Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/LMIPc1JILgF_OekFqmzo04XRnQs.roa
File: LMIPc1JILgF_OekFqmzo04XRnQs.roa (raw, json)
Hash identifier: 3R4FwJouZRG1C7ZKhMUl/tcVdqDQkf1xI5ZmT6vN1VQ=
Subject key identifier: 2C:C2:0F:73:52:48:2E:01:7F:39:E9:05:AA:6C:E8:D3:85:D1:9D:0B
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 01942CB7A069ADAF3DA8ACE072893682DC83
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/LMIPc1JILgF_OekFqmzo04XRnQs.roa
Signing time: Fri 03 Jan 2025 15:10:19 +0000
ROA not before: Fri 03 Jan 2025 15:10:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203396
IP address blocks: 145.12.0.0/16 maxlen: 24
145.12.0.0/24 maxlen: 24
145.12.10.0/24 maxlen: 24
145.12.20.0/24 maxlen: 24
145.12.26.0/24 maxlen: 24
145.12.27.0/24 maxlen: 24
145.12.31.0/24 maxlen: 24
145.12.34.0/24 maxlen: 24
145.12.40.0/24 maxlen: 24
145.12.137.0/24 maxlen: 24
145.12.210.0/24 maxlen: 24
145.12.216.0/24 maxlen: 24
145.12.217.0/24 maxlen: 24
145.12.227.0/24 maxlen: 24
145.69.0.0/16 maxlen: 16
145.69.0.0/19 maxlen: 19
145.69.25.0/24 maxlen: 24
145.69.40.0/21 maxlen: 21
145.69.47.0/24 maxlen: 24
145.69.56.0/21 maxlen: 21
145.69.96.0/19 maxlen: 19
145.69.100.0/24 maxlen: 24
145.69.101.0/24 maxlen: 24
145.69.102.0/24 maxlen: 24
145.69.103.0/24 maxlen: 24
145.69.104.0/24 maxlen: 24
145.69.105.0/24 maxlen: 24
145.69.106.0/24 maxlen: 24
145.69.107.0/24 maxlen: 24
145.69.108.0/24 maxlen: 24
145.69.109.0/24 maxlen: 24
145.69.110.0/24 maxlen: 24
145.69.128.0/17 maxlen: 17
145.69.210.0/24 maxlen: 24
145.69.216.0/24 maxlen: 24
145.69.221.0/24 maxlen: 24
145.69.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 17:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:b7:a0:69:ad:af:3d:a8:ac:e0:72:89:36:82:dc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Jan 3 15:10:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cc20f7352482e017f39e905aa6ce8d385d19d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:5c:f7:11:09:97:9e:85:3e:a1:ea:74:92:
0c:f9:ea:e1:e6:17:e6:80:a2:1c:4c:cb:aa:de:d5:
d4:5d:a8:72:05:db:80:57:49:90:ad:70:90:0d:eb:
13:c8:5c:72:3e:44:cb:be:be:d8:78:32:a7:55:05:
0a:7e:63:12:d1:1f:ec:35:13:83:4c:f2:8d:c4:03:
7a:47:70:68:6a:28:5f:91:6b:ad:a9:8e:60:be:07:
ab:89:ce:4b:45:2d:2d:7e:75:71:00:c4:92:d2:c6:
38:06:a5:d1:b9:42:21:54:d5:5b:a6:02:35:e7:fb:
f2:8f:8c:ac:3b:a6:86:f2:b7:b7:c3:32:17:2f:f7:
4c:15:5e:8e:00:32:3b:3c:09:26:59:d3:3f:e4:e2:
90:b7:3c:d6:b5:95:79:07:ef:d9:34:e6:0b:0c:b6:
19:37:2e:bb:00:30:f3:f9:ae:a9:90:7c:f2:02:80:
5f:4a:80:92:15:21:8b:95:6d:48:78:f3:7f:9b:fe:
9a:98:31:b3:a2:c8:2c:8a:a6:d0:27:68:ea:e9:10:
55:8c:18:99:41:37:70:8a:7e:07:ff:01:90:95:77:
5f:f7:ce:94:66:99:1a:08:26:1c:f0:0a:8d:39:b7:
21:bd:d6:c4:c6:76:2d:06:e0:91:22:66:87:01:99:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C2:0F:73:52:48:2E:01:7F:39:E9:05:AA:6C:E8:D3:85:D1:9D:0B
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/LMIPc1JILgF_OekFqmzo04XRnQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.12.0.0/16
145.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:b5:60:9c:47:c7:ff:b2:27:08:86:f3:68:b2:5b:83:c4:ae:
29:1d:64:40:9e:64:31:46:98:23:c3:d1:17:ab:f0:da:73:cf:
9d:99:d2:92:1d:2b:a4:40:64:0c:eb:ee:c8:df:21:44:08:a9:
de:8b:b2:d9:ff:1f:4b:e8:bd:ea:b4:b3:66:d7:12:d7:d4:d0:
9c:e7:b2:7a:dd:22:7b:97:75:b7:0a:fc:e6:23:4d:c4:6a:37:
f0:cc:a4:15:d4:d0:30:70:1b:45:c3:d7:85:cc:b4:0d:d9:0d:
64:42:b8:86:8c:a6:c2:e0:fa:f9:80:43:fa:63:17:88:f4:05:
a6:7b:5c:7c:cd:b8:35:95:1c:7c:91:cb:08:37:3b:c2:69:e5:
10:31:0d:20:ac:09:7c:45:7a:2f:d0:44:c3:73:48:94:8e:59:
e3:ad:15:f8:4a:b5:82:64:03:17:24:74:3a:db:34:8d:1d:5a:
bb:24:ba:92:76:74:84:02:57:19:e3:29:24:ab:26:cc:b9:e5:
30:cf:17:32:c4:de:f5:8e:51:36:ca:9e:8d:cd:6f:83:7d:0f:
59:cc:9b:a9:4a:7a:e3:4b:fd:4c:04:e3:17:e6:a1:c7:f2:3e:
ff:c1:26:b5:d3:38:05:5b:07:32:a4:3c:e4:b5:4d:d8:9c:0e:
14:66:1c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:12 2025 by rpki-client