Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lbIQmSyIfD7dOoDtOT5VmkAI45U.roa
File: lbIQmSyIfD7dOoDtOT5VmkAI45U.roa (raw, json)
Hash identifier: LwhWy4lXThueUE7yzQFCTr4B/XnptkH3dziNckVAHAU=
Subject key identifier: 95:B2:10:99:2C:88:7C:3E:DD:3A:80:ED:39:3E:55:9A:40:08:E3:95
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019730A39CAE422DAE6210EAC50E221286EE
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lbIQmSyIfD7dOoDtOT5VmkAI45U.roa
Signing time: Mon 02 Jun 2025 12:35:18 +0000
ROA not before: Mon 02 Jun 2025 12:35:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 08:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:a3:9c:ae:42:2d:ae:62:10:ea:c5:0e:22:12:86:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 2 12:35:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95b210992c887c3edd3a80ed393e559a4008e395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:05:e1:e8:0e:75:bd:be:13:bc:cd:70:38:9c:
c0:10:f9:6a:c0:09:e9:02:e2:05:f3:74:de:ca:0e:
85:f3:a3:c5:b4:3b:76:4a:59:b2:18:35:eb:a5:d4:
b0:75:0e:b7:56:e9:9b:67:48:1c:63:db:5a:f4:39:
56:b8:f7:c4:61:1d:0c:0f:c3:dc:f9:fb:71:f4:d8:
b4:78:56:dd:23:37:46:ce:ed:4e:f3:79:01:f6:f0:
66:93:e3:68:b1:4a:b3:1c:84:be:9e:fa:f7:3f:8a:
f6:97:96:67:af:29:8d:ef:56:24:9c:28:dd:0e:93:
1b:16:83:e0:ed:f7:e0:2d:c4:c1:60:4e:02:5d:75:
08:0f:95:b3:d3:ac:c1:86:a8:fb:e5:11:1c:ef:b4:
46:34:7a:d1:79:0b:38:66:24:ca:c0:48:a2:8a:db:
91:12:eb:d0:3a:de:45:26:3a:bb:9b:01:e8:ff:21:
36:4f:91:52:e5:05:f7:3e:ff:36:05:2f:77:04:d6:
75:e0:9b:05:a9:3e:58:c6:cb:62:fb:c2:ff:27:b8:
79:c8:68:e2:9f:07:8b:ba:97:6a:8a:30:c0:2c:c9:
95:1c:d3:af:00:05:d7:66:2d:b2:59:3c:48:a5:ef:
ee:0d:27:d0:c5:f3:e6:24:11:ca:47:ea:c7:97:d2:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B2:10:99:2C:88:7C:3E:DD:3A:80:ED:39:3E:55:9A:40:08:E3:95
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/lbIQmSyIfD7dOoDtOT5VmkAI45U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.135.255
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/23
212.32.74.0/24
212.56.50.0/23
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:db:0b:1c:6c:a9:0e:d1:15:9b:ad:7b:8d:83:0c:db:87:ce:
18:ac:9e:3d:d7:d2:b1:46:64:dc:68:48:4f:9d:a3:3e:41:e6:
e0:95:31:75:74:b0:a0:31:2f:d1:97:bc:97:11:2b:58:25:76:
76:8a:ea:15:0f:c4:e3:40:e2:3e:8b:17:b3:07:d2:6b:78:ec:
35:93:21:b0:fd:b7:f8:24:ea:84:20:1b:b9:db:c3:80:05:f8:
d7:52:49:e6:c4:8d:4d:b8:4c:c1:8f:be:c2:7a:7f:4a:2a:53:
b8:8a:3d:ed:7b:e5:cf:4a:62:c5:6a:7b:e6:74:ca:b9:51:d9:
1c:54:3d:e5:56:db:5f:03:43:26:0f:65:17:02:c6:eb:9f:3e:
20:62:fd:58:d1:49:fb:b0:22:f9:ca:53:9e:97:d1:80:95:5c:
f7:aa:f2:6b:cd:e9:53:64:92:aa:ad:04:be:ce:ac:dc:6f:0c:
3b:4e:62:5c:b1:5f:b8:6b:46:83:4f:04:80:64:72:50:60:2d:
04:32:8e:03:24:db:a2:ab:c9:db:bd:35:ea:d2:f1:0b:8a:0a:
54:ea:d9:00:45:75:1b:40:9d:d8:69:23:6d:cb:7d:5b:7b:6c:
1d:b2:99:29:88:f0:3d:7d:c7:85:c8:84:02:69:da:4a:c9:c9:
2d:5c:e1:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:33:35 2025 by rpki-client