Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/LVmthe-0g2W5B6lSJ14Z-werG-U.roa
File: LVmthe-0g2W5B6lSJ14Z-werG-U.roa (raw, json)
Hash identifier: et6obbNfRA7LgK73Siw+Ux0FQPuUymqwAFTytbVau+0=
Subject key identifier: 2D:59:AD:85:EF:B4:83:65:B9:07:A9:52:27:5E:19:FB:07:AB:1B:E5
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01957417EC948D1EEBCD85816A381F12B639
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/LVmthe-0g2W5B6lSJ14Z-werG-U.roa
Signing time: Sat 08 Mar 2025 04:51:19 +0000
ROA not before: Sat 08 Mar 2025 04:51:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 85.239.156.0/24 maxlen: 24
92.62.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 06:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:74:17:ec:94:8d:1e:eb:cd:85:81:6a:38:1f:12:b6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Mar 8 04:51:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d59ad85efb48365b907a952275e19fb07ab1be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:de:18:3a:ec:08:82:ae:9e:72:4e:a9:ef:
4a:e6:10:50:7f:9d:ff:22:51:e1:f7:7b:e7:2d:6e:
b2:bf:54:38:52:7c:88:74:85:ef:35:97:98:f7:96:
ca:1a:9e:bf:3e:5e:f2:48:c6:aa:83:09:a0:fa:33:
cb:bc:60:0c:b6:1e:6e:5e:79:3d:d2:5e:ff:ec:2d:
cd:a2:25:af:27:a1:0d:80:81:6b:26:72:31:ee:4d:
83:51:41:4c:07:3b:11:52:f2:96:35:bd:80:d6:a1:
dd:2a:7f:e5:c4:61:f6:8c:fc:b8:89:49:1e:c2:eb:
9a:8d:e0:b2:75:f3:83:ff:cf:71:cb:a5:2e:81:fd:
b4:08:68:61:e2:d2:e5:5f:67:64:6b:b3:42:a7:7f:
40:83:80:f1:e0:c5:04:b6:25:cc:5e:22:13:e7:a0:
d9:d9:5c:60:10:e9:ad:57:86:18:a4:c8:ef:f9:f6:
9b:8a:06:a5:58:5c:00:f6:4a:4a:36:73:99:a4:ea:
dd:2a:b2:0d:f5:67:7c:e3:ca:58:f9:64:17:3f:05:
6a:06:cd:58:18:9b:75:7b:9d:60:c8:43:83:eb:9c:
2d:44:6d:db:76:5c:14:57:60:6f:47:3c:05:c1:23:
a6:2a:20:e6:73:8d:2c:47:ae:22:07:39:d9:3a:79:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:59:AD:85:EF:B4:83:65:B9:07:A9:52:27:5E:19:FB:07:AB:1B:E5
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/LVmthe-0g2W5B6lSJ14Z-werG-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.156.0/24
92.62.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:7b:5b:93:97:01:6c:42:26:b1:d4:74:72:6a:89:61:62:f5:
44:4b:5e:79:b6:f9:d9:c0:83:08:9e:e7:48:f8:40:b4:8d:fd:
04:0d:97:2c:cd:73:37:89:a2:24:06:e4:27:6c:53:d6:7c:39:
12:6a:b7:57:d7:de:f6:3b:68:bc:41:d1:d9:ab:85:bd:3c:c9:
96:e9:3b:3f:24:5c:3f:26:e8:2f:db:52:97:28:de:11:ad:db:
66:70:eb:8f:85:f4:4f:75:2e:99:86:32:e0:a0:72:ad:af:25:
dc:0a:6c:c5:1d:08:21:ff:06:4d:61:7c:5b:b5:31:2f:47:dc:
a0:94:e2:22:c3:d0:12:67:f0:6c:2a:1a:f3:7a:8c:cc:00:b4:
05:c2:85:bb:f2:ac:2e:38:ca:92:9d:03:cc:15:18:fa:a4:38:
95:51:23:cb:45:b7:10:cc:8c:a7:78:d3:d2:d7:dc:63:ea:4b:
ff:28:92:0f:4b:10:85:30:df:51:df:27:4d:3d:63:ba:e7:2f:
65:89:0a:98:c9:13:86:74:42:82:52:69:21:db:a4:bc:2a:a1:
39:c5:36:55:79:e4:dc:73:2b:25:ea:3f:ad:e4:16:b9:87:ef:
f3:09:cd:98:11:79:c5:4d:04:38:49:53:b8:3d:04:82:a5:79:
82:06:0b:80
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZV0F+yUjR7rzYWBajgfErY5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjUwMzA4MDQ1MTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDU5YWQ4NWVmYjQ4MzY1YjkwN2E5NTIyNzVlMTlmYjA3YWIxYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvjeGDrsCIKunnJOqe9K5hBQf53/
IlHh93vnLW6yv1Q4UnyIdIXvNZeY95bKGp6/Pl7ySMaqgwmg+jPLvGAMth5uXnk9
0l7/7C3NoiWvJ6ENgIFrJnIx7k2DUUFMBzsRUvKWNb2A1qHdKn/lxGH2jPy4iUke
wuuajeCydfOD/89xy6Uugf20CGhh4tLlX2dka7NCp39Ag4Dx4MUEtiXMXiIT56DZ
2VxgEOmtV4YYpMjv+fabigalWFwA9kpKNnOZpOrdKrIN9Wd848pY+WQXPwVqBs1Y
GJt1e51gyEOD65wtRG3bdlwUV2BvRzwFwSOmKiDmc40sR64iBznZOnkWgQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC1ZrYXvtINluQepUideGfsHqxvlMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvTFZtdGhlLTBnMlc1QjZsU0oxNFotd2VyRy1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVe+cAwQA
XD79MA0GCSqGSIb3DQEBCwUAA4IBAQAce1uTlwFsQiax1HRyaolhYvVES155tvnZ
wIMInudI+EC0jf0EDZcszXM3iaIkBuQnbFPWfDkSardX1972O2i8QdHZq4W9PMmW
6Ts/JFw/Jugv21KXKN4RrdtmcOuPhfRPdS6ZhjLgoHKtryXcCmzFHQgh/wZNYXxb
tTEvR9yglOIiw9ASZ/BsKhrzeozMALQFwoW78qwuOMqSnQPMFRj6pDiVUSPLRbcQ
zIyneNPS19xj6kv/KJIPSxCFMN9R3ydNPWO65y9liQqYyROGdEKCUmkh26S8KqE5
xTZVeeTccysl6j+t5Ba5h+/zCc2YEXnFTQQ4SVO4PQSCpXmCBguA
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:14 2025 by rpki-client