Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/LEZJ8V25b5aooa9m2xzOhKnDtd8.roa
File: LEZJ8V25b5aooa9m2xzOhKnDtd8.roa (raw, json)
Hash identifier: f5cyhtDhf7xQ/j+4zDPECfhsaIkybR64XovgT9NgalY=
Subject key identifier: 2C:46:49:F1:5D:B9:6F:96:A8:A1:AF:66:DB:1C:CE:84:A9:C3:B5:DF
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 018EC1EFF5BDEA8FDC71BD4B0A32FA3DE1FB
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/LEZJ8V25b5aooa9m2xzOhKnDtd8.roa
Signing time: Tue 09 Apr 2024 08:18:32 +0000
ROA not before: Tue 09 Apr 2024 08:18:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61173
IP address blocks: 5.182.44.0/24 maxlen: 24
5.182.45.0/24 maxlen: 24
5.182.46.0/24 maxlen: 24
5.182.47.0/24 maxlen: 24
45.159.112.0/24 maxlen: 24
45.159.113.0/24 maxlen: 24
45.159.114.0/24 maxlen: 24
45.159.115.0/24 maxlen: 24
62.3.42.0/24 maxlen: 24
85.208.253.0/24 maxlen: 24
85.208.254.0/24 maxlen: 24
85.208.255.0/24 maxlen: 24
185.4.28.0/24 maxlen: 24
185.4.29.0/24 maxlen: 24
185.4.30.0/24 maxlen: 24
185.4.31.0/24 maxlen: 24
185.50.37.0/24 maxlen: 24
185.50.38.0/24 maxlen: 24
185.50.39.0/24 maxlen: 24
185.116.160.0/24 maxlen: 24
185.116.161.0/24 maxlen: 24
185.116.162.0/24 maxlen: 24
185.116.163.0/24 maxlen: 24
185.213.164.0/24 maxlen: 24
185.213.165.0/24 maxlen: 24
185.213.166.0/24 maxlen: 24
185.213.167.0/24 maxlen: 24
185.255.88.0/24 maxlen: 24
185.255.89.0/24 maxlen: 24
185.255.90.0/24 maxlen: 24
185.255.91.0/24 maxlen: 24
193.141.64.0/24 maxlen: 24
193.141.65.0/24 maxlen: 24
193.141.126.0/24 maxlen: 24
193.141.127.0/24 maxlen: 24
2a05:ab80::/48 maxlen: 48
2a05:ab80:3::/48 maxlen: 48
2a05:ab80:4::/48 maxlen: 48
2a05:ab80:100::/48 maxlen: 48
2a05:ab80:200::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 May 2024 11:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c1:ef:f5:bd:ea:8f:dc:71:bd:4b:0a:32:fa:3d:e1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Apr 9 08:18:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c4649f15db96f96a8a1af66db1cce84a9c3b5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5b:b1:d9:7e:ca:c4:28:b9:19:8a:46:59:b3:
1a:9b:3c:f9:aa:00:6c:ae:85:b2:a6:f9:36:c0:d9:
43:1e:aa:19:94:15:07:99:56:39:c8:e0:33:d1:34:
be:82:9d:12:62:b6:23:97:b8:4f:c8:4d:76:20:cb:
cf:af:7d:d8:62:f5:f4:4e:11:a7:96:5f:94:33:86:
6b:51:d2:e9:ef:64:0c:d9:5d:14:98:b5:08:0f:19:
c6:71:ce:38:e4:fd:b3:29:d6:77:bc:45:7a:c4:24:
3f:81:b1:63:a1:7a:c0:dd:c0:3d:f0:f4:e9:7f:5e:
15:a3:4c:cd:66:00:71:3a:e7:29:03:28:07:14:0d:
c8:be:44:ae:4a:f5:35:00:03:cd:2c:1a:d9:5a:c2:
fe:91:a4:8d:59:d4:3a:31:50:20:71:7f:a6:e5:71:
ea:80:c0:56:25:e0:15:c3:e0:77:2c:bf:27:cc:72:
98:9c:11:2e:3c:ad:87:aa:d2:92:ac:c7:88:68:ec:
89:29:b2:34:fa:f5:11:81:f5:74:45:82:60:8e:f3:
a9:a5:25:91:ed:de:1c:c6:8a:9c:33:d1:5a:ac:27:
c0:38:b7:f1:2e:5c:73:cc:d5:6c:9f:9f:c0:70:36:
5a:b2:ac:09:f1:7f:59:76:94:8a:67:50:ce:00:3a:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:46:49:F1:5D:B9:6F:96:A8:A1:AF:66:DB:1C:CE:84:A9:C3:B5:DF
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/LEZJ8V25b5aooa9m2xzOhKnDtd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.44.0/22
45.159.112.0/22
62.3.42.0/24
85.208.253.0-85.208.255.255
185.4.28.0/22
185.50.37.0-185.50.39.255
185.116.160.0/22
185.213.164.0/22
185.255.88.0/22
193.141.64.0/23
193.141.126.0/23
IPv6:
2a05:ab80::/48
2a05:ab80:3::-2a05:ab80:4:ffff:ffff:ffff:ffff:ffff
2a05:ab80:100::/48
2a05:ab80:200::/48
Signature Algorithm: sha256WithRSAEncryption
75:5c:18:08:71:b0:2f:2b:1b:a9:cf:87:e4:64:75:57:08:5a:
c7:53:5a:8e:ed:e9:43:90:2c:80:0e:06:74:cf:36:7c:7a:80:
fe:55:91:59:14:3a:ba:f2:1e:66:c8:fc:0f:d1:54:63:fd:f2:
1b:dd:a1:7d:f2:a4:1c:6d:de:61:e5:df:4e:15:01:94:43:2b:
12:de:62:4b:86:f9:92:05:68:c6:7a:5e:4e:e4:8b:ce:7e:a0:
4c:39:fd:2c:37:5b:f9:74:11:41:58:49:5d:00:0c:d0:c1:23:
85:12:55:9f:a7:54:3d:e8:b0:07:53:e8:e7:44:da:15:86:f3:
41:66:5f:13:08:8a:da:29:3e:5d:cd:1f:a3:a0:da:4d:27:9b:
21:4e:29:c2:13:3e:a1:69:be:68:18:b3:39:fd:68:4a:5a:6e:
8d:f5:fa:6e:6b:46:4e:f8:cd:6d:78:87:ac:04:37:8c:33:71:
25:54:e7:c6:ae:38:e4:85:a4:96:d2:b9:31:4d:16:c5:74:c0:
5f:bd:64:db:5e:76:4a:e3:19:9d:4a:41:be:ee:50:d0:bf:5c:
c8:63:4f:e6:ac:ba:07:06:58:6d:51:a1:d1:ed:23:21:0e:f1:
83:e9:a2:d8:ac:56:3f:91:be:31:97:0b:a6:a6:66:0e:f4:81:
ba:97:4e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 16:18:18 2024 by rpki-client on console-fra.rpki-client.org