Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ltfwf_YTRxBFRMqa5DZ3LOJ4kYQ.roa
File: ltfwf_YTRxBFRMqa5DZ3LOJ4kYQ.roa (raw, json)
Hash identifier: QFPZcchPL8X4WFlbu/wtn18NHzJ6RSU6bNzd+LJWYgA=
Subject key identifier: 96:D7:F0:7F:F6:13:47:10:45:44:CA:9A:E4:36:77:2C:E2:78:91:84
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01967B9C6A570D822DDFCF026100AF15D0C7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ltfwf_YTRxBFRMqa5DZ3LOJ4kYQ.roa
Signing time: Mon 28 Apr 2025 08:56:10 +0000
ROA not before: Mon 28 Apr 2025 08:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.240.86.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.69.0/24 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.217.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.52.0/22 maxlen: 22
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.152.0/24 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.183.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.212.0/24 maxlen: 24
89.213.224.0/23 maxlen: 23
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.252.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.130.132.0/22 maxlen: 22
213.130.135.0/24 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.210.54.0/24 maxlen: 24
213.218.211.0/24 maxlen: 24
213.218.244.0/22 maxlen: 22
213.218.248.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Apr 2025 08:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:9c:6a:57:0d:82:2d:df:cf:02:61:00:af:15:d0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 28 08:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96d7f07ff61347104544ca9ae436772ce2789184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:44:09:e2:57:8e:d6:8b:ff:0c:f5:79:7d:
88:fe:0b:8a:59:f5:d9:55:b4:e1:33:c5:73:61:1a:
e1:ad:70:11:f9:f4:48:ec:31:28:f6:e5:95:c7:75:
68:fe:da:96:73:d9:1e:ac:67:2f:5c:f5:74:98:ff:
c5:8c:cc:cd:db:21:a4:a3:6c:2f:02:38:39:13:b3:
0f:27:de:22:27:a7:49:ea:ff:55:d5:eb:89:6e:f1:
df:6d:6b:5b:1e:08:e4:bc:e0:55:17:77:24:9e:10:
33:6e:c5:49:fe:2e:ec:59:32:82:46:7d:74:71:2e:
4b:ed:2e:93:e7:63:87:fe:d5:61:12:05:95:f1:95:
66:b1:38:ea:2a:b1:c0:bb:1a:70:8e:65:cd:a8:0a:
1d:2b:38:50:ee:ee:83:3f:2b:46:f5:0e:64:1e:b1:
6b:9b:c7:a0:51:f2:47:aa:d0:e6:47:c3:ee:f0:09:
57:73:64:c1:f5:2f:a5:c3:c8:ee:8b:86:f1:e3:e0:
50:35:2a:2e:fd:c4:34:7a:d9:3a:ea:69:88:3d:c5:
1c:27:73:be:5b:5b:f8:70:3f:54:54:56:ed:04:af:
b2:23:8c:bc:e2:4d:c3:01:4b:82:de:e5:85:08:51:
98:af:0b:fe:78:31:88:e5:cb:ab:20:97:28:f3:74:
55:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D7:F0:7F:F6:13:47:10:45:44:CA:9A:E4:36:77:2C:E2:78:91:84
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ltfwf_YTRxBFRMqa5DZ3LOJ4kYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.86.0/24
82.152.8.0/24
82.152.176.0/23
82.153.69.0/24
82.153.136.0/22
82.153.217.0/24
82.153.255.0/24
89.213.44.0/23
89.213.50.0-89.213.59.255
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.176.255
89.213.181.0/24
89.213.183.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.212.0/24
89.213.224.0/23
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
109.176.252.0/24
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.130.132.0/22
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.244.0-213.218.248.255
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
19:a8:85:f1:c5:04:77:c4:49:1d:00:ce:cf:b9:52:89:4f:45:
36:c9:74:0f:5c:af:11:dc:ff:e3:7c:00:40:fc:b0:9b:6a:a3:
59:f9:bf:b8:84:a0:b1:79:88:67:f3:8f:28:31:0b:f3:29:1e:
e9:71:2e:56:d6:26:cf:88:37:ff:c3:b9:09:89:bf:aa:56:3d:
9f:cc:60:65:d1:84:23:29:be:4c:24:f5:75:1d:1f:3b:47:6f:
f8:a2:60:78:d5:e0:41:38:7c:66:84:01:e0:d2:77:2e:63:8d:
c4:e3:01:df:6e:4b:75:1c:b4:c5:84:bd:fd:55:9a:26:d6:dd:
65:b2:ff:02:76:6b:22:4d:4e:98:21:dc:c0:4a:0d:89:e2:01:
a5:e3:9d:6b:f6:e8:4f:04:94:8a:98:c5:bc:bb:9e:07:0f:ab:
22:06:b4:01:53:d5:9a:de:c1:2c:01:1c:b4:f0:54:66:b8:11:
84:cd:ea:0f:23:5f:1e:ef:c8:93:2f:e4:74:79:70:74:5c:69:
23:b6:c0:0a:45:fb:e5:bd:40:72:6d:24:96:db:d7:69:91:08:
26:37:27:27:af:c2:f1:66:cd:18:c3:fb:a9:1d:3d:32:5b:7f:
58:77:c4:e3:06:76:e9:53:82:09:73:1c:9b:d0:9f:51:54:42:
dc:1e:89:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:54:12 2025 by rpki-client