Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/cpXzYrE2TXeqg-Xsb8gnfAp17Ik.roa
File: cpXzYrE2TXeqg-Xsb8gnfAp17Ik.roa (raw, json)
Hash identifier: klAMnJFaur3SqCWZjbNl/el7+qn1qz6zvsxJUuLWW5U=
Subject key identifier: 72:95:F3:62:B1:36:4D:77:AA:83:E5:EC:6F:C8:27:7C:0A:75:EC:89
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01958B11BAB64DBFC88A287295E68975066F
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/cpXzYrE2TXeqg-Xsb8gnfAp17Ik.roa
Signing time: Wed 12 Mar 2025 15:55:49 +0000
ROA not before: Wed 12 Mar 2025 15:55:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.232.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
91.92.40.0/24 maxlen: 24
91.92.41.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.43.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
93.152.220.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 06:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:11:ba:b6:4d:bf:c8:8a:28:72:95:e6:89:75:06:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Mar 12 15:55:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7295f362b1364d77aa83e5ec6fc8277c0a75ec89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:e6:1e:f1:1d:8f:27:b0:bd:cd:65:20:fb:
b4:b8:2a:44:90:60:19:2c:a1:df:73:7c:53:3c:e5:
de:e5:d9:a6:ef:ee:bc:2a:ad:a7:10:e3:53:e7:15:
aa:c8:18:4d:20:58:26:1b:bf:97:78:3f:19:50:09:
24:5c:cd:1f:f7:0b:10:66:40:ae:dd:52:db:80:ef:
3d:d9:d0:52:80:a1:33:ed:ad:0b:73:b1:97:76:5b:
ed:12:e0:2c:82:9f:e7:a8:b3:c3:6d:79:fc:d5:25:
57:95:3f:e9:37:b9:3a:83:77:76:63:dd:c9:a5:e4:
46:1a:1e:a3:e1:7e:3d:ee:ca:4c:9d:a2:6f:b1:34:
8d:ff:b3:68:0d:fe:9d:c6:aa:98:45:fe:d4:4c:5f:
dd:b0:b7:31:f1:0e:21:74:5a:95:e3:80:e3:e1:aa:
4d:0f:40:9a:01:6a:12:15:d9:79:78:4a:6b:f0:99:
90:92:33:8e:c1:08:d1:79:53:47:c4:5b:72:5d:71:
cc:8d:1b:5d:75:72:75:9f:bc:36:77:e9:bf:ab:61:
25:b8:54:7c:ba:6e:df:11:17:ee:49:83:0e:7b:01:
f0:dc:ea:e3:88:b3:4b:6a:19:fc:0c:c6:e4:1b:13:
4b:4f:57:64:65:d9:cf:80:4c:4c:89:f2:6c:75:7e:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:95:F3:62:B1:36:4D:77:AA:83:E5:EC:6F:C8:27:7C:0A:75:EC:89
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/cpXzYrE2TXeqg-Xsb8gnfAp17Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/24
45.141.234.0/23
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.33.0-91.92.35.255
91.92.40.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.206.0/23
93.152.209.0-93.152.211.255
93.152.213.0-93.152.227.255
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/23
185.96.255.0/24
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
54:df:d5:74:99:5c:75:c5:b5:9c:bb:08:c2:68:a2:a7:ea:af:
f7:12:72:e7:c0:99:d9:df:ac:6f:7a:fc:e3:ec:84:de:03:81:
c4:c6:53:24:8e:f0:35:a3:72:6d:74:49:2f:db:eb:ed:04:4f:
a3:cb:07:ec:30:b1:68:c6:4c:d5:6f:e6:f5:6b:ad:8d:3a:b3:
87:68:20:8d:03:6f:15:dd:33:d9:b4:10:a8:f3:79:3c:38:46:
4a:84:30:60:bb:23:e0:b3:02:40:5a:c8:35:cc:0b:f7:a8:0c:
ae:ed:d4:23:52:5b:2a:36:bb:5a:61:e2:18:c2:e4:dd:36:37:
65:3a:da:0d:ff:c4:ea:61:b0:64:db:5a:b8:30:f4:78:b0:1c:
0c:12:e1:2b:b4:34:48:56:ff:c9:58:03:0e:87:73:be:be:a5:
de:67:37:95:3c:c6:41:5c:6d:b9:7b:84:de:63:57:3d:fc:7f:
bc:cd:c5:38:f9:97:d3:5e:19:88:7b:48:27:8d:91:1b:be:b3:
7c:55:89:fa:db:26:3d:3c:b4:65:3d:74:fb:e9:6e:18:9c:0f:
03:bc:fc:ab:bb:c7:f6:f5:77:47:77:60:75:25:b6:8b:42:b7:
4b:2a:7f:11:ad:55:2a:c6:a6:b8:d4:d9:88:70:49:7f:53:a2:
87:15:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:30:53 2025 by rpki-client