Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/lmzFbkS0VKtRfaH1aeqR1mNUO-E.roa
File: lmzFbkS0VKtRfaH1aeqR1mNUO-E.roa (raw, json)
Hash identifier: h3uiyz0Vi5As41NMV907uBo0aeSjAJ0yJL8hd3HZXAQ=
Subject key identifier: 96:6C:C5:6E:44:B4:54:AB:51:7D:A1:F5:69:EA:91:D6:63:54:3B:E1
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 01938C29CDBF7F56A405D4A0D7A01945B818
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/lmzFbkS0VKtRfaH1aeqR1mNUO-E.roa
Signing time: Tue 03 Dec 2024 10:56:09 +0000
ROA not before: Tue 03 Dec 2024 10:56:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42065
IP address blocks: 91.108.0.0/22 maxlen: 24
91.108.24.0/21 maxlen: 24
91.108.32.0/23 maxlen: 24
91.108.52.0/24 maxlen: 24
94.124.176.0/22 maxlen: 23
94.124.178.0/23 maxlen: 24
95.140.92.0/24 maxlen: 24
95.140.94.0/24 maxlen: 24
95.161.0.0/18 maxlen: 24
95.161.88.0/22 maxlen: 24
95.161.96.0/23 maxlen: 24
95.161.102.0/23 maxlen: 24
95.161.104.0/23 maxlen: 24
95.161.248.0/21 maxlen: 21
185.51.60.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 11:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:29:cd:bf:7f:56:a4:05:d4:a0:d7:a0:19:45:b8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Dec 3 10:56:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=966cc56e44b454ab517da1f569ea91d663543be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:79:5f:fd:a1:ce:36:f6:a8:23:62:a2:09:f3:
73:31:ce:2c:14:2c:29:6e:27:19:02:75:cb:ad:2c:
9d:ee:06:27:68:b4:80:aa:4f:cd:47:66:04:71:10:
ea:56:7f:bf:38:12:f1:58:8e:13:74:62:0d:9f:69:
db:9e:b6:1f:0f:2f:27:2b:9f:b7:c8:13:d2:78:54:
5c:f8:a2:3d:10:99:7f:7d:f3:87:19:8a:22:26:3f:
e2:d0:80:e2:b8:62:9a:69:44:47:36:9a:8e:a6:0f:
56:c8:20:3e:69:79:f4:64:5f:bd:b8:cf:86:87:1e:
91:8c:bf:cb:49:eb:f0:e0:6f:65:78:bd:44:9a:2d:
12:d9:90:50:b0:bb:b0:25:3e:95:4b:d4:9d:bf:47:
f1:55:87:96:01:07:f1:c3:9a:eb:5a:c8:ab:0c:ab:
7c:87:06:17:8a:6b:35:70:82:22:54:87:34:99:e7:
a6:07:93:17:fa:89:43:18:05:19:78:67:77:15:30:
23:f9:97:a6:fc:29:5d:27:67:44:3c:91:f5:37:ba:
d7:c4:66:c9:a0:e6:5b:6b:7e:7c:be:4a:53:0c:38:
9f:8c:6b:77:5f:c4:d0:36:b9:17:4a:a0:f8:32:b9:
0c:55:2a:a1:85:e7:10:89:d0:b3:a8:a1:e9:b7:71:
eb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6C:C5:6E:44:B4:54:AB:51:7D:A1:F5:69:EA:91:D6:63:54:3B:E1
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/lmzFbkS0VKtRfaH1aeqR1mNUO-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.0.0/22
91.108.24.0-91.108.33.255
91.108.52.0/24
94.124.176.0/22
95.140.92.0/24
95.140.94.0/24
95.161.0.0/18
95.161.88.0/22
95.161.96.0/23
95.161.102.0-95.161.105.255
95.161.248.0/21
185.51.60.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:6c:e7:c2:96:c6:1b:89:7f:21:06:7d:55:d7:2b:a1:9e:7f:
cb:5b:8f:f0:3a:c8:8d:5b:20:59:a5:17:45:1f:f3:c9:68:60:
8f:e3:a0:0e:86:9b:09:9c:ee:26:14:5d:a1:1a:f4:23:ae:c9:
87:51:c5:7f:ad:62:04:28:72:81:47:74:fe:ef:7a:6b:cb:84:
80:2a:35:41:02:79:22:b4:8a:25:6a:f5:46:93:cf:1e:70:bd:
6f:da:0e:de:fc:99:41:00:ea:77:41:aa:89:9e:27:72:92:8d:
f7:64:29:f2:18:07:c6:72:b5:1d:ec:ad:20:60:58:bc:d8:10:
e9:08:4e:46:07:83:83:6b:47:ef:90:e8:b9:ea:5e:ad:d8:66:
3d:ec:e8:fa:41:b4:c0:b7:eb:f4:13:10:05:bf:c8:7f:f0:52:
b6:7c:2c:cf:b7:2e:6a:e8:ae:2c:b5:3d:cd:12:c4:f0:46:f5:
22:27:49:96:40:b7:9b:da:5b:e5:1e:40:9d:43:10:c1:e2:fa:
50:ce:48:ed:72:c0:9b:27:1e:40:08:5e:05:e2:4f:fb:29:e1:
0a:d4:5a:1b:8d:bf:63:4b:f1:92:11:c3:e1:50:55:97:44:b5:
6a:f7:d2:7f:14:ac:39:7b:71:77:e0:51:a5:27:52:7f:f8:c0:
72:7f:7c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:42:19 2025 by rpki-client