Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lZTIUQVRtLuM9hsyMmibCXMYvsI.roa
File: lZTIUQVRtLuM9hsyMmibCXMYvsI.roa (raw, json)
Hash identifier: Pa6/eMK9ZR5DmEiNi6eoz+2oH7sXofWm7twWLNVBuFM=
Subject key identifier: 95:94:C8:51:05:51:B4:BB:8C:F6:1B:32:32:68:9B:09:73:18:BE:C2
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019701CBAE6F6D84A02A73D165AFC9C7DF70
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lZTIUQVRtLuM9hsyMmibCXMYvsI.roa
Signing time: Sat 24 May 2025 10:16:55 +0000
ROA not before: Sat 24 May 2025 10:16:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 2.59.192.0/22 maxlen: 22
2.59.192.0/23 maxlen: 23
2.59.192.0/24 maxlen: 24
2.59.193.0/24 maxlen: 24
2.59.194.0/23 maxlen: 23
2.59.194.0/24 maxlen: 24
2.59.195.0/24 maxlen: 24
31.15.0.0/22 maxlen: 22
31.15.0.0/23 maxlen: 23
31.15.0.0/24 maxlen: 24
31.15.1.0/24 maxlen: 24
31.15.2.0/23 maxlen: 23
31.15.2.0/24 maxlen: 24
31.15.3.0/24 maxlen: 25
31.15.4.0/24 maxlen: 24
31.15.5.0/24 maxlen: 24
31.15.6.0/24 maxlen: 24
31.15.7.0/24 maxlen: 24
45.81.104.0/22 maxlen: 22
45.81.104.0/23 maxlen: 23
45.81.104.0/24 maxlen: 24
45.81.105.0/24 maxlen: 24
45.81.106.0/23 maxlen: 23
45.81.106.0/24 maxlen: 24
45.81.107.0/24 maxlen: 24
45.81.124.0/22 maxlen: 22
45.81.124.0/23 maxlen: 23
45.81.124.0/24 maxlen: 24
45.81.125.0/24 maxlen: 24
45.81.126.0/23 maxlen: 23
45.81.126.0/24 maxlen: 24
45.81.127.0/24 maxlen: 24
45.130.160.0/22 maxlen: 22
45.133.60.0/22 maxlen: 22
45.133.60.0/23 maxlen: 23
45.133.60.0/24 maxlen: 24
45.133.61.0/24 maxlen: 24
45.133.62.0/23 maxlen: 23
45.133.62.0/24 maxlen: 24
45.133.63.0/24 maxlen: 24
45.137.12.0/23 maxlen: 23
45.137.12.0/24 maxlen: 24
45.137.13.0/24 maxlen: 24
45.137.136.0/23 maxlen: 23
45.137.139.0/24 maxlen: 24
45.145.135.0/24 maxlen: 24
45.150.84.0/22 maxlen: 22
45.150.84.0/23 maxlen: 23
45.150.84.0/24 maxlen: 24
45.150.85.0/24 maxlen: 24
45.150.86.0/23 maxlen: 23
45.150.86.0/24 maxlen: 24
45.150.87.0/24 maxlen: 24
45.152.140.0/22 maxlen: 22
45.152.140.0/23 maxlen: 23
45.152.140.0/24 maxlen: 24
45.152.141.0/24 maxlen: 24
45.152.142.0/23 maxlen: 23
45.152.142.0/24 maxlen: 24
45.152.143.0/24 maxlen: 24
45.155.56.0/22 maxlen: 22
45.155.56.0/23 maxlen: 23
45.155.56.0/24 maxlen: 24
45.155.57.0/24 maxlen: 24
45.155.58.0/23 maxlen: 23
45.155.58.0/24 maxlen: 24
45.155.59.0/24 maxlen: 24
89.190.152.0/22 maxlen: 22
89.190.152.0/24 maxlen: 24
89.190.153.0/24 maxlen: 24
89.190.154.0/24 maxlen: 24
89.190.155.0/24 maxlen: 24
92.118.180.0/22 maxlen: 22
92.118.180.0/23 maxlen: 23
92.118.180.0/24 maxlen: 24
92.118.181.0/24 maxlen: 24
92.118.182.0/23 maxlen: 23
92.118.182.0/24 maxlen: 24
92.118.183.0/24 maxlen: 24
178.19.40.0/24 maxlen: 24
178.19.41.0/24 maxlen: 24
178.19.42.0/24 maxlen: 24
185.28.51.0/24 maxlen: 24
185.229.216.0/22 maxlen: 22
185.229.216.0/23 maxlen: 23
185.229.217.0/24 maxlen: 24
185.229.218.0/23 maxlen: 23
185.229.219.0/24 maxlen: 24
185.231.184.0/22 maxlen: 22
185.231.186.0/24 maxlen: 24
185.231.187.0/24 maxlen: 24
185.241.122.0/23 maxlen: 23
185.244.228.0/23 maxlen: 23
185.244.228.0/24 maxlen: 24
185.244.229.0/24 maxlen: 24
185.244.230.0/24 maxlen: 24
185.244.231.0/24 maxlen: 24
185.246.12.0/23 maxlen: 23
185.246.12.0/24 maxlen: 24
185.246.13.0/24 maxlen: 24
185.246.14.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
194.31.104.0/22 maxlen: 22
194.31.104.0/23 maxlen: 23
194.31.104.0/24 maxlen: 24
194.31.105.0/24 maxlen: 24
194.31.106.0/23 maxlen: 23
194.31.106.0/24 maxlen: 24
194.31.107.0/24 maxlen: 24
194.32.112.0/22 maxlen: 22
194.32.112.0/24 maxlen: 24
194.32.113.0/24 maxlen: 24
194.32.114.0/24 maxlen: 24
194.32.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 May 2025 10:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:01:cb:ae:6f:6d:84:a0:2a:73:d1:65:af:c9:c7:df:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 24 10:16:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9594c8510551b4bb8cf61b3232689b097318bec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:2d:db:b6:e7:13:70:d9:6b:92:b5:03:29:
17:52:67:d7:c0:09:bb:72:1c:e3:4e:47:21:3e:10:
85:c1:20:21:d4:09:91:de:44:11:ff:90:43:97:27:
d6:fd:af:95:be:cd:15:53:0b:b8:ae:57:fb:89:61:
53:16:7b:95:97:5d:ff:15:e3:72:88:f6:76:f2:3c:
f0:fa:5f:ad:75:a2:fd:bc:f1:fe:cb:de:ae:4f:5e:
01:eb:12:0b:48:c2:cd:a7:21:4f:7f:af:9b:fa:37:
9c:0e:41:b2:8c:c1:a0:23:5c:db:7b:fb:f2:cf:5c:
d7:d0:18:eb:97:6a:a6:07:10:f3:90:25:5b:cb:f2:
ae:1f:3b:a0:cf:ef:fb:e9:98:0a:63:0a:19:76:54:
22:7d:5e:78:1c:d1:dc:80:8e:42:a8:67:3d:85:e4:
81:65:1e:06:c7:a4:3c:a3:ac:23:50:a9:86:8d:9f:
5b:4a:4a:ea:67:bf:9e:d5:63:9c:06:d3:24:43:58:
e8:0e:8c:a6:58:63:16:a4:a9:91:24:3e:8f:62:f7:
88:69:fb:d0:ad:c6:37:97:70:69:7a:fa:27:f8:18:
be:87:cf:d4:e9:8e:32:60:2c:8a:d7:1c:d4:fe:37:
a5:1b:3f:b8:d4:bc:df:f8:b8:cb:9d:9e:c0:da:ec:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:94:C8:51:05:51:B4:BB:8C:F6:1B:32:32:68:9B:09:73:18:BE:C2
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lZTIUQVRtLuM9hsyMmibCXMYvsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.192.0/22
31.15.0.0/21
45.81.104.0/22
45.81.124.0/22
45.130.160.0/22
45.133.60.0/22
45.137.12.0/23
45.137.136.0/23
45.137.139.0/24
45.145.135.0/24
45.150.84.0/22
45.152.140.0/22
45.155.56.0/22
89.190.152.0/22
92.118.180.0/22
178.19.40.0-178.19.42.255
185.28.51.0/24
185.229.216.0/22
185.231.184.0/22
185.241.122.0/23
185.244.228.0/22
185.246.12.0/22
194.31.104.0/22
194.32.112.0/22
Signature Algorithm: sha256WithRSAEncryption
15:28:27:b9:3b:41:d4:49:76:ae:3a:7e:eb:da:1f:1a:45:61:
a9:ee:6b:f8:f6:58:00:62:9b:15:51:9c:9a:f5:be:41:9c:39:
91:be:0d:3c:29:32:1d:b1:7c:ae:e4:0c:77:32:b0:5e:2e:d7:
88:f2:d1:fc:dd:38:ce:37:f9:30:17:92:7d:f9:d5:d2:24:d5:
9b:ca:44:d7:41:85:65:33:46:30:38:d3:de:82:18:e6:b5:46:
bf:fa:75:37:2c:6d:97:15:75:45:79:77:13:a0:ff:89:48:bd:
f9:25:9d:ec:67:8f:11:10:cc:10:89:62:d5:5e:3f:62:8f:38:
7e:3c:21:93:ec:08:e4:57:a5:c2:15:21:47:73:15:2d:ae:cb:
3d:52:7b:c1:31:01:61:46:5d:2a:2b:82:77:7e:2e:9f:e3:8f:
4c:53:c8:b2:42:e0:5b:1b:5a:33:6b:08:38:f7:76:03:0b:39:
49:17:21:8f:79:62:05:bc:d7:b2:b5:c0:40:b0:fc:18:20:33:
0b:4d:48:be:ac:2c:c8:e8:c9:23:ae:1a:a2:ea:05:48:fc:7c:
2d:42:1d:1a:7f:2e:2d:b1:45:f8:45:9e:da:f4:ec:3b:53:1e:
33:96:ee:3a:d6:46:f8:f7:cd:51:bc:f7:3e:45:96:cb:5e:e2:
42:52:7f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:01:52 2025 by rpki-client