Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/LZEMOa3bIn7up7-_RTvnbOL7TEQ.roa
File: LZEMOa3bIn7up7-_RTvnbOL7TEQ.roa (raw, json)
Hash identifier: zByKiVRZFXo6ikyPl6PW1nQaiEGZE3sNs64hIPA6A78=
Subject key identifier: 2D:91:0C:39:AD:DB:22:7E:EE:A7:BF:BF:45:3B:E7:6C:E2:FB:4C:44
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 0196C510DD2315054DCACE08304EC94EE50D
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/LZEMOa3bIn7up7-_RTvnbOL7TEQ.roa
Signing time: Mon 12 May 2025 15:15:38 +0000
ROA not before: Mon 12 May 2025 15:15:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.66.132.0/24 maxlen: 24
45.66.135.0/24 maxlen: 24
45.82.165.0/24 maxlen: 24
45.85.2.0/24 maxlen: 24
45.134.18.0/24 maxlen: 24
45.144.242.0/24 maxlen: 24
45.144.243.0/24 maxlen: 24
91.220.202.0/24 maxlen: 24
91.220.203.0/24 maxlen: 24
185.120.17.0/24 maxlen: 24
185.126.68.0/24 maxlen: 24
185.126.136.0/24 maxlen: 24
185.126.137.0/24 maxlen: 24
185.172.114.0/24 maxlen: 24
188.119.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 May 2025 16:19:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:10:dd:23:15:05:4d:ca:ce:08:30:4e:c9:4e:e5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: May 12 15:15:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d910c39addb227eeea7bfbf453be76ce2fb4c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f2:a2:cb:d5:a8:1e:ec:9c:c3:ba:72:d4:bf:
5b:c4:f7:a9:3d:29:6c:47:5b:18:a9:9c:03:f9:ac:
98:e9:6c:fd:87:cc:b2:aa:36:3c:27:db:1a:89:f9:
4e:b8:8f:d7:65:bc:52:ac:73:a0:13:1d:8c:7d:44:
44:82:62:89:bf:2e:de:8a:37:97:70:35:ab:d8:5d:
5c:bd:bd:53:19:24:88:1c:4a:96:89:d7:7a:4f:ea:
4d:c1:db:3f:d4:9e:83:49:d5:c0:8a:0d:57:bc:b7:
fb:45:70:90:61:5d:ca:88:9a:3d:3e:89:4e:5f:6c:
4b:5f:e6:e7:74:01:3e:63:4f:07:a1:6d:8d:79:3a:
91:81:e3:63:14:95:e5:36:78:e5:5e:c4:3f:a1:b9:
59:f8:b8:55:21:34:aa:86:4e:b9:bc:89:fb:19:14:
a7:91:c7:25:c8:84:20:ad:2c:4b:85:c8:31:d1:4a:
61:22:63:d9:c6:54:dc:63:61:4d:dd:0f:c0:29:fb:
df:0a:b9:04:9f:72:e0:c9:21:0b:cb:19:4e:3f:b9:
2a:30:bd:bb:db:47:71:25:33:62:76:73:8e:72:2c:
7d:61:84:55:78:32:ab:7b:2d:62:23:23:f0:89:b9:
06:ad:bb:42:eb:46:09:b2:47:ea:a9:b5:41:f5:e3:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:91:0C:39:AD:DB:22:7E:EE:A7:BF:BF:45:3B:E7:6C:E2:FB:4C:44
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/LZEMOa3bIn7up7-_RTvnbOL7TEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.132.0/24
45.66.135.0/24
45.82.165.0/24
45.85.2.0/24
45.134.18.0/24
45.144.242.0/23
91.220.202.0/23
185.120.17.0/24
185.126.68.0/24
185.126.136.0/23
185.172.114.0/24
188.119.102.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:d4:ee:d5:05:ba:92:e6:26:da:d3:67:36:4d:53:b0:ab:da:
a9:dd:64:7d:0f:a0:3f:bb:49:28:39:90:e4:50:44:80:95:67:
26:29:51:94:18:af:47:94:3b:04:36:ab:de:8e:31:42:d4:60:
fd:ff:a8:6b:65:e2:46:5f:a4:fb:65:a7:be:f8:f3:11:09:06:
2c:dc:91:6a:c5:56:9a:46:f9:ea:90:d7:27:fa:22:b2:81:c3:
ae:fa:80:9e:51:cd:d4:f2:07:3a:5c:fd:49:db:bf:0c:56:1d:
43:1c:51:db:04:f9:ab:c1:33:0b:af:78:f0:44:5d:d5:23:48:
21:b1:f7:3a:2e:f1:28:dc:5f:9a:5b:9c:66:5b:cd:f8:c4:40:
08:a2:b2:87:6a:08:0d:5c:b3:50:51:bd:29:0e:42:46:27:2f:
90:5f:d8:ff:00:26:23:b2:d1:69:9d:c9:cd:4a:97:9b:47:94:
82:c2:59:3c:3f:01:ca:a1:61:4b:3c:09:da:f3:2a:eb:c6:37:
68:03:55:fc:53:e1:99:99:ec:22:6d:da:a3:40:a3:6c:ac:59:
18:55:07:ad:eb:25:29:1a:d1:10:10:26:76:b6:07:ea:0e:64:
b9:f3:39:b1:f0:8e:9f:d0:64:b8:8c:6f:d7:82:d6:9e:a9:8e:
6c:a3:cc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:21:05 2025 by rpki-client