Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3lthfLVZRlbCfedTxVxxUBpgFLA.roa
File: 3lthfLVZRlbCfedTxVxxUBpgFLA.roa (raw, json)
Hash identifier: 90t3fpWBIjh/TBGYMUHZNiHEb13zVLM9fuqDqmNdDWY=
Subject key identifier: DE:5B:61:7C:B5:59:46:56:C2:7D:E7:53:C5:5C:71:50:1A:60:14:B0
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01970C6BB6A9852657919E23DB03D06B7B1D
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3lthfLVZRlbCfedTxVxxUBpgFLA.roa
Signing time: Mon 26 May 2025 11:47:55 +0000
ROA not before: Mon 26 May 2025 11:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47690
IP address blocks: 45.43.148.0/24 maxlen: 24
45.43.149.0/24 maxlen: 24
45.43.150.0/24 maxlen: 24
45.43.151.0/24 maxlen: 24
45.43.154.0/24 maxlen: 24
45.43.158.0/24 maxlen: 24
45.43.161.0/24 maxlen: 24
104.222.176.0/24 maxlen: 24
104.222.178.0/24 maxlen: 24
104.222.179.0/24 maxlen: 24
104.222.180.0/24 maxlen: 24
104.222.181.0/24 maxlen: 24
104.222.182.0/24 maxlen: 24
104.222.183.0/24 maxlen: 24
104.222.189.0/24 maxlen: 24
104.233.8.0/24 maxlen: 24
104.233.9.0/24 maxlen: 24
104.233.59.0/24 maxlen: 24
104.238.6.0/24 maxlen: 24
104.238.11.0/24 maxlen: 24
104.238.12.0/24 maxlen: 24
104.238.13.0/24 maxlen: 24
104.239.8.0/24 maxlen: 24
104.239.12.0/24 maxlen: 24
104.239.14.0/24 maxlen: 24
104.239.29.0/24 maxlen: 24
104.239.55.0/24 maxlen: 24
104.239.56.0/24 maxlen: 24
104.239.58.0/24 maxlen: 24
104.239.59.0/24 maxlen: 24
104.239.60.0/24 maxlen: 24
104.239.61.0/24 maxlen: 24
104.239.62.0/24 maxlen: 24
104.239.63.0/24 maxlen: 24
104.249.8.0/24 maxlen: 24
104.249.9.0/24 maxlen: 24
104.249.10.0/24 maxlen: 24
104.249.11.0/24 maxlen: 24
104.249.12.0/24 maxlen: 24
104.249.13.0/24 maxlen: 24
104.249.14.0/24 maxlen: 24
104.249.15.0/24 maxlen: 24
104.249.16.0/24 maxlen: 24
104.249.17.0/24 maxlen: 24
104.249.18.0/24 maxlen: 24
104.249.19.0/24 maxlen: 24
104.249.20.0/24 maxlen: 24
104.249.21.0/24 maxlen: 24
104.249.22.0/24 maxlen: 24
104.249.23.0/24 maxlen: 24
104.249.42.0/24 maxlen: 24
104.249.43.0/24 maxlen: 24
104.249.44.0/24 maxlen: 24
104.249.45.0/24 maxlen: 24
104.249.46.0/24 maxlen: 24
104.249.47.0/24 maxlen: 24
104.249.48.0/24 maxlen: 24
104.249.49.0/24 maxlen: 24
104.249.50.0/24 maxlen: 24
104.249.51.0/24 maxlen: 24
104.249.52.0/24 maxlen: 24
104.249.53.0/24 maxlen: 24
104.249.54.0/24 maxlen: 24
216.173.90.0/24 maxlen: 24
216.173.91.0/24 maxlen: 24
216.173.92.0/24 maxlen: 24
216.173.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 10:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:6b:b6:a9:85:26:57:91:9e:23:db:03:d0:6b:7b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 26 11:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de5b617cb5594656c27de753c55c71501a6014b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:55:44:f2:13:3d:e7:01:b3:c0:d0:73:32:
b9:2c:53:7d:da:6e:71:aa:67:62:aa:df:19:e2:b2:
d1:63:2b:76:a0:78:e1:49:10:f0:ab:9d:88:4a:39:
f1:91:c9:8c:d5:07:6f:fd:21:a9:46:b3:a7:ac:e5:
3b:d1:0b:27:dd:07:e1:70:19:2b:61:33:d3:34:d2:
a6:6e:1f:00:11:ba:4d:68:ba:cf:3d:8c:77:ae:12:
0e:aa:4b:6b:45:17:c6:66:f9:ff:93:c3:88:6a:61:
5f:7f:0e:e0:d1:6b:7e:ce:1c:bd:03:ef:5c:39:4e:
e2:dc:42:f7:09:86:e4:11:ca:8f:52:3e:14:36:61:
1b:03:a2:fc:59:bf:4b:8c:6f:b1:a6:b6:99:8c:bd:
34:7f:44:a8:09:bf:40:8b:0b:7f:68:a3:58:2a:8c:
4e:47:b9:ba:a7:e5:38:8a:d1:13:65:e7:6f:de:1f:
02:7c:01:ac:52:b1:f6:7c:6d:25:8e:c1:d4:23:37:
96:e6:ea:ce:cb:0b:6e:69:0a:35:38:a9:e4:9d:e8:
aa:c7:6a:29:2c:95:83:ef:fa:cc:19:76:c1:74:22:
23:bb:aa:1a:f4:50:54:85:69:08:1d:10:7a:86:f2:
d6:43:01:e5:5c:6b:60:89:95:3c:c6:1d:a5:83:8f:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5B:61:7C:B5:59:46:56:C2:7D:E7:53:C5:5C:71:50:1A:60:14:B0
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3lthfLVZRlbCfedTxVxxUBpgFLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.148.0/22
45.43.154.0/24
45.43.158.0/24
45.43.161.0/24
104.222.176.0/24
104.222.178.0-104.222.183.255
104.222.189.0/24
104.233.8.0/23
104.233.59.0/24
104.238.6.0/24
104.238.11.0-104.238.13.255
104.239.8.0/24
104.239.12.0/24
104.239.14.0/24
104.239.29.0/24
104.239.55.0-104.239.56.255
104.239.58.0-104.239.63.255
104.249.8.0-104.249.23.255
104.249.42.0-104.249.54.255
216.173.90.0-216.173.93.255
Signature Algorithm: sha256WithRSAEncryption
9a:a6:7f:4b:18:05:b9:5c:c4:df:e9:4c:33:4d:97:f3:32:77:
82:67:10:55:57:1a:df:88:42:84:75:80:95:09:b7:5a:f7:21:
03:f5:cf:b3:cb:a2:c7:5f:26:4f:ad:ae:4a:ce:7f:68:74:dd:
cf:44:e4:e9:c1:f6:7c:76:86:8a:62:1d:85:68:ae:c5:6d:9b:
ee:48:5b:07:20:71:04:49:2b:83:e9:29:8e:91:ab:c1:6b:5c:
b7:86:9b:39:00:66:c1:5b:31:23:fb:61:34:cb:fd:58:c5:dd:
47:4a:ca:40:04:bf:3f:7e:55:5e:3b:ed:32:ae:20:6a:bf:2a:
fa:9d:ac:29:58:2e:79:a2:3a:41:81:06:d3:f3:f1:b6:c6:02:
59:b5:b0:b9:26:05:67:c5:86:e9:70:09:0b:1f:13:47:f4:fe:
36:e0:c5:a2:46:60:4f:5a:a4:69:37:53:fe:34:24:1a:48:d8:
5d:e4:1e:1f:86:9b:a3:ab:c6:71:a3:7f:dc:74:8d:5f:ad:8a:
c4:b8:47:5e:7b:e0:cb:3a:3d:c7:01:a7:a0:13:45:58:5a:6c:
d5:63:b2:fc:aa:87:ef:ca:ac:c8:af:7b:f9:00:c1:e5:64:d5:
d8:b0:fd:f5:0c:e8:6f:4b:a2:51:98:3c:cc:cc:f5:e0:97:27:
af:64:ff:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:55:27 2025 by rpki-client