Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/leKPu_8uSHrpucXARaboKtura2c.roa
File: leKPu_8uSHrpucXARaboKtura2c.roa (raw, json)
Hash identifier: GUcbes3YkXY70ZDq+182tpl+8sH9RntBQyFSRiSpIV4=
Subject key identifier: 95:E2:8F:BB:FF:2E:48:7A:E9:B9:C5:C0:45:A6:E8:2A:DB:AB:6B:67
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019753B28677631C17BB67104D20409DED70
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/leKPu_8uSHrpucXARaboKtura2c.roa
Signing time: Mon 09 Jun 2025 07:58:18 +0000
ROA not before: Mon 09 Jun 2025 07:58:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136787
IP address blocks: 79.132.72.0/24 maxlen: 24
79.132.73.0/24 maxlen: 24
79.132.74.0/24 maxlen: 24
79.132.75.0/24 maxlen: 24
79.135.152.0/24 maxlen: 24
79.135.153.0/24 maxlen: 24
79.135.155.0/24 maxlen: 24
80.81.40.0/24 maxlen: 24
80.81.49.0/24 maxlen: 24
80.81.50.0/24 maxlen: 24
80.81.52.0/24 maxlen: 24
80.81.56.0/24 maxlen: 24
85.254.10.0/24 maxlen: 24
85.254.45.0/24 maxlen: 24
85.254.47.0/24 maxlen: 24
85.254.62.0/24 maxlen: 24
85.254.70.0/24 maxlen: 24
85.254.72.0/24 maxlen: 24
85.254.104.0/24 maxlen: 24
85.254.105.0/24 maxlen: 24
85.254.106.0/24 maxlen: 24
85.254.107.0/24 maxlen: 24
85.254.108.0/24 maxlen: 24
85.254.109.0/24 maxlen: 24
85.254.110.0/24 maxlen: 24
85.254.111.0/24 maxlen: 24
85.254.116.0/24 maxlen: 24
85.254.122.0/24 maxlen: 24
85.254.188.0/24 maxlen: 24
85.254.189.0/24 maxlen: 24
85.254.191.0/24 maxlen: 24
91.190.40.0/24 maxlen: 24
91.190.41.0/24 maxlen: 24
91.190.43.0/24 maxlen: 24
91.190.44.0/24 maxlen: 24
91.190.46.0/24 maxlen: 24
91.190.62.0/24 maxlen: 24
91.190.63.0/24 maxlen: 24
159.148.125.0/24 maxlen: 24
159.148.138.0/24 maxlen: 24
159.148.150.0/24 maxlen: 24
159.148.222.0/24 maxlen: 24
159.148.242.0/24 maxlen: 24
159.148.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jun 2025 11:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b2:86:77:63:1c:17:bb:67:10:4d:20:40:9d:ed:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jun 9 07:58:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95e28fbbff2e487ae9b9c5c045a6e82adbab6b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:e9:f0:1f:bb:ee:2d:c7:9e:22:e6:dc:a4:
30:18:de:1c:f8:9b:2c:1b:09:ab:4a:62:a9:bd:0b:
f5:0e:09:52:65:c7:72:22:fd:bb:bf:83:59:a2:bf:
58:9e:87:8d:3a:15:0b:d7:03:8a:59:b7:35:5a:b7:
05:34:7a:16:9e:fc:4c:0c:9e:a7:6e:df:37:c5:fc:
ba:08:99:82:8b:a9:60:06:d2:55:b1:40:0c:dc:a3:
db:29:b5:35:6d:83:c9:0d:95:68:3c:28:72:fb:68:
46:6d:3d:84:60:05:93:c3:c4:ca:6b:c3:dc:82:2c:
82:f2:09:a2:50:a0:97:c4:61:c4:0e:24:01:7e:7d:
3f:c0:4b:bc:6a:85:ad:49:67:3f:dc:5a:dd:5c:66:
53:b0:73:be:00:be:0a:1f:55:ab:60:78:9a:bb:9f:
a9:7f:5a:32:72:59:f6:83:b1:ae:d5:9a:5d:8e:e2:
df:b8:d9:00:4d:9e:85:4a:15:48:46:9e:07:87:11:
5f:ec:89:d2:16:f8:42:a7:cf:e9:1a:56:d9:e4:1c:
42:1a:c4:ca:c5:b3:ba:61:81:32:3d:4a:66:72:6e:
d2:11:34:76:58:51:9a:49:ee:75:6f:6d:71:9b:14:
9c:e2:51:15:5f:50:fd:63:f5:92:b8:d4:28:39:3b:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E2:8F:BB:FF:2E:48:7A:E9:B9:C5:C0:45:A6:E8:2A:DB:AB:6B:67
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/leKPu_8uSHrpucXARaboKtura2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.72.0/22
79.135.152.0/23
79.135.155.0/24
80.81.40.0/24
80.81.49.0-80.81.50.255
80.81.52.0/24
80.81.56.0/24
85.254.10.0/24
85.254.45.0/24
85.254.47.0/24
85.254.62.0/24
85.254.70.0/24
85.254.72.0/24
85.254.104.0/21
85.254.116.0/24
85.254.122.0/24
85.254.188.0/23
85.254.191.0/24
91.190.40.0/23
91.190.43.0-91.190.44.255
91.190.46.0/24
91.190.62.0/23
159.148.125.0/24
159.148.138.0/24
159.148.150.0/24
159.148.222.0/24
159.148.242.0/23
Signature Algorithm: sha256WithRSAEncryption
32:3a:72:e6:86:00:3a:43:94:a0:8a:51:83:23:c6:0f:23:a0:
90:4d:dc:d1:5f:70:3a:96:c0:eb:8d:37:54:54:54:74:ca:31:
c8:38:60:f7:3d:8f:90:c3:bc:dd:0d:b6:a2:d5:68:43:f1:93:
df:4e:bb:ce:05:43:d7:3b:6d:b7:11:5a:50:4a:31:14:00:bf:
d2:64:7d:ce:5a:44:4a:aa:ac:b6:79:17:86:b8:3b:62:0f:3a:
3f:94:e3:2c:a1:69:0f:b0:15:8f:58:40:a1:99:07:71:da:f1:
8c:07:fc:28:e8:bc:c3:d7:96:e5:ff:2c:4b:14:3c:d9:e2:25:
4b:25:c5:84:f4:9e:5a:ab:3b:92:4d:12:74:c0:7f:e5:e1:e5:
13:00:63:4a:ca:e8:05:e1:fc:24:12:53:37:9f:59:c0:40:30:
cc:7f:33:05:5a:18:6e:74:ca:77:95:c8:b7:26:14:d5:30:83:
e5:1f:bc:93:38:97:ab:3d:67:18:60:cc:59:ae:ed:c7:70:f1:
70:f8:e6:d4:68:e2:f4:e6:d6:b8:df:6b:f8:a5:f8:ed:68:23:
99:19:60:46:16:9a:b0:51:c4:cf:6b:70:68:9e:b2:7c:9a:79:
42:5d:59:57:38:89:c2:59:2e:de:19:99:76:24:ca:ff:51:20:
60:14:08:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:10:29 2025 by rpki-client