Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/EDYEOqz-L7a2FazFYGqm-m_LzT4.roa
File: EDYEOqz-L7a2FazFYGqm-m_LzT4.roa (raw, json)
Hash identifier: BdNG8Fye/pcFvZXVIzgtkLBNG8G/KhRCLRlPsGmZxyQ=
Subject key identifier: 10:36:04:3A:AC:FE:2F:B6:B6:15:AC:C5:60:6A:A6:FA:6F:CB:CD:3E
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 0194FED3C16F01621ABE2D450DE8C3CDE9E5
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/EDYEOqz-L7a2FazFYGqm-m_LzT4.roa
Signing time: Thu 13 Feb 2025 10:21:17 +0000
ROA not before: Thu 13 Feb 2025 10:21:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5539
IP address blocks: 82.118.32.0/19 maxlen: 19
185.54.120.0/22 maxlen: 22
185.54.188.0/22 maxlen: 22
193.149.32.0/19 maxlen: 19
194.97.64.0/19 maxlen: 19
194.97.128.0/19 maxlen: 19
195.24.96.0/19 maxlen: 19
195.30.0.0/16 maxlen: 16
195.30.50.0/24 maxlen: 24
195.30.64.0/24 maxlen: 24
2001:608::/32 maxlen: 32
2001:608:a04::/48 maxlen: 48
2001:67c:158c::/48 maxlen: 48
2001:4150::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 13 Feb 2025 11:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:d3:c1:6f:01:62:1a:be:2d:45:0d:e8:c3:cd:e9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: Feb 13 10:21:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1036043aacfe2fb6b615acc5606aa6fa6fcbcd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:42:68:68:a4:2f:3f:95:97:0c:44:8f:0f:
a7:13:db:37:b2:d1:87:bc:ca:0d:e2:09:ee:6f:00:
e5:6c:41:8f:e9:24:f0:09:6a:7e:4c:1b:70:b5:af:
9c:14:bc:bb:b2:14:59:86:8b:be:ee:d8:9b:6d:90:
60:36:67:ed:0e:53:7d:a8:3a:2a:00:4f:36:38:a6:
d2:1a:6b:ba:b1:c6:b2:6e:b1:49:ad:f9:de:81:d4:
09:65:cf:0f:3b:a9:d4:6d:50:0e:15:04:1a:da:d9:
0d:32:e7:a4:f8:4d:23:a6:d8:95:ba:00:1b:31:c3:
86:2e:9a:8d:5d:15:a7:01:08:03:39:6c:1d:91:d8:
c5:ea:1d:0a:3a:bb:ce:2d:bd:e7:2f:65:6a:bc:71:
13:9e:19:e7:cc:13:98:8d:dc:90:68:1b:0b:4a:61:
72:7a:59:f0:0b:34:1d:71:3f:34:7e:de:d6:49:4e:
f9:25:28:02:89:c7:77:11:92:03:2b:e0:6a:e3:ee:
40:b7:5f:09:02:a0:86:74:ff:fc:e9:7d:1e:0d:5e:
98:0a:fd:f9:96:77:23:57:17:b3:a0:03:40:f0:7d:
fa:e6:ee:0c:e6:4e:7a:4b:6e:aa:6f:b9:5e:f0:d9:
ad:7f:ca:a2:da:11:14:7b:51:56:74:6c:03:07:74:
bf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:36:04:3A:AC:FE:2F:B6:B6:15:AC:C5:60:6A:A6:FA:6F:CB:CD:3E
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/EDYEOqz-L7a2FazFYGqm-m_LzT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.32.0/19
185.54.120.0/22
185.54.188.0/22
193.149.32.0/19
194.97.64.0/19
194.97.128.0/19
195.24.96.0/19
195.30.0.0/16
IPv6:
2001:608::/32
2001:67c:158c::/48
2001:4150::/32
Signature Algorithm: sha256WithRSAEncryption
63:8e:a2:6c:34:4f:2d:da:39:70:bd:23:81:0a:1b:76:a4:3f:
b4:8d:d4:04:a1:c1:34:30:7a:ac:09:36:5a:41:6d:6e:a4:3a:
e3:9e:b4:e9:a7:af:35:00:9e:6e:10:51:de:23:6f:ac:ee:f8:
f2:09:d2:77:c8:fa:6a:02:21:70:9e:39:4c:19:fa:05:5a:7b:
85:36:7c:3d:e3:fb:ea:f9:1a:b4:e9:f0:dd:bc:44:2a:8a:9a:
c3:50:02:79:44:32:4b:95:9c:e4:a7:2c:fa:d7:01:b1:09:73:
2d:2b:b0:69:e2:48:d5:d1:71:54:0d:0b:08:f2:68:06:25:55:
80:f2:6b:49:d9:88:56:63:9d:a3:b4:56:b5:83:b8:81:8a:77:
e6:44:3e:8b:93:d2:8e:c2:72:c9:46:fa:7c:97:58:d9:a7:57:
b0:73:25:86:3b:4a:da:e1:13:10:47:20:20:c6:23:fe:e0:b1:
38:26:17:f3:a7:ce:69:95:4f:db:57:d9:9d:21:db:54:53:32:
fa:42:9f:df:50:58:97:b3:81:5e:5d:ae:5a:aa:c8:ad:6b:69:
e4:f3:fb:f3:59:0b:65:9a:4f:d4:15:c4:a8:8f:ca:bb:94:16:
f7:1e:57:39:80:69:5f:51:6c:4e:f1:d3:46:5f:f9:9c:dd:76:
32:b8:b3:c7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZT+08FvAWIavi1FDejDzenlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OGIzZjBjNmE4N2MwNDViZGNmZmFiZDkwMGRiODg5MmJl
NzAyZTEwHhcNMjUwMjEzMTAyMTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDM2MDQzYWFjZmUyZmI2YjYxNWFjYzU2MDZhYTZmYTZmY2JjZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD1CaGikLz+VlwxEjw+nE9s3stGH
vMoN4gnubwDlbEGP6STwCWp+TBtwta+cFLy7shRZhou+7tibbZBgNmftDlN9qDoq
AE82OKbSGmu6scaybrFJrfnegdQJZc8PO6nUbVAOFQQa2tkNMuek+E0jptiVugAb
McOGLpqNXRWnAQgDOWwdkdjF6h0KOrvOLb3nL2VqvHETnhnnzBOYjdyQaBsLSmFy
elnwCzQdcT80ft7WSU75JSgCicd3EZIDK+Bq4+5At18JAqCGdP/86X0eDV6YCv35
lncjVxezoANA8H365u4M5k56S26qb7le8Nmtf8qi2hEUe1FWdGwDB3S/RQIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFBA2BDqs/i+2thWsxWBqpvpvy80+MB8GA1UdIwQY
MBaAFPSLPwxqh8BFvc/6vZANuIkr5wLhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlzX0RHcUh3RVc5el9xOWtBMjRpU3ZuQXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yZTI3NDctYWQ3NC00ZDMxLTkyNTYt
ZDM1ZWRiOWZkZDIxLzEvRURZRU9xei1MN2EyRmF6RllHcW0tbV9MelQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8yZTI3NDctYWQ3NC00ZDMxLTkyNTYtZDM1ZWRiOWZkZDIx
LzEvOUlzX0RHcUh3RVc5el9xOWtBMjRpU3ZuQXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjA1BAIAATAvAwQFUnYgAwQC
uTZ4AwQCuTa8AwQFwZUgAwQFwmFAAwQFwmGAAwQFwxhgAwMAwx4wHQQCAAIwFwMF
ACABBggDBwAgAQZ8FYwDBQAgAUFQMA0GCSqGSIb3DQEBCwUAA4IBAQBjjqJsNE8t
2jlwvSOBCht2pD+0jdQEocE0MHqsCTZaQW1upDrjnrTpp681AJ5uEFHeI2+s7vjy
CdJ3yPpqAiFwnjlMGfoFWnuFNnw94/vq+Rq06fDdvEQqiprDUAJ5RDJLlZzkpyz6
1wGxCXMtK7Bp4kjV0XFUDQsI8mgGJVWA8mtJ2YhWY52jtFa1g7iBinfmRD6Lk9KO
wnLJRvp8l1jZp1ewcyWGO0ra4RMQRyAgxiP+4LE4Jhfzp85plU/bV9mdIdtUUzL6
Qp/fUFiXs4FeXa5aqsita2nk8/vzWQtlmk/UFcSoj8q7lBb3Hlc5gGlfUWxO8dNG
X/mc3XYyuLPH
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:36:21 2025 by rpki-client