Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LKQ0yjvOLOl0N2BoH7l3UyWzaGk.roa
File: LKQ0yjvOLOl0N2BoH7l3UyWzaGk.roa (raw, json)
Hash identifier: VshXzJhT80Ary4mx+wSawc1T+6rVyJpDBSEI+iferFg=
Subject key identifier: 2C:A4:34:CA:3B:CE:2C:E9:74:37:60:68:1F:B9:77:53:25:B3:68:69
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0196EE05F6C4C3C6086D6EA5CA458077B0FA
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LKQ0yjvOLOl0N2BoH7l3UyWzaGk.roa
Signing time: Tue 20 May 2025 14:08:10 +0000
ROA not before: Tue 20 May 2025 14:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 109.204.6.0/23 maxlen: 24
109.204.12.0/23 maxlen: 24
109.204.20.0/23 maxlen: 24
109.204.28.0/23 maxlen: 24
109.204.32.0/23 maxlen: 24
109.204.40.0/23 maxlen: 24
109.204.44.0/23 maxlen: 24
109.204.50.0/23 maxlen: 24
109.204.54.0/23 maxlen: 24
109.204.58.0/23 maxlen: 24
109.204.60.0/23 maxlen: 24
109.204.72.0/23 maxlen: 24
109.204.82.0/23 maxlen: 24
109.204.92.0/23 maxlen: 24
109.204.112.0/23 maxlen: 24
109.204.120.0/23 maxlen: 24
109.204.124.0/23 maxlen: 24
217.79.104.0/22 maxlen: 24
217.79.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 10:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ee:05:f6:c4:c3:c6:08:6d:6e:a5:ca:45:80:77:b0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 20 14:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ca434ca3bce2ce9743760681fb9775325b36869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:ef:52:f1:4c:e6:bd:f3:cd:0d:35:0b:b0:
fe:ae:38:ea:83:67:05:30:5e:ef:e8:72:07:b0:d5:
c5:c9:6f:1d:ac:ee:04:91:37:2a:94:57:f3:1c:f2:
66:e5:ee:24:95:f3:5a:b3:be:74:0e:99:f8:55:13:
44:b9:78:9e:76:5d:51:39:80:81:83:57:3a:31:b4:
63:04:97:b7:9c:15:f5:32:aa:84:07:a9:b3:0d:87:
39:ba:91:e4:7f:39:54:d1:b9:43:37:29:2c:e2:d5:
c5:e1:9b:ae:bf:66:68:4d:9d:ec:ba:22:20:fa:02:
da:97:3a:3b:bb:0a:87:58:11:89:e6:72:1f:6e:d8:
90:7b:6c:19:5a:2a:79:88:a2:74:17:d8:35:55:af:
c1:e8:8a:1e:bd:c4:f5:e7:9d:65:84:c2:85:04:ea:
7b:75:e1:34:97:47:f5:ff:50:71:41:da:3c:a3:7f:
17:da:d9:98:ff:1d:c1:ca:1b:b7:77:22:74:98:55:
a3:d8:12:bf:02:c7:88:4b:d8:32:ec:d6:ac:e8:6d:
e1:f2:5c:d7:73:77:48:64:05:c5:12:da:1c:e7:dc:
9c:ce:7c:9a:37:6f:d7:f1:b0:3e:2b:46:b9:93:62:
fa:cc:16:c7:a0:6e:88:07:e5:6b:bc:f8:ca:9e:28:
54:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A4:34:CA:3B:CE:2C:E9:74:37:60:68:1F:B9:77:53:25:B3:68:69
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/LKQ0yjvOLOl0N2BoH7l3UyWzaGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.204.6.0/23
109.204.12.0/23
109.204.20.0/23
109.204.28.0/23
109.204.32.0/23
109.204.40.0/23
109.204.44.0/23
109.204.50.0/23
109.204.54.0/23
109.204.58.0-109.204.61.255
109.204.72.0/23
109.204.82.0/23
109.204.92.0/23
109.204.112.0/23
109.204.120.0/23
109.204.124.0/23
217.79.104.0/22
217.79.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:b5:b3:0a:67:bc:ee:da:e8:70:08:82:46:80:47:9d:eb:52:
5f:b7:da:c3:66:45:df:c7:b6:e4:7d:c9:75:5b:8f:5e:d2:94:
41:4f:66:83:b5:d7:06:db:3a:cd:25:9b:82:ff:fa:79:d1:83:
cb:74:30:ef:59:c2:dc:92:45:61:5f:8f:97:0a:7d:d3:4a:44:
03:25:56:a2:52:2b:45:67:58:60:3d:c8:5d:8f:71:ee:63:f8:
aa:6b:8c:44:1e:93:4d:fd:0f:91:c2:6e:1d:a8:93:c7:56:a2:
02:57:7e:8e:2a:82:05:86:db:13:03:a0:b5:e6:2a:d5:b9:c5:
4b:7a:58:33:b6:86:ef:b0:66:f1:f2:de:2e:15:c7:00:b5:51:
08:a2:08:f8:12:a8:a5:c5:c0:8d:0a:78:26:43:92:92:e4:7a:
39:4f:99:58:7e:25:8d:85:ab:fd:3c:b1:42:50:87:43:ed:d8:
e7:fa:fe:bf:ae:74:1b:cb:5d:74:e4:ca:d5:0c:96:63:0f:fe:
b8:01:53:60:6e:98:2c:8c:7c:e6:ab:a8:d3:f6:d6:6b:0d:3b:
88:75:42:61:73:09:7e:10:1d:65:11:e7:94:8c:c9:96:0d:ff:
b2:d0:ea:2c:cd:de:77:31:6e:ff:7d:c5:9e:f5:c1:fc:64:60:
ed:5f:d8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:36:47 2025 by rpki-client