Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/LbNeeWR0-AWIwLED7AGj5Mkh2Dw.roa
File: LbNeeWR0-AWIwLED7AGj5Mkh2Dw.roa (raw, json)
Hash identifier: DraufZRNhvP252pAYPv7ZDYAypnPwrdPWSAuLwAT3tQ=
Subject key identifier: 2D:B3:5E:79:64:74:F8:05:88:C0:B1:03:EC:01:A3:E4:C9:21:D8:3C
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018E86D53C57DBAEE2AB3DD894408570AD8D
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/LbNeeWR0-AWIwLED7AGj5Mkh2Dw.roa
Signing time: Thu 28 Mar 2024 20:51:45 +0000
ROA not before: Thu 28 Mar 2024 20:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 2.56.247.0/24 maxlen: 24
5.253.246.0/24 maxlen: 24
37.221.92.0/24 maxlen: 24
37.221.94.0/24 maxlen: 24
45.13.227.0/24 maxlen: 24
45.84.196.0/24 maxlen: 24
45.84.198.0/24 maxlen: 24
45.131.108.0/24 maxlen: 24
45.131.111.0/24 maxlen: 24
45.137.201.0/24 maxlen: 24
45.137.203.0/24 maxlen: 24
45.142.107.0/24 maxlen: 24
45.147.7.0/24 maxlen: 24
45.151.56.0/24 maxlen: 24
185.117.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 21:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:d5:3c:57:db:ae:e2:ab:3d:d8:94:40:85:70:ad:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Mar 28 20:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2db35e796474f80588c0b103ec01a3e4c921d83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:4b:c5:f0:81:24:d1:79:e5:c1:8a:2f:96:
53:1c:ae:f3:8a:1c:85:05:ad:6b:af:4b:ce:ff:d0:
3b:f7:08:02:f3:20:d3:0e:5c:87:45:9e:13:64:a2:
0e:02:db:6e:39:0e:bc:3d:a0:80:5c:7d:bd:df:87:
6c:8d:44:98:04:d7:2e:a3:2d:61:54:2c:4b:70:e5:
30:1c:51:02:2f:e8:be:10:cd:67:97:88:90:a3:8b:
fc:93:2c:02:6e:4e:1d:41:44:4a:5b:b0:73:36:12:
a4:68:4e:6a:63:5d:7f:c7:69:7f:1f:4f:8f:65:5d:
2d:f8:61:08:67:10:0b:08:ff:8d:c9:1f:df:f8:e4:
82:e3:22:91:cf:35:68:4a:de:65:6f:b2:15:4b:6e:
00:aa:76:3f:17:09:c4:b2:aa:b9:a2:37:ee:1f:69:
20:67:e9:4c:31:95:1b:3e:73:dc:90:f6:f2:8f:55:
7c:23:bc:1c:07:d4:4e:dc:05:19:e5:bf:24:27:fe:
d0:df:e4:3d:14:1f:f9:2f:36:c9:63:da:4e:95:23:
4f:50:ba:94:7a:94:24:b1:bf:96:70:e3:ca:aa:22:
33:b1:73:59:c9:34:84:1b:54:7a:ed:c7:68:c4:bf:
43:af:24:a8:08:fa:62:fc:4d:99:5c:11:be:a5:37:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B3:5E:79:64:74:F8:05:88:C0:B1:03:EC:01:A3:E4:C9:21:D8:3C
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/LbNeeWR0-AWIwLED7AGj5Mkh2Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.247.0/24
5.253.246.0/24
37.221.92.0/24
37.221.94.0/24
45.13.227.0/24
45.84.196.0/24
45.84.198.0/24
45.131.108.0/24
45.131.111.0/24
45.137.201.0/24
45.137.203.0/24
45.142.107.0/24
45.147.7.0/24
45.151.56.0/24
185.117.3.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a2:f6:a3:9a:97:03:1a:be:eb:2f:f1:e5:e0:03:7e:aa:52:
8a:27:1c:88:25:35:4e:78:40:0b:52:2c:29:b7:1a:e3:e1:ce:
b9:c1:db:b3:76:09:b8:b4:7a:7d:65:dc:98:94:7c:b8:3c:45:
8d:2f:43:12:03:1c:38:2e:5e:82:a1:90:4e:78:f2:f6:c8:2a:
86:1f:1f:ce:e1:0f:58:0a:95:4c:bc:ab:a6:9f:7f:55:02:f0:
8d:cc:e2:d1:a1:7b:84:ef:d7:81:7b:7e:e3:4d:e4:fb:f0:97:
e0:01:17:ba:c0:9e:57:55:a9:2a:8b:2c:55:98:21:25:5c:16:
8f:f5:ea:d7:57:88:8e:f0:ab:53:f9:ea:60:b8:28:ad:c0:56:
2f:92:93:5b:2f:e2:a9:c1:8f:c0:f5:81:9a:0e:9c:71:dd:1c:
5b:89:a6:83:6e:70:59:7c:36:f7:6e:0e:cb:85:f2:14:fa:3b:
7f:63:f1:2b:9b:c2:db:70:bc:72:b2:f3:09:eb:53:0f:f3:08:
fc:28:a1:f6:35:d3:cf:03:75:c9:dd:20:9b:52:c7:ed:d8:9d:
6a:0d:e0:89:39:44:5b:78:7b:d7:89:0e:01:1e:67:8d:3a:2d:
dc:7e:ef:d9:c0:d6:ff:82:46:ab:8f:9e:c2:cf:82:8a:3e:a0:
62:e9:b2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:16:41 2025 by rpki-client