Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/LUp9kIE1PtnWaC09W9GLgZVB1jU.roa
File: LUp9kIE1PtnWaC09W9GLgZVB1jU.roa (raw, json)
Hash identifier: q8qJdOcGHtwHQvY0fB4IQQy6a3vWj93yWhiLMDlQ3Io=
Subject key identifier: 2D:4A:7D:90:81:35:3E:D9:D6:68:2D:3D:5B:D1:8B:81:95:41:D6:35
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 01966161F164712BCCF2FDAF75AA8EA31A4E
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/LUp9kIE1PtnWaC09W9GLgZVB1jU.roa
Signing time: Wed 23 Apr 2025 06:42:10 +0000
ROA not before: Wed 23 Apr 2025 06:42:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49685
IP address blocks: 31.3.8.0/21 maxlen: 24
31.3.96.0/21 maxlen: 24
31.223.160.0/20 maxlen: 24
37.17.208.0/20 maxlen: 24
37.34.48.0/21 maxlen: 24
37.230.96.0/21 maxlen: 24
46.226.56.0/21 maxlen: 24
78.108.128.0/20 maxlen: 24
79.170.88.0/21 maxlen: 24
80.84.224.0/19 maxlen: 24
80.246.192.0/20 maxlen: 24
80.246.207.0/24 maxlen: 24
80.255.240.0/20 maxlen: 24
81.4.64.0/19 maxlen: 24
81.4.96.0/22 maxlen: 24
81.4.112.0/21 maxlen: 24
81.21.136.0/21 maxlen: 24
81.30.32.0/20 maxlen: 24
83.96.128.0/17 maxlen: 24
83.96.200.0/22 maxlen: 24
83.96.204.0/22 maxlen: 24
83.96.212.0/22 maxlen: 24
83.96.216.0/22 maxlen: 24
83.96.236.0/22 maxlen: 24
83.96.240.0/22 maxlen: 24
83.96.244.0/22 maxlen: 24
83.96.252.0/22 maxlen: 24
85.10.160.0/19 maxlen: 24
85.10.172.0/22 maxlen: 24
85.10.176.0/22 maxlen: 24
85.158.248.0/22 maxlen: 24
85.158.252.0/23 maxlen: 24
85.222.224.0/21 maxlen: 24
89.31.96.0/21 maxlen: 24
91.142.240.0/20 maxlen: 24
91.189.208.0/22 maxlen: 24
91.205.32.0/22 maxlen: 24
91.216.162.0/24 maxlen: 24
93.191.128.0/21 maxlen: 24
94.142.208.0/21 maxlen: 24
141.138.192.0/20 maxlen: 24
141.255.176.0/22 maxlen: 24
141.255.180.0/22 maxlen: 24
171.33.128.0/21 maxlen: 24
171.33.128.0/24 maxlen: 24
176.74.224.0/19 maxlen: 24
178.18.80.0/20 maxlen: 24
185.3.208.0/22 maxlen: 24
185.15.248.0/22 maxlen: 24
185.21.188.0/22 maxlen: 24
185.65.52.0/22 maxlen: 24
185.69.232.0/22 maxlen: 24
185.84.72.0/22 maxlen: 24
185.89.152.0/22 maxlen: 24
185.95.68.0/22 maxlen: 24
185.105.204.0/22 maxlen: 24
185.105.216.0/22 maxlen: 24
185.110.172.0/22 maxlen: 24
185.110.173.0/24 maxlen: 24
185.110.200.0/22 maxlen: 24
193.93.172.0/22 maxlen: 24
193.138.204.0/22 maxlen: 24
193.242.119.0/24 maxlen: 24
194.60.207.0/24 maxlen: 24
213.187.240.0/21 maxlen: 24
217.21.240.0/20 maxlen: 24
217.149.128.0/20 maxlen: 24
2001:828::/32 maxlen: 48
2001:4cb8::/29 maxlen: 48
2001:4cb8:e::/48 maxlen: 48
2001:4cb8:40b::/48 maxlen: 48
2a00:c080::/32 maxlen: 48
2a02:348::/32 maxlen: 48
2a02:348:28::/48 maxlen: 48
2a02:348:29::/48 maxlen: 48
2a02:348:7d::/48 maxlen: 48
2a03:4f00::/32 maxlen: 48
2a03:5700::/32 maxlen: 48
2a05:2500::/32 maxlen: 48
2a05:a282::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Apr 2025 07:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:61:f1:64:71:2b:cc:f2:fd:af:75:aa:8e:a3:1a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Apr 23 06:42:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d4a7d9081353ed9d6682d3d5bd18b819541d635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:5c:a7:51:b7:f1:ee:c4:86:8e:cc:da:b9:
f5:ff:05:a9:27:09:96:df:a1:ea:6b:43:0d:f1:bd:
db:7e:2a:6c:69:00:f3:fa:b6:ce:4b:42:0d:99:f6:
5a:50:53:17:8c:c9:35:56:5b:ca:32:03:d9:b4:73:
94:50:15:82:d3:7e:5f:30:5f:4f:e2:a6:fe:8b:8f:
8f:2f:48:29:16:5b:3e:e1:e9:ab:c0:74:ab:c4:23:
a3:fa:c0:72:ac:a4:4a:0e:33:2d:a3:3b:fa:f7:27:
57:5d:af:5c:35:7d:4a:0c:ea:bb:cb:55:e6:c5:44:
16:43:b4:6d:ec:be:ac:7d:9c:53:aa:9e:c3:2d:af:
62:e4:c1:8e:f3:9e:61:69:f1:5d:7e:8e:5b:3d:98:
55:19:14:fa:bd:3b:73:91:f5:3b:dd:69:46:e3:65:
79:2d:82:c3:57:f8:d6:9e:b2:73:ff:e4:a5:53:84:
8b:24:bf:07:81:54:9b:00:e7:1e:11:b2:9c:d1:5d:
38:8f:2d:78:82:96:ff:36:35:02:c5:9a:37:98:2b:
ab:d3:8b:fc:90:26:d8:3c:db:a9:8c:64:72:60:a9:
1f:1a:f1:7c:fa:e5:37:3c:b2:0e:21:0c:36:27:68:
0b:e2:52:41:75:2e:3b:c5:65:a6:20:25:3b:dd:5c:
b2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4A:7D:90:81:35:3E:D9:D6:68:2D:3D:5B:D1:8B:81:95:41:D6:35
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/LUp9kIE1PtnWaC09W9GLgZVB1jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.8.0/21
31.3.96.0/21
31.223.160.0/20
37.17.208.0/20
37.34.48.0/21
37.230.96.0/21
46.226.56.0/21
78.108.128.0/20
79.170.88.0/21
80.84.224.0/19
80.246.192.0/20
80.255.240.0/20
81.4.64.0-81.4.99.255
81.4.112.0/21
81.21.136.0/21
81.30.32.0/20
83.96.128.0/17
85.10.160.0/19
85.158.248.0-85.158.253.255
85.222.224.0/21
89.31.96.0/21
91.142.240.0/20
91.189.208.0/22
91.205.32.0/22
91.216.162.0/24
93.191.128.0/21
94.142.208.0/21
141.138.192.0/20
141.255.176.0/21
171.33.128.0/21
176.74.224.0/19
178.18.80.0/20
185.3.208.0/22
185.15.248.0/22
185.21.188.0/22
185.65.52.0/22
185.69.232.0/22
185.84.72.0/22
185.89.152.0/22
185.95.68.0/22
185.105.204.0/22
185.105.216.0/22
185.110.172.0/22
185.110.200.0/22
193.93.172.0/22
193.138.204.0/22
193.242.119.0/24
194.60.207.0/24
213.187.240.0/21
217.21.240.0/20
217.149.128.0/20
IPv6:
2001:828::/32
2001:4cb8::/29
2a00:c080::/32
2a02:348::/32
2a03:4f00::/32
2a03:5700::/32
2a05:2500::/32
2a05:a282::/32
Signature Algorithm: sha256WithRSAEncryption
c8:7f:12:bd:60:2e:de:1c:c9:13:13:f3:ca:71:23:35:2a:61:
43:88:c1:f6:16:61:ef:34:f3:2b:62:be:05:5d:20:df:3d:e3:
14:36:76:04:66:4d:03:4a:ab:66:58:f2:b8:40:3b:0e:ec:f7:
64:e3:52:e4:01:0c:04:35:ab:8b:ab:b9:5a:e1:0d:11:f9:0b:
67:16:e3:14:b8:d8:90:2b:1f:f7:d4:19:32:d1:c8:24:15:61:
0b:39:a5:d5:b4:ad:61:41:97:3a:11:0d:0c:25:ad:63:04:23:
77:c1:09:76:a4:77:db:99:3f:07:1e:86:23:80:f0:09:e0:6e:
e7:b7:4a:b2:23:39:8f:27:0b:f8:a6:f8:9c:02:d6:7e:12:6c:
1c:3c:2f:9c:0e:ac:28:a8:d8:b5:83:96:56:de:11:d9:77:66:
57:58:80:52:cb:00:af:29:37:02:aa:8e:15:a2:ce:f7:1c:34:
5f:dc:63:2a:e2:92:a3:d9:f6:a1:af:4d:f3:c2:7c:cb:83:a7:
78:8a:f7:c5:67:91:38:1d:50:8b:e0:fe:b6:a5:5d:3b:fa:30:
ab:69:ba:f2:2a:a6:db:6b:cf:6d:d7:b7:eb:93:02:70:25:06:
a6:2b:fb:31:de:f7:4c:88:73:c4:05:d2:d9:75:13:e8:8f:dc:
28:e3:ce:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:58 2025 by rpki-client