Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/LVGh8N-N7GWRrlRgu611H-0AVKM.roa
File: LVGh8N-N7GWRrlRgu611H-0AVKM.roa (raw, json)
Hash identifier: U2R+5Jfx+J98nfF4CzkX6Iv0WQqQptbilZ7B6gSvGKA=
Subject key identifier: 2D:51:A1:F0:DF:8D:EC:65:91:AE:54:60:BB:AD:75:1F:ED:00:54:A3
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 0193D3C6841C9946448D8A31FEB7CCB6E00C
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/LVGh8N-N7GWRrlRgu611H-0AVKM.roa
Signing time: Tue 17 Dec 2024 08:40:22 +0000
ROA not before: Tue 17 Dec 2024 08:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13150
IP address blocks: 85.255.16.0/24 maxlen: 24
85.255.17.0/24 maxlen: 24
85.255.19.0/24 maxlen: 24
85.255.20.0/24 maxlen: 24
85.255.21.0/24 maxlen: 24
85.255.23.0/24 maxlen: 24
85.255.24.0/24 maxlen: 24
85.255.25.0/24 maxlen: 24
85.255.26.0/24 maxlen: 24
85.255.27.0/24 maxlen: 24
85.255.28.0/24 maxlen: 24
85.255.29.0/24 maxlen: 24
85.255.30.0/24 maxlen: 24
85.255.31.0/24 maxlen: 24
185.114.120.0/24 maxlen: 24
185.114.121.0/24 maxlen: 24
185.114.122.0/24 maxlen: 24
185.114.123.0/24 maxlen: 24
209.206.0.0/24 maxlen: 24
209.206.1.0/24 maxlen: 24
209.206.2.0/24 maxlen: 24
209.206.3.0/24 maxlen: 24
209.206.4.0/24 maxlen: 24
209.206.5.0/24 maxlen: 24
209.206.6.0/24 maxlen: 24
209.206.7.0/24 maxlen: 24
209.206.8.0/24 maxlen: 24
209.206.9.0/24 maxlen: 24
209.206.10.0/24 maxlen: 24
209.206.11.0/24 maxlen: 24
209.206.12.0/24 maxlen: 24
209.206.13.0/24 maxlen: 24
209.206.14.0/24 maxlen: 24
209.206.15.0/24 maxlen: 24
209.206.16.0/24 maxlen: 24
209.206.17.0/24 maxlen: 24
209.206.18.0/24 maxlen: 24
209.206.19.0/24 maxlen: 24
209.206.20.0/24 maxlen: 24
209.206.21.0/24 maxlen: 24
209.206.22.0/24 maxlen: 24
209.206.23.0/24 maxlen: 24
209.206.24.0/24 maxlen: 24
209.206.25.0/24 maxlen: 24
209.206.26.0/24 maxlen: 24
209.206.27.0/24 maxlen: 24
209.206.28.0/24 maxlen: 24
209.206.29.0/24 maxlen: 24
209.206.30.0/24 maxlen: 24
209.206.31.0/24 maxlen: 24
216.252.177.0/24 maxlen: 24
216.252.178.0/24 maxlen: 24
216.252.179.0/24 maxlen: 24
216.252.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:c6:84:1c:99:46:44:8d:8a:31:fe:b7:cc:b6:e0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Dec 17 08:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d51a1f0df8dec6591ae5460bbad751fed0054a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:8a:cb:39:bd:37:41:1b:9b:25:0e:86:f7:
6e:47:66:12:63:2d:0e:62:e2:ea:e5:7e:fb:df:9d:
16:69:53:d7:e4:53:7f:ef:64:2f:84:2f:f9:e4:2f:
8d:78:3a:97:24:ea:ee:7c:90:0a:4d:ae:7f:9c:a5:
fa:60:3a:6f:2e:27:a0:91:72:57:43:30:07:91:2b:
3a:ec:0c:3c:1e:61:54:df:8f:25:03:65:31:13:7f:
26:19:af:3e:c2:ca:1d:9a:72:00:97:69:dd:68:63:
6f:a7:2d:31:a5:29:d8:38:1b:85:9c:2a:0c:79:1c:
f0:d9:6c:18:d3:aa:6e:77:c2:ac:00:f5:06:9f:8a:
cd:5f:1e:48:5b:9d:54:f1:cc:bd:4e:9a:ac:ba:07:
5c:43:2c:18:07:df:e3:5b:e3:fb:c8:96:55:56:8c:
6e:69:b4:c6:63:04:23:25:0b:19:4a:39:1f:8d:98:
ec:a0:bf:29:77:78:10:d0:7f:ef:9c:14:de:18:51:
e0:a8:03:5b:0f:1f:38:c0:69:7a:90:1e:34:90:e4:
e4:c7:a1:d8:de:a6:ef:59:aa:47:ca:83:9e:e3:4c:
5e:61:aa:bb:39:40:38:f8:0f:71:47:85:dd:fb:54:
5d:9b:04:34:50:11:44:10:97:f5:0a:75:3c:17:e7:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:51:A1:F0:DF:8D:EC:65:91:AE:54:60:BB:AD:75:1F:ED:00:54:A3
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/LVGh8N-N7GWRrlRgu611H-0AVKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.16.0/23
85.255.19.0-85.255.21.255
85.255.23.0-85.255.31.255
185.114.120.0/22
209.206.0.0/19
216.252.177.0-216.252.180.255
Signature Algorithm: sha256WithRSAEncryption
98:86:cc:2c:e6:c7:89:ef:b5:e6:6c:71:7e:c6:46:de:d2:42:
d9:96:24:94:b2:e2:af:d2:68:d5:46:04:64:58:01:cd:de:dc:
14:f9:37:0e:37:02:ba:c4:cd:02:32:eb:e6:e0:14:41:94:76:
19:a4:5d:f1:e3:a2:30:66:3b:00:89:6e:1c:63:cb:bc:3d:e3:
1b:87:87:47:db:5c:e5:82:8a:c7:9a:29:56:97:df:68:f3:36:
9d:42:e4:de:40:48:b1:7c:71:0b:3a:45:18:b6:db:fe:2c:31:
82:44:1a:c4:b7:9a:db:96:b4:e1:f2:dd:70:9f:95:ae:6e:31:
a6:fb:7b:e5:b2:ce:1d:d6:21:f4:2b:d0:56:48:74:8a:e6:a4:
43:fc:6f:08:35:9f:dd:35:2d:64:48:84:19:36:24:5c:22:a1:
09:65:6c:6b:e0:53:c3:90:e9:5b:c8:c6:28:d7:e6:f9:fa:8b:
c5:bb:ed:72:39:ed:86:ae:b7:85:29:de:49:cf:91:ea:33:3f:
3b:fd:4f:8b:77:37:e0:6c:7d:3b:d1:93:7d:63:ec:fb:3e:bf:
9b:cb:98:e5:d9:d5:2a:e7:bf:88:8b:ac:43:2b:02:73:9c:11:
32:98:b2:3f:b6:40:73:c9:c1:6b:ad:ad:e0:d1:7d:32:89:9d:
2a:2f:f4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:31 2025 by rpki-client