Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LlVNjBgCazd1XngHG__ofFodJLI.roa
File: LlVNjBgCazd1XngHG__ofFodJLI.roa (raw, json)
Hash identifier: XZgKcLW2WFtBFJGXr+Q2MA6QNa2hNx+JROpqbSGfjL4=
Subject key identifier: 2E:55:4D:8C:18:02:6B:37:75:5E:78:07:1B:FF:E8:7C:5A:1D:24:B2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196FE591DE6E80EC997494C79B7CF220767
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LlVNjBgCazd1XngHG__ofFodJLI.roa
Signing time: Fri 23 May 2025 18:12:55 +0000
ROA not before: Fri 23 May 2025 18:12:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 45.94.47.0/24 maxlen: 24
45.134.184.0/24 maxlen: 24
85.209.130.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
194.62.30.0/24 maxlen: 24
194.62.66.0/24 maxlen: 24
195.66.26.0/24 maxlen: 24
2a0f:8100::/29 maxlen: 29
2a0f:e7c4:10::/48 maxlen: 48
2a11:3500::/29 maxlen: 29
2a13:8c86:120::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 12:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fe:59:1d:e6:e8:0e:c9:97:49:4c:79:b7:cf:22:07:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 23 18:12:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e554d8c18026b37755e78071bffe87c5a1d24b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:53:d0:8f:c6:c3:1d:59:93:cc:3f:d8:b1:f4:
08:16:e0:35:a7:59:86:c2:dc:b1:27:61:eb:e3:55:
77:2c:4c:f9:f2:e1:ce:a4:4d:22:5a:00:dc:71:0d:
05:f2:d0:3f:98:2a:a1:cd:05:cf:f9:25:22:75:c3:
a6:54:23:fa:ac:a8:b2:78:ea:5a:5a:a4:d2:a1:f4:
a3:a6:16:32:34:3e:94:1e:56:b3:90:8b:5c:d5:9c:
ea:80:19:ef:6e:c6:f3:ae:c4:89:e0:16:49:0d:ef:
f6:23:65:00:17:c4:c9:0b:f8:54:ef:18:f0:73:04:
16:40:3e:b1:1c:cc:18:df:70:c3:11:ca:d2:49:d7:
95:82:d6:8e:ef:71:92:a0:a7:a3:5a:3f:c9:53:e6:
4b:de:7e:7e:44:cb:36:6d:5b:9f:4d:3a:f0:71:a6:
0c:83:8a:3c:45:87:96:12:e7:de:f0:4d:30:40:65:
9b:cf:4e:fa:5d:a2:a1:d0:3b:6c:21:27:e6:76:b8:
f9:c9:c6:91:17:c0:9c:8d:b1:53:9d:d3:1a:48:e2:
a9:6c:b5:e6:57:4c:b3:71:ba:0f:00:27:86:5a:57:
7e:3e:61:a3:3b:ba:fb:c8:90:17:ec:fb:c6:2a:b0:
ca:95:15:aa:97:ab:ba:cb:72:72:a6:6d:14:55:8f:
b9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:55:4D:8C:18:02:6B:37:75:5E:78:07:1B:FF:E8:7C:5A:1D:24:B2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LlVNjBgCazd1XngHG__ofFodJLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.47.0/24
45.134.184.0/24
85.209.130.0/24
185.164.59.0/24
194.62.30.0/24
194.62.66.0/24
195.66.26.0/24
IPv6:
2a0f:8100::/29
2a0f:e7c4:10::/48
2a11:3500::/29
2a13:8c86:120::/48
Signature Algorithm: sha256WithRSAEncryption
ad:03:9e:20:be:47:6f:4d:d6:66:a9:9c:f0:e9:b9:9a:55:3f:
e7:66:e0:bb:e5:6b:8c:70:4f:11:a1:80:6c:04:cc:82:c4:f3:
b8:6c:c2:e7:52:86:d7:a8:ea:ec:ce:00:f6:ff:7a:4a:1c:e9:
d9:7d:20:34:90:ec:0a:f0:0e:7b:11:9d:e9:17:eb:b5:bb:1f:
a1:5e:7f:77:a4:b4:6e:72:68:17:ce:2d:3d:ad:60:67:09:d1:
4a:51:da:40:d6:26:f5:1d:90:41:03:72:c1:a2:97:9a:c7:a9:
8a:c2:86:24:8b:41:f3:78:55:10:31:d8:05:02:d8:31:d3:55:
7c:0f:83:c6:7a:88:7e:5c:d0:de:8f:ce:98:bc:55:e8:63:22:
57:5b:73:56:d7:ce:48:ae:9f:01:fe:97:a9:38:e2:cc:6d:b9:
ba:20:4a:ca:bc:f6:f3:1f:05:0f:e5:b0:91:d9:05:84:5a:6c:
de:a6:66:17:63:9a:7f:be:82:46:e9:9d:9c:7f:7b:2a:96:b4:
9b:80:39:b1:b3:ca:e6:f6:2b:8b:a4:c1:ea:e6:56:5b:43:4a:
c8:db:be:ea:dd:36:84:54:7f:33:2d:46:1b:81:6c:6a:6b:aa:
68:24:9e:4b:fc:e0:f5:fc:85:f2:fb:e1:3e:d0:c0:b3:ae:2a:
9f:af:f6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:35:47 2025 by rpki-client