.156.0/22 maxlen: 22
217.27.4.0/24 maxlen: 24
217.27.6.0/24 maxlen: 24
217.27.7.0/24 maxlen: 24
2a03:5000:1::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:20::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:30::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:102::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:162::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Mar 2025 18:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:7c:61:a1:cb:20:35:2c:9b:18:f1:0b:a2:ee:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jan 1 15:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95b0b96f676566c553101adc81e6e2d305e6e0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:38:45:88:02:2f:a5:e4:a5:e1:68:28:89:
3d:c3:67:7d:93:26:63:1a:c2:62:bc:06:f8:0f:98:
05:44:a1:ba:57:94:7d:30:88:8c:46:f7:0d:3e:7e:
e7:40:bd:79:fb:1e:61:19:42:ca:e0:db:f7:5d:7d:
d6:c3:82:2a:4c:e9:98:19:25:4a:da:53:25:aa:c1:
f7:e2:c9:9c:29:8e:28:80:dd:8a:5b:70:42:7a:db:
17:c7:26:e3:57:62:64:2f:6d:71:00:c3:32:1f:df:
e9:c0:46:e9:7f:3a:fe:c6:63:94:01:67:02:97:7e:
63:df:80:73:16:0f:49:d4:68:3b:1a:04:7e:00:d6:
02:d6:f0:f3:a9:1c:ec:47:a7:45:ff:ce:ac:b4:18:
d2:28:6a:fa:09:a4:ae:45:fd:91:8b:4a:f7:b6:2a:
08:d7:f4:b2:7c:37:22:74:1b:cd:d2:7f:b0:dc:0d:
ad:d6:aa:ab:ac:df:40:e9:f9:7c:1a:58:28:7a:6c:
5b:49:35:c9:bb:51:e9:45:bc:f5:4c:c2:58:0a:8f:
d8:db:34:4e:eb:64:a7:7d:76:c5:fc:e9:3c:3d:a9:
f1:da:1e:9b:3d:98:00:99:5e:ec:c4:ef:ee:8e:a1:
d4:b1:a8:43:78:d6:b2:e8:ce:9f:32:34:ea:c9:b9:
3a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B0:B9:6F:67:65:66:C5:53:10:1A:DC:81:E6:E2:D3:05:E6:E0:BF
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/lbC5b2dlZsVTEBrcgebi0wXm4L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.203.156.0/22
217.27.4.0/24
217.27.6.0/23
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
cb:06:0c:ec:88:72:bd:f5:ce:b8:8c:9d:b4:25:96:3c:81:de:
0e:db:8e:fe:ec:71:60:3d:f9:f2:7d:77:39:57:30:3f:f1:91:
32:7e:b2:93:03:37:b4:44:c1:97:39:eb:ac:9e:bd:6a:03:97:
ba:b7:0f:74:96:11:1b:1c:1b:7d:d8:d9:11:88:84:3f:85:c8:
18:7e:51:06:dd:e9:2c:26:7e:0f:71:0d:b5:42:31:19:91:b7:
79:d9:91:93:f8:16:67:3c:0f:37:15:56:fe:f0:cd:b2:7b:8e:
5e:2f:73:b6:25:ae:a5:1f:a0:08:23:f3:da:1f:4b:20:46:96:
bd:38:4f:7c:0c:8c:44:e9:96:9b:a9:4a:ba:f4:04:2a:b2:c2:
9a:55:5c:8b:4f:0a:c4:a9:97:19:40:2d:80:61:dc:5f:c2:29:
43:51:b2:e0:3c:05:60:01:17:1a:f8:55:a0:ca:e2:eb:2f:e0:
61:50:79:ae:1e:c2:e0:9a:d7:f0:6a:96:b9:41:97:17:65:7f:
2a:2d:2f:b6:72:e2:7e:5a:01:b7:20:ba:b9:1f:a3:04:fa:e2:
de:6c:d7:a5:86:a0:35:12:03:30:0c:5a:5b:74:2e:71:ee:2c:
83:13:d8:52:2b:b4:61:42:d5:2f:21:82:a7:22:a5:13:84:39:
50:8c:de:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:08:45 2025 by rpki-client