Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/ltCWEnjzN1dVOSWdTNmFXxKZT1I.roa
File: ltCWEnjzN1dVOSWdTNmFXxKZT1I.roa (raw, json)
Hash identifier: zgQ7+eUiJXZ3yLaYYmU4NuGi6SyPNbJEhOQb3CIVO38=
Subject key identifier: 96:D0:96:12:78:F3:37:57:55:39:25:9D:4C:D9:85:5F:12:99:4F:52
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01954D6C55211A25D680790B85386AF75BF4
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/ltCWEnjzN1dVOSWdTNmFXxKZT1I.roa
Signing time: Fri 28 Feb 2025 16:38:19 +0000
ROA not before: Fri 28 Feb 2025 16:38:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47690
IP address blocks: 45.43.145.0/24 maxlen: 24
45.43.146.0/24 maxlen: 24
45.43.148.0/24 maxlen: 24
45.43.149.0/24 maxlen: 24
45.43.150.0/24 maxlen: 24
45.43.151.0/24 maxlen: 24
45.43.154.0/24 maxlen: 24
45.43.155.0/24 maxlen: 24
45.43.158.0/24 maxlen: 24
45.43.159.0/24 maxlen: 24
45.43.160.0/24 maxlen: 24
45.43.161.0/24 maxlen: 24
104.222.176.0/24 maxlen: 24
104.222.177.0/24 maxlen: 24
104.222.178.0/24 maxlen: 24
104.222.179.0/24 maxlen: 24
104.222.180.0/24 maxlen: 24
104.222.181.0/24 maxlen: 24
104.222.182.0/24 maxlen: 24
104.222.183.0/24 maxlen: 24
104.222.189.0/24 maxlen: 24
104.233.8.0/24 maxlen: 24
104.233.9.0/24 maxlen: 24
104.233.59.0/24 maxlen: 24
104.238.6.0/24 maxlen: 24
104.238.11.0/24 maxlen: 24
104.238.12.0/24 maxlen: 24
104.238.13.0/24 maxlen: 24
104.239.8.0/24 maxlen: 24
104.239.12.0/24 maxlen: 24
104.239.14.0/24 maxlen: 24
104.239.29.0/24 maxlen: 24
104.239.54.0/24 maxlen: 24
104.239.55.0/24 maxlen: 24
104.239.56.0/24 maxlen: 24
104.239.57.0/24 maxlen: 24
104.239.58.0/24 maxlen: 24
104.239.59.0/24 maxlen: 24
104.239.60.0/24 maxlen: 24
104.239.61.0/24 maxlen: 24
104.239.62.0/24 maxlen: 24
104.239.63.0/24 maxlen: 24
104.239.64.0/24 maxlen: 24
104.239.65.0/24 maxlen: 24
104.249.8.0/24 maxlen: 24
104.249.9.0/24 maxlen: 24
104.249.10.0/24 maxlen: 24
104.249.11.0/24 maxlen: 24
104.249.12.0/24 maxlen: 24
104.249.13.0/24 maxlen: 24
104.249.14.0/24 maxlen: 24
104.249.15.0/24 maxlen: 24
104.249.16.0/24 maxlen: 24
104.249.17.0/24 maxlen: 24
104.249.18.0/24 maxlen: 24
104.249.19.0/24 maxlen: 24
104.249.20.0/24 maxlen: 24
104.249.21.0/24 maxlen: 24
104.249.22.0/24 maxlen: 24
104.249.23.0/24 maxlen: 24
104.249.42.0/24 maxlen: 24
104.249.43.0/24 maxlen: 24
104.249.44.0/24 maxlen: 24
104.249.45.0/24 maxlen: 24
104.249.46.0/24 maxlen: 24
104.249.47.0/24 maxlen: 24
104.249.48.0/24 maxlen: 24
104.249.49.0/24 maxlen: 24
104.249.50.0/24 maxlen: 24
104.249.51.0/24 maxlen: 24
104.249.52.0/24 maxlen: 24
104.249.53.0/24 maxlen: 24
104.249.54.0/24 maxlen: 24
216.173.90.0/24 maxlen: 24
216.173.91.0/24 maxlen: 24
216.173.92.0/24 maxlen: 24
216.173.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 17:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:6c:55:21:1a:25:d6:80:79:0b:85:38:6a:f7:5b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Feb 28 16:38:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96d0961278f337575539259d4cd9855f12994f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:1e:06:bb:3c:2a:30:15:77:dc:52:13:e5:
77:95:f8:42:94:d1:cb:ae:5d:c5:5d:37:27:b9:a4:
93:b9:98:99:63:16:9d:21:b6:f7:cf:1b:e8:c7:53:
4f:84:f0:67:6a:79:07:50:a1:07:e6:bf:30:1b:90:
fe:5d:8e:e0:f1:db:41:ee:7a:9f:9b:80:bc:0d:0d:
f5:a5:e6:d9:bc:a9:62:18:79:9f:2d:bc:97:ef:6e:
dc:b1:af:1d:48:c5:6b:8b:4d:d5:34:02:7d:15:80:
0f:3a:95:9b:16:c7:08:cc:df:f4:bc:76:2d:4a:f8:
f7:6c:ff:89:cf:1d:e0:30:92:9e:ef:48:33:b5:42:
9c:ed:a2:5d:33:dd:35:c7:c4:36:73:1e:a5:ce:4d:
a8:90:4e:bf:c9:56:b1:c1:db:9c:ac:09:b0:72:35:
c6:51:a6:b3:6b:72:f6:5d:0a:34:a4:2b:f2:4f:6c:
d0:fb:2b:e8:b4:4b:fa:ae:15:53:4d:8c:d5:ac:0e:
0d:16:5d:f7:8b:cf:6c:31:5e:25:8e:0c:d6:52:4c:
6c:5b:be:6d:da:e3:a3:61:d2:a5:62:59:84:13:69:
3b:a2:72:ff:ca:d0:04:4b:33:52:7b:35:f3:c6:a3:
d7:dc:3f:57:dc:f5:6b:87:14:d8:f4:85:31:8e:31:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D0:96:12:78:F3:37:57:55:39:25:9D:4C:D9:85:5F:12:99:4F:52
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/ltCWEnjzN1dVOSWdTNmFXxKZT1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.145.0-45.43.146.255
45.43.148.0/22
45.43.154.0/23
45.43.158.0-45.43.161.255
104.222.176.0/21
104.222.189.0/24
104.233.8.0/23
104.233.59.0/24
104.238.6.0/24
104.238.11.0-104.238.13.255
104.239.8.0/24
104.239.12.0/24
104.239.14.0/24
104.239.29.0/24
104.239.54.0-104.239.65.255
104.249.8.0-104.249.23.255
104.249.42.0-104.249.54.255
216.173.90.0-216.173.93.255
Signature Algorithm: sha256WithRSAEncryption
36:2a:20:79:5a:13:20:b3:af:5d:2b:c8:58:7a:ed:b7:87:0d:
94:5b:7a:10:e9:34:3f:57:ec:98:90:25:5b:61:10:8c:ec:27:
5e:f2:66:91:29:79:2d:9a:e8:40:95:4e:b6:d7:cd:91:e1:f2:
4e:e1:35:d6:61:e5:d1:f6:89:ba:e5:2b:cc:b2:93:52:f8:f3:
71:e8:0a:54:e4:fe:cd:a9:cb:c4:95:f3:27:d7:d3:cf:6f:96:
ff:2b:df:8b:23:d7:d0:01:9b:0c:1c:d7:4b:81:37:b6:6c:e9:
85:80:42:21:98:82:aa:6b:27:63:5a:c3:c1:e3:38:eb:4c:fa:
4e:d3:9b:4b:fb:c7:c6:06:dd:69:a9:14:6e:f9:b4:db:52:ff:
bb:b2:26:38:c0:f0:09:6b:2f:b4:d3:97:90:73:13:9c:a7:b2:
4f:3c:51:2e:8c:b0:8e:96:1d:62:89:72:c9:ee:d9:c8:af:1a:
99:a4:4c:55:54:43:f3:8a:35:61:7e:81:e0:70:a7:69:6b:4a:
db:b4:31:5b:c3:ec:e1:4f:9b:b6:74:79:44:39:6b:a0:26:b9:
7b:00:d3:2a:0d:94:12:3c:6e:f4:0d:d4:3c:c6:36:d7:2a:66:
8a:f9:78:6b:00:de:25:6a:ed:58:d7:22:a5:6c:ba:44:49:30:
22:79:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:48:43 2025 by rpki-client