Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/LlvsmRKIw8gdzx9W-JMz64-4wG0.roa
File: LlvsmRKIw8gdzx9W-JMz64-4wG0.roa (raw, json)
Hash identifier: Be6EwTTWmwbp0XpqmQa1hTD67XKS4GLRgTHljkZiBZA=
Subject key identifier: 2E:5B:EC:99:12:88:C3:C8:1D:CF:1F:56:F8:93:33:EB:8F:B8:C0:6D
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01955C90AB6A87F9D759B9563D48470E1E05
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/LlvsmRKIw8gdzx9W-JMz64-4wG0.roa
Signing time: Mon 03 Mar 2025 15:12:19 +0000
ROA not before: Mon 03 Mar 2025 15:12:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
45.147.45.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a441::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 03 Mar 2025 15:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:90:ab:6a:87:f9:d7:59:b9:56:3d:48:47:0e:1e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 3 15:12:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e5bec991288c3c81dcf1f56f89333eb8fb8c06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:5c:1f:5f:5b:cf:33:0e:05:74:4a:ff:f6:
68:af:58:b9:3c:7d:4f:28:ec:f2:fe:da:8d:4a:a0:
57:32:4a:2b:26:81:d9:44:12:f6:23:a7:f6:df:fd:
f1:9b:de:24:24:84:16:fc:40:27:01:d7:51:9d:f2:
ec:e1:0b:13:7f:2d:37:40:df:34:3b:2a:e4:26:2f:
ab:08:ab:02:42:ce:a8:ef:f2:62:0a:b7:79:c9:c8:
d6:d3:8e:67:a9:2a:f0:f3:5e:c7:98:35:b4:56:ec:
9c:8b:b9:49:75:88:86:b5:a6:ca:1a:72:c3:2d:3e:
93:0b:6a:97:0f:8e:6a:d7:64:5b:67:0b:3c:76:bb:
18:ec:67:75:78:ef:8b:92:22:06:fc:9a:65:0d:c1:
44:83:4f:ad:a4:ff:1d:dc:c9:d5:43:ee:64:3e:ba:
25:e5:26:f7:d4:e1:17:ac:66:7b:ef:38:88:6c:3d:
88:b3:a8:88:65:7c:77:91:75:4c:f5:e7:cd:f2:4c:
37:95:e4:2e:19:c4:10:5d:24:33:3d:e0:18:26:2c:
72:64:99:42:53:47:3b:7d:63:6b:5b:da:2b:ce:1a:
bf:7e:32:f0:20:dc:ae:0d:55:37:1b:86:82:3e:0b:
d3:fa:1b:31:cb:5b:c5:13:f4:aa:77:80:91:8f:8d:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5B:EC:99:12:88:C3:C8:1D:CF:1F:56:F8:93:33:EB:8F:B8:C0:6D
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/LlvsmRKIw8gdzx9W-JMz64-4wG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/23
45.131.3.0/24
45.136.4.0/24
45.141.148.0/24
45.147.44.0/23
77.83.200.0-77.83.202.255
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb07::/32
2a0f:ed00::/29
2a0f:f900::/29
2a13:a441::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
70:11:1c:69:65:c4:e6:9f:00:72:00:19:39:af:50:06:f4:4f:
4b:ca:b1:8a:bb:47:8e:31:38:6b:cd:a9:dc:3e:e4:fb:c6:89:
26:9c:6a:2b:6a:a4:e7:b3:ad:6e:7b:65:52:7a:8e:2e:29:1b:
7b:aa:fe:7d:92:e2:ce:36:21:95:69:5d:07:84:07:0f:ce:e5:
b4:3f:8b:ed:49:f9:46:ce:31:04:31:94:ea:18:ce:4d:01:f9:
03:00:d0:0a:58:e8:d7:ea:54:39:77:f6:d6:4e:cd:52:9d:46:
d5:f4:6c:fe:f7:30:cc:e8:58:c8:47:e2:2f:7c:42:fa:7d:cf:
ad:90:b4:24:81:7e:75:90:a7:df:15:fe:a9:18:0c:b1:57:f1:
bf:20:57:cd:65:c9:70:2a:77:4b:96:91:5c:1c:f6:78:6a:28:
44:0d:f8:29:ce:ca:bb:14:18:60:d0:ea:8f:df:1d:9a:1e:3c:
43:d6:1a:7d:a2:53:3a:34:51:b1:bb:f7:21:f1:28:73:5b:69:
6a:22:b7:0c:ee:89:71:16:1c:96:e5:c0:7c:c7:bc:21:d8:11:
f2:a7:62:d2:f8:84:40:f1:9d:13:62:cd:5a:65:a1:55:1c:7d:
4f:d5:c6:0b:e6:ff:50:55:fb:ec:f0:ab:7e:17:f1:90:ca:0c:
c3:08:d8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:04:43 2025 by rpki-client