Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/lhmC0MMnTeyIJrOvELaiAjRO0_g.roa
File: lhmC0MMnTeyIJrOvELaiAjRO0_g.roa (raw, json)
Hash identifier: B7SOLtcsp/Dl/BlWPLYpVUteeiFDyBFidxH/Kp8OYcg=
Subject key identifier: 96:19:82:D0:C3:27:4D:EC:88:26:B3:AF:10:B6:A2:02:34:4E:D3:F8
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0197A6E3DCEEBFDF8569F3AD5A83A75582A6
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/lhmC0MMnTeyIJrOvELaiAjRO0_g.roa
Signing time: Wed 25 Jun 2025 11:40:40 +0000
ROA not before: Wed 25 Jun 2025 11:40:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2588
IP address blocks: 46.19.200.0/21 maxlen: 21
80.81.32.0/24 maxlen: 24
80.81.33.0/24 maxlen: 24
80.81.34.0/24 maxlen: 24
80.81.35.0/24 maxlen: 24
80.81.36.0/24 maxlen: 24
80.81.37.0/24 maxlen: 24
80.81.42.0/24 maxlen: 24
80.81.43.0/24 maxlen: 24
80.81.46.0/24 maxlen: 24
83.223.128.0/19 maxlen: 19
83.223.145.0/24 maxlen: 24
83.223.155.0/24 maxlen: 24
85.254.0.0/17 maxlen: 17
85.254.6.0/24 maxlen: 24
85.254.49.0/24 maxlen: 24
85.254.50.0/24 maxlen: 24
85.254.56.0/24 maxlen: 24
85.254.57.0/24 maxlen: 24
85.254.60.0/24 maxlen: 24
85.254.61.0/24 maxlen: 24
85.254.69.0/24 maxlen: 24
85.254.128.0/18 maxlen: 18
85.254.132.0/24 maxlen: 24
85.254.147.0/24 maxlen: 24
85.254.160.0/24 maxlen: 24
91.190.32.0/19 maxlen: 24
91.190.36.0/24 maxlen: 24
91.190.52.0/24 maxlen: 24
91.190.56.0/23 maxlen: 24
91.190.60.0/24 maxlen: 24
94.101.224.0/20 maxlen: 20
109.205.120.0/21 maxlen: 21
109.205.127.0/24 maxlen: 24
159.148.0.0/16 maxlen: 16
159.148.0.0/24 maxlen: 24
159.148.1.0/24 maxlen: 24
159.148.2.0/24 maxlen: 24
159.148.3.0/24 maxlen: 24
159.148.4.0/24 maxlen: 24
159.148.5.0/24 maxlen: 24
159.148.6.0/24 maxlen: 24
159.148.7.0/24 maxlen: 24
159.148.8.0/24 maxlen: 24
159.148.9.0/24 maxlen: 24
159.148.10.0/24 maxlen: 24
159.148.11.0/24 maxlen: 24
159.148.12.0/24 maxlen: 24
159.148.13.0/24 maxlen: 24
159.148.14.0/24 maxlen: 24
159.148.15.0/24 maxlen: 24
159.148.16.0/24 maxlen: 24
159.148.17.0/24 maxlen: 24
159.148.18.0/24 maxlen: 24
159.148.19.0/24 maxlen: 24
159.148.20.0/24 maxlen: 24
159.148.21.0/24 maxlen: 24
159.148.22.0/24 maxlen: 24
159.148.24.0/24 maxlen: 24
159.148.25.0/24 maxlen: 24
159.148.28.0/24 maxlen: 24
159.148.29.0/24 maxlen: 24
159.148.31.0/24 maxlen: 24
159.148.32.0/24 maxlen: 24
159.148.33.0/24 maxlen: 24
159.148.34.0/24 maxlen: 24
159.148.35.0/24 maxlen: 24
159.148.36.0/24 maxlen: 24
159.148.37.0/24 maxlen: 24
159.148.39.0/24 maxlen: 24
159.148.40.0/24 maxlen: 24
159.148.41.0/24 maxlen: 24
159.148.42.0/24 maxlen: 24
159.148.43.0/24 maxlen: 24
159.148.45.0/24 maxlen: 24
159.148.46.0/24 maxlen: 24
159.148.47.0/24 maxlen: 24
159.148.48.0/24 maxlen: 24
159.148.49.0/24 maxlen: 24
159.148.50.0/24 maxlen: 24
159.148.51.0/24 maxlen: 24
159.148.52.0/24 maxlen: 24
159.148.53.0/24 maxlen: 24
159.148.55.0/24 maxlen: 24
159.148.56.0/24 maxlen: 24
159.148.57.0/24 maxlen: 24
159.148.59.0/24 maxlen: 24
159.148.60.0/24 maxlen: 24
159.148.61.0/24 maxlen: 24
159.148.63.0/24 maxlen: 24
159.148.64.0/24 maxlen: 24
159.148.65.0/24 maxlen: 24
159.148.67.0/24 maxlen: 24
159.148.68.0/24 maxlen: 24
159.148.69.0/24 maxlen: 24
159.148.70.0/24 maxlen: 24
159.148.71.0/24 maxlen: 24
159.148.72.0/24 maxlen: 24
159.148.75.0/24 maxlen: 24
159.148.76.0/24 maxlen: 24
159.148.78.0/24 maxlen: 24
159.148.79.0/24 maxlen: 24
159.148.80.0/24 maxlen: 24
159.148.81.0/24 maxlen: 24
159.148.82.0/24 maxlen: 24
159.148.83.0/24 maxlen: 24
159.148.84.0/24 maxlen: 24
159.148.85.0/24 maxlen: 24
159.148.86.0/24 maxlen: 24
159.148.87.0/24 maxlen: 24
159.148.91.0/24 maxlen: 24
159.148.92.0/24 maxlen: 24
159.148.93.0/24 maxlen: 24
159.148.94.0/24 maxlen: 24
159.148.95.0/24 maxlen: 24
159.148.96.0/24 maxlen: 24
159.148.97.0/24 maxlen: 24
159.148.100.0/24 maxlen: 24
159.148.101.0/24 maxlen: 24
159.148.106.0/24 maxlen: 24
159.148.107.0/24 maxlen: 24
159.148.108.0/24 maxlen: 24
159.148.110.0/24 maxlen: 24
159.148.111.0/24 maxlen: 24
159.148.112.0/24 maxlen: 24
159.148.113.0/24 maxlen: 24
159.148.115.0/24 maxlen: 24
159.148.116.0/24 maxlen: 24
159.148.117.0/24 maxlen: 24
159.148.118.0/24 maxlen: 24
159.148.120.0/24 maxlen: 24
159.148.121.0/24 maxlen: 24
159.148.122.0/24 maxlen: 24
159.148.123.0/24 maxlen: 24
159.148.127.0/24 maxlen: 24
159.148.129.0/24 maxlen: 24
159.148.132.0/24 maxlen: 24
159.148.133.0/24 maxlen: 24
159.148.135.0/24 maxlen: 24
159.148.139.0/24 maxlen: 24
159.148.145.0/24 maxlen: 24
159.148.146.0/24 maxlen: 24
159.148.151.0/24 maxlen: 24
159.148.152.0/24 maxlen: 24
159.148.153.0/24 maxlen: 24
159.148.154.0/24 maxlen: 24
159.148.155.0/24 maxlen: 24
159.148.156.0/24 maxlen: 24
159.148.159.0/24 maxlen: 24
159.148.161.0/24 maxlen: 24
159.148.162.0/24 maxlen: 24
159.148.164.0/24 maxlen: 24
159.148.168.0/24 maxlen: 24
159.148.170.0/24 maxlen: 24
159.148.175.0/24 maxlen: 24
159.148.178.0/24 maxlen: 24
159.148.185.0/24 maxlen: 24
159.148.186.0/24 maxlen: 24
159.148.187.0/24 maxlen: 24
159.148.188.0/24 maxlen: 24
159.148.189.0/24 maxlen: 24
159.148.192.0/24 maxlen: 24
159.148.193.0/24 maxlen: 24
159.148.194.0/24 maxlen: 24
159.148.195.0/24 maxlen: 24
159.148.196.0/24 maxlen: 24
159.148.201.0/24 maxlen: 24
159.148.202.0/24 maxlen: 24
159.148.205.0/24 maxlen: 24
159.148.206.0/24 maxlen: 24
159.148.207.0/24 maxlen: 24
159.148.209.0/24 maxlen: 24
159.148.210.0/24 maxlen: 24
159.148.211.0/24 maxlen: 24
159.148.212.0/24 maxlen: 24
159.148.213.0/24 maxlen: 24
159.148.214.0/24 maxlen: 24
159.148.215.0/24 maxlen: 24
159.148.217.0/24 maxlen: 24
159.148.219.0/24 maxlen: 24
159.148.221.0/24 maxlen: 24
159.148.223.0/24 maxlen: 24
159.148.227.0/24 maxlen: 24
159.148.228.0/24 maxlen: 24
159.148.229.0/24 maxlen: 24
159.148.230.0/24 maxlen: 24
159.148.232.0/24 maxlen: 24
159.148.233.0/24 maxlen: 24
159.148.235.0/24 maxlen: 24
159.148.237.0/24 maxlen: 24
159.148.238.0/24 maxlen: 24
159.148.250.0/24 maxlen: 24
159.148.251.0/24 maxlen: 24
159.148.252.0/24 maxlen: 24
159.148.252.2/32 maxlen: 32
159.148.254.0/24 maxlen: 24
185.27.92.0/22 maxlen: 22
217.69.112.0/20 maxlen: 20
217.69.113.0/24 maxlen: 24
2a02:610::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 25 Jun 2025 12:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:e3:dc:ee:bf:df:85:69:f3:ad:5a:83:a7:55:82:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jun 25 11:40:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=961982d0c3274dec8826b3af10b6a202344ed3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bc:de:cf:20:68:8a:0a:8b:2d:2a:e7:32:28:
71:e0:fa:3d:a9:db:38:58:6a:ab:e0:5e:59:65:5b:
d3:ce:72:ff:33:b6:61:29:a2:93:23:19:4f:cf:e2:
72:bf:c6:a9:94:23:60:70:05:e6:e8:78:d5:b5:59:
ab:ec:6b:da:cd:ef:61:0b:0f:1b:f5:a6:1e:fd:ee:
a9:a6:ff:e5:30:c2:19:05:44:d8:e2:ec:68:59:63:
20:39:c7:c2:95:a0:8a:31:ce:e3:af:f4:82:0d:35:
2a:08:ee:50:b8:7b:2d:d2:52:1f:67:7c:ef:2a:4d:
3c:38:2e:1e:ed:1a:72:4f:d8:5b:d9:16:82:30:56:
7c:88:c8:a4:54:bf:9d:3b:7f:ce:ea:02:5e:13:56:
30:b1:72:28:a5:70:d5:d1:41:c5:a9:25:f5:18:7c:
50:af:35:f1:67:23:d1:b5:e9:ff:12:ca:6c:b1:7a:
ea:16:f1:ca:b3:a0:2e:0d:80:2d:ea:69:50:a9:ce:
ac:c2:c9:cb:2d:29:77:39:f6:8e:3a:0e:a4:41:d8:
c9:48:d8:68:d1:30:ba:c5:b3:2d:66:e6:90:90:c8:
ed:31:7f:fc:2a:72:a4:cb:18:09:a7:0b:f8:12:72:
e8:11:9f:f7:d3:62:22:95:38:f3:af:02:77:69:8b:
63:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:19:82:D0:C3:27:4D:EC:88:26:B3:AF:10:B6:A2:02:34:4E:D3:F8
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/lhmC0MMnTeyIJrOvELaiAjRO0_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.200.0/21
80.81.32.0-80.81.37.255
80.81.42.0/23
80.81.46.0/24
83.223.128.0/19
85.254.0.0-85.254.191.255
91.190.32.0/19
94.101.224.0/20
109.205.120.0/21
159.148.0.0/16
185.27.92.0/22
217.69.112.0/20
IPv6:
2a02:610::/32
Signature Algorithm: sha256WithRSAEncryption
6f:aa:90:7b:19:39:e1:25:7c:42:a3:48:07:12:8f:08:5c:49:
a2:27:77:91:d9:22:13:ed:d1:4c:a1:2a:69:cc:01:59:3e:28:
48:c6:97:20:bf:3c:4e:0b:02:d3:04:24:52:9d:67:5e:81:69:
f5:82:f3:f8:0e:85:27:62:60:cd:8f:7e:8e:64:83:ac:aa:53:
e1:85:bd:ab:df:c5:15:76:44:ab:71:cc:7f:34:d4:b3:a0:7a:
11:40:6e:46:e9:42:71:81:11:a6:99:b0:b7:37:9c:41:3e:c8:
57:41:e5:02:b0:95:b3:cb:a5:64:7e:95:51:ec:9c:30:b8:8e:
2b:ae:9c:14:32:16:85:2b:e2:3f:a1:82:1e:a8:dc:37:f6:2b:
b3:17:b2:a1:99:9e:ce:50:6b:3a:d2:e3:02:e2:3f:51:de:84:
f3:97:44:df:ef:c0:8e:51:f7:f0:17:cd:aa:fd:0b:91:e1:1a:
6f:7f:5f:1f:5e:3e:6a:8d:37:69:10:a2:e5:b2:16:de:03:73:
f3:ef:c8:b1:0d:95:a6:c1:a2:d7:97:f5:4b:b4:47:42:03:75:
24:b3:54:29:39:ab:db:81:b0:10:05:b5:65:32:f8:5e:0a:f0:
ca:fa:ca:d6:f6:30:34:07:fe:28:97:67:c0:30:ad:be:58:2b:
13:68:89:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:08:26 2025 by rpki-client