Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/92_lpvu0TpTiT4DNIWeFf0NJgsU.roa
File: 92_lpvu0TpTiT4DNIWeFf0NJgsU.roa (raw, json)
Hash identifier: +RorohqUqmQIka1gRYIZnkJ5Gio7N4b0U64JNxmCXTc=
Subject key identifier: F7:6F:E5:A6:FB:B4:4E:94:E2:4F:80:CD:21:67:85:7F:43:49:82:C5
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 0192FBDD8432ECFDD01FCF8382BEA1E85626
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/92_lpvu0TpTiT4DNIWeFf0NJgsU.roa
Signing time: Tue 05 Nov 2024 10:27:31 +0000
ROA not before: Tue 05 Nov 2024 10:27:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56654
IP address blocks: 77.81.68.0/22 maxlen: 22
85.204.164.0/22 maxlen: 22
89.39.176.0/22 maxlen: 22
94.24.111.0/24 maxlen: 24
185.85.176.0/21 maxlen: 21
188.208.128.0/22 maxlen: 22
188.214.244.0/22 maxlen: 22
188.214.248.0/21 maxlen: 21
2a04:f980::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fb:dd:84:32:ec:fd:d0:1f:cf:83:82:be:a1:e8:56:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Nov 5 10:27:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f76fe5a6fbb44e94e24f80cd2167857f434982c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fe:26:16:c8:e0:c9:7d:3c:46:70:bf:c5:1a:
43:a9:59:d2:ab:89:6e:27:03:05:43:89:8d:d5:32:
0c:b5:46:72:f0:31:36:45:7a:11:0a:f9:09:c6:72:
99:74:57:e5:59:bc:53:ca:37:46:bc:22:97:6f:f9:
8d:50:46:53:98:e2:b9:28:69:18:7c:f9:75:72:6f:
26:ee:48:1c:30:70:f9:ba:d0:02:40:f2:28:f3:58:
c0:66:cb:ff:85:a4:d7:b2:f9:1d:07:d3:e9:e4:76:
94:8b:9a:38:73:1a:b1:67:58:b4:4a:d2:9e:bd:c3:
61:a9:6c:33:5c:44:9a:59:73:04:7a:32:60:de:7a:
24:22:2e:0c:71:ff:a9:cd:48:92:81:e8:90:c9:a8:
2a:b6:dd:5b:8b:34:ef:2b:35:8d:8f:1f:66:56:60:
22:57:80:0b:6c:52:7c:7e:96:21:4f:9b:f2:1c:00:
ce:ff:e4:e7:7b:11:04:54:97:4a:f0:05:40:4b:e7:
23:6f:87:e0:93:8b:f6:e9:c8:42:4a:a9:8f:20:46:
99:53:e8:b8:d7:78:ea:6c:2b:63:6f:0d:20:be:77:
3f:9c:ae:1a:1f:1c:8f:76:3a:32:92:48:97:26:36:
81:7f:3b:36:f5:55:72:f3:59:09:a3:09:4f:43:74:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6F:E5:A6:FB:B4:4E:94:E2:4F:80:CD:21:67:85:7F:43:49:82:C5
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/92_lpvu0TpTiT4DNIWeFf0NJgsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.68.0/22
85.204.164.0/22
89.39.176.0/22
94.24.111.0/24
185.85.176.0/21
188.208.128.0/22
188.214.244.0-188.214.255.255
IPv6:
2a04:f980::/29
Signature Algorithm: sha256WithRSAEncryption
23:48:3e:d8:b0:e6:d0:82:a6:f6:26:d6:f6:9b:fa:b4:21:3c:
99:68:3b:f1:2b:54:e4:c6:78:45:5d:9b:c3:24:b9:c1:25:74:
a3:bf:b1:33:11:68:a6:31:0d:95:0b:72:10:02:e6:22:89:3f:
86:08:85:88:0c:e0:a6:ad:ba:cf:41:3a:ea:18:df:f6:47:95:
71:df:74:4d:0c:d7:17:5f:94:0f:b9:5c:40:c7:8e:b7:d7:a9:
98:86:ef:7c:d5:f0:08:69:ce:18:2b:4e:c6:80:5e:02:52:70:
4f:b0:c1:54:1b:79:38:fa:f5:d6:29:82:47:39:a5:0f:ec:c7:
5c:07:e8:37:46:30:f5:ab:32:9f:ff:47:9c:ea:56:b8:b6:86:
19:0a:80:70:5b:b7:97:17:76:f2:23:37:62:ee:98:86:e5:69:
d1:12:eb:2b:fc:bf:12:74:c7:a3:c4:e6:e9:ad:c4:4e:a3:97:
fd:0b:e2:44:1c:f0:c2:65:8a:02:0d:dd:06:28:91:41:db:63:
e3:29:cb:9f:3e:76:92:25:cd:5b:5a:bb:75:29:cc:6a:fe:be:
58:e8:7b:e0:ae:aa:9c:1f:f7:ae:dc:f3:76:25:72:88:bb:73:
4b:36:75:6e:56:e9:8f:33:ec:a4:ef:6d:e8:e3:8e:20:3a:1e:
48:fe:e4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:01:52 2025 by rpki-client