Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/LFLk72erZmucvLT50uYlZHGTpTs.roa
File: LFLk72erZmucvLT50uYlZHGTpTs.roa (raw, json)
Hash identifier: mEpZ2zZZJ9V4WOWKk4YXZDZeXhEFpHce6JykESKXNFk=
Subject key identifier: 2C:52:E4:EF:67:AB:66:6B:9C:BC:B4:F9:D2:E6:25:64:71:93:A5:3B
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 019615BB33E3A345ABCA6D35FFAA4134278F
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/LFLk72erZmucvLT50uYlZHGTpTs.roa
Signing time: Tue 08 Apr 2025 14:08:32 +0000
ROA not before: Tue 08 Apr 2025 14:08:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 2.57.88.0/23 maxlen: 24
2.57.90.0/24 maxlen: 24
2.57.91.0/24 maxlen: 24
31.170.160.0/22 maxlen: 24
31.170.164.0/23 maxlen: 24
31.170.164.0/24 maxlen: 24
31.170.165.0/24 maxlen: 24
31.170.166.0/23 maxlen: 24
31.220.16.0/24 maxlen: 24
31.220.17.0/24 maxlen: 24
31.220.18.0/24 maxlen: 24
31.220.19.0/24 maxlen: 24
31.220.20.0/23 maxlen: 24
31.220.20.0/24 maxlen: 24
31.220.21.0/24 maxlen: 24
31.220.22.0/24 maxlen: 24
31.220.23.0/24 maxlen: 24
31.220.48.0/20 maxlen: 24
31.220.104.0/24 maxlen: 24
31.220.105.0/24 maxlen: 24
31.220.106.0/24 maxlen: 24
31.220.107.0/24 maxlen: 24
31.220.108.0/24 maxlen: 24
31.220.109.0/24 maxlen: 24
31.220.110.0/24 maxlen: 24
31.220.111.0/24 maxlen: 24
45.13.132.0/23 maxlen: 24
45.13.134.0/23 maxlen: 24
45.13.252.0/23 maxlen: 24
45.13.254.0/23 maxlen: 24
45.87.80.0/22 maxlen: 24
45.93.136.0/22 maxlen: 24
93.188.160.0/21 maxlen: 24
141.136.33.0/24 maxlen: 24
141.136.34.0/24 maxlen: 24
141.136.35.0/24 maxlen: 24
141.136.36.0/24 maxlen: 24
141.136.39.0/24 maxlen: 24
141.136.41.0/24 maxlen: 24
141.136.42.0/24 maxlen: 24
141.136.43.0/24 maxlen: 24
141.136.44.0/24 maxlen: 24
141.136.45.0/24 maxlen: 24
141.136.46.0/24 maxlen: 24
141.136.47.0/24 maxlen: 24
153.92.0.0/24 maxlen: 24
153.92.1.0/24 maxlen: 24
153.92.2.0/24 maxlen: 24
153.92.3.0/24 maxlen: 24
153.92.4.0/23 maxlen: 24
153.92.6.0/23 maxlen: 24
153.92.6.0/24 maxlen: 24
153.92.7.0/24 maxlen: 24
153.92.8.0/21 maxlen: 24
153.92.8.0/24 maxlen: 24
153.92.9.0/24 maxlen: 24
153.92.10.0/24 maxlen: 24
153.92.11.0/24 maxlen: 24
153.92.12.0/24 maxlen: 24
153.92.13.0/24 maxlen: 24
153.92.14.0/24 maxlen: 24
153.92.15.0/24 maxlen: 24
153.92.208.0/22 maxlen: 24
153.92.212.0/22 maxlen: 24
153.92.216.0/21 maxlen: 24
156.67.64.0/20 maxlen: 24
156.67.208.0/20 maxlen: 24
185.28.20.0/24 maxlen: 24
185.28.21.0/24 maxlen: 24
185.28.22.0/24 maxlen: 24
185.28.23.0/24 maxlen: 24
185.77.96.0/24 maxlen: 24
185.77.97.0/24 maxlen: 24
194.11.154.0/23 maxlen: 24
194.11.214.0/23 maxlen: 24
195.110.58.0/23 maxlen: 24
212.1.208.0/21 maxlen: 24
212.1.208.0/24 maxlen: 24
212.1.210.0/24 maxlen: 24
212.1.211.0/24 maxlen: 24
212.1.212.0/22 maxlen: 24
212.1.212.0/24 maxlen: 24
212.1.215.0/24 maxlen: 24
2a02:4780::/48 maxlen: 48
2a02:4780:1::/48 maxlen: 48
2a02:4780:2::/48 maxlen: 48
2a02:4780:3::/48 maxlen: 48
2a02:4780:4::/48 maxlen: 48
2a02:4780:5::/48 maxlen: 48
2a02:4780:6::/48 maxlen: 48
2a02:4780:8::/48 maxlen: 48
2a02:4780:9::/48 maxlen: 48
2a02:4780:a::/48 maxlen: 48
2a02:4780:b::/48 maxlen: 48
2a02:4780:c::/48 maxlen: 48
2a02:4780:d::/48 maxlen: 48
2a02:4780:e::/48 maxlen: 48
2a02:4780:f::/48 maxlen: 48
2a02:4780:10::/48 maxlen: 48
2a02:4780:11::/48 maxlen: 48
2a02:4780:12::/48 maxlen: 48
2a02:4780:13::/48 maxlen: 48
2a02:4780:14::/48 maxlen: 48
2a02:4780:15::/48 maxlen: 48
2a02:4780:16::/48 maxlen: 48
2a02:4780:17::/48 maxlen: 48
2a02:4780:18::/48 maxlen: 48
2a02:4780:19::/48 maxlen: 48
2a02:4780:1a::/48 maxlen: 48
2a02:4780:1b::/48 maxlen: 48
2a02:4780:1c::/48 maxlen: 48
2a02:4780:1d::/48 maxlen: 48
2a02:4780:1e::/48 maxlen: 48
2a02:4780:1f::/48 maxlen: 48
2a02:4780:20::/48 maxlen: 48
2a02:4780:21::/48 maxlen: 48
2a02:4780:22::/48 maxlen: 48
2a02:4780:23::/48 maxlen: 48
2a02:4780:24::/48 maxlen: 48
2a02:4780:25::/48 maxlen: 48
2a02:4780:26::/48 maxlen: 48
2a02:4780:27::/48 maxlen: 48
2a02:4780:28::/48 maxlen: 48
2a02:4780:29::/48 maxlen: 48
2a02:4780:2a::/48 maxlen: 48
2a02:4780:2b::/48 maxlen: 48
2a02:4780:2c::/48 maxlen: 48
2a02:4780:2d::/48 maxlen: 48
2a02:4780:2e::/48 maxlen: 48
2a02:4780:2f::/48 maxlen: 48
2a02:4780:30::/48 maxlen: 48
2a02:4780:31::/48 maxlen: 48
2a02:4780:32::/48 maxlen: 48
2a02:4780:33::/48 maxlen: 48
2a02:4780:34::/48 maxlen: 48
2a02:4780:35::/48 maxlen: 48
2a02:4780:36::/48 maxlen: 48
2a02:4780:37::/48 maxlen: 48
2a02:4780:38::/48 maxlen: 48
2a02:4780:39::/48 maxlen: 48
2a02:4780:3a::/48 maxlen: 48
2a02:4780:3b::/48 maxlen: 48
2a02:4780:3c::/48 maxlen: 48
2a02:4780:3d::/48 maxlen: 48
2a02:4780:3e::/48 maxlen: 48
2a02:4780:3f::/48 maxlen: 48
2a02:4780:40::/48 maxlen: 48
2a02:4780:41::/48 maxlen: 48
2a02:4780:42::/48 maxlen: 48
2a02:4780:43::/48 maxlen: 48
2a02:4780:44::/48 maxlen: 48
2a02:4780:45::/48 maxlen: 48
2a02:4780:46::/48 maxlen: 48
2a02:4780:47::/48 maxlen: 48
2a02:4780:48::/48 maxlen: 48
2a02:4780:49::/48 maxlen: 48
2a02:4780:4a::/48 maxlen: 48
2a02:4780:4b::/48 maxlen: 48
2a02:4780:4c::/48 maxlen: 48
2a02:4780:4d::/48 maxlen: 48
2a02:4780:4e::/48 maxlen: 48
2a02:4780:4f::/48 maxlen: 48
2a02:4780:50::/48 maxlen: 48
2a02:4780:51::/48 maxlen: 48
2a02:4780:52::/48 maxlen: 48
2a02:4780:53::/48 maxlen: 48
2a02:4780:55::/48 maxlen: 48
2a02:4780:56::/48 maxlen: 48
2a02:4780:57::/48 maxlen: 48
2a02:4780:58::/48 maxlen: 48
2a02:4780:84::/48 maxlen: 48
2a02:4780:85::/48 maxlen: 48
2a02:4780:dead::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 09 Apr 2025 12:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:bb:33:e3:a3:45:ab:ca:6d:35:ff:aa:41:34:27:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Apr 8 14:08:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c52e4ef67ab666b9cbcb4f9d2e625647193a53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:16:3f:21:b0:38:ed:72:99:f2:f0:e7:03:
f1:c8:1c:be:0d:99:84:6b:14:c7:c3:84:50:d6:c4:
8c:d3:43:36:2a:71:28:68:96:55:de:1e:9a:97:cd:
ee:7b:ec:1d:20:90:bb:ad:4b:bd:ad:81:79:b8:a2:
86:7d:e1:6e:8e:af:90:46:f6:13:7d:93:0d:8e:5a:
b1:0a:56:99:c7:81:11:79:26:37:d0:bf:7c:c7:49:
ae:3b:dd:88:df:c4:60:1f:c3:92:ac:b2:c2:d6:53:
7a:8a:a1:27:fd:70:2d:5f:85:22:fc:22:8f:e7:c1:
99:95:c1:69:0a:d3:d1:9b:02:3a:6c:cb:c2:12:a1:
f6:31:20:22:18:c2:b4:c1:75:51:cf:97:59:57:21:
60:d1:7e:cc:1b:95:3d:a6:75:36:a0:03:50:68:a4:
68:cf:a8:75:54:df:07:fd:0b:fa:1d:be:12:27:83:
8b:eb:a8:8c:6e:1e:8d:d2:61:7d:2c:27:bb:f5:b1:
3a:b1:66:cb:05:4b:cb:96:66:ff:38:8d:b3:89:cb:
0b:fa:ce:73:4c:99:7b:64:0a:f8:b6:fb:c3:de:09:
3f:64:c0:94:a3:32:c9:05:55:13:80:99:82:0a:c9:
87:00:c5:d9:75:de:1c:a4:2c:9d:9b:9f:d0:25:4a:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:52:E4:EF:67:AB:66:6B:9C:BC:B4:F9:D2:E6:25:64:71:93:A5:3B
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/LFLk72erZmucvLT50uYlZHGTpTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.88.0/22
31.170.160.0/21
31.220.16.0/21
31.220.48.0/20
31.220.104.0/21
45.13.132.0/22
45.13.252.0/22
45.87.80.0/22
45.93.136.0/22
93.188.160.0/21
141.136.33.0-141.136.36.255
141.136.39.0/24
141.136.41.0-141.136.47.255
153.92.0.0/20
153.92.208.0/20
156.67.64.0/20
156.67.208.0/20
185.28.20.0/22
185.77.96.0/23
194.11.154.0/23
194.11.214.0/23
195.110.58.0/23
212.1.208.0/21
IPv6:
2a02:4780::-2a02:4780:6:ffff:ffff:ffff:ffff:ffff
2a02:4780:8::-2a02:4780:53:ffff:ffff:ffff:ffff:ffff
2a02:4780:55::-2a02:4780:58:ffff:ffff:ffff:ffff:ffff
2a02:4780:84::/47
2a02:4780:dead::/48
Signature Algorithm: sha256WithRSAEncryption
35:a5:85:0a:34:92:b2:da:2a:6d:e8:00:c9:a3:0b:62:92:9f:
f5:7b:a5:9b:65:e5:f8:67:94:a3:6d:69:53:f1:82:18:ff:14:
79:e8:00:d2:aa:39:b8:ba:b5:1d:ca:05:44:0b:48:46:b4:1c:
26:90:8b:74:fd:6c:25:a4:7d:b2:f5:05:29:f8:20:7c:c7:28:
cb:b5:6c:af:ee:3c:5a:7e:b9:a3:c4:56:cd:86:72:71:68:1d:
92:35:14:55:a7:7e:8d:fe:dc:c0:62:fe:58:93:f4:6f:91:cf:
3c:ce:a3:e2:1b:52:28:e8:cd:5e:dd:d6:77:9e:d4:38:b1:c4:
68:42:d0:14:dd:d3:9d:83:cf:45:62:c6:30:f1:28:e7:80:4c:
5c:4a:a0:93:8c:ef:63:0a:38:2f:6f:b1:3d:4c:f4:d5:2c:1b:
55:73:6a:6b:05:a0:2d:88:8c:64:5a:f4:36:db:51:da:1a:50:
89:07:81:8c:c6:7b:a4:10:99:1e:2a:f1:57:01:91:8e:d2:e9:
c5:7a:aa:d5:ba:03:21:f6:e5:7d:9d:94:9e:49:04:9c:56:19:
a6:a4:f9:5b:42:94:c5:78:1e:30:ed:76:f5:14:3b:fc:b7:c4:
87:df:d4:36:6d:74:69:14:6e:8c:3d:b3:8d:3b:d7:aa:89:4d:
8c:24:ab:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:09:15 2025 by rpki-client