Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/EEKpbtgWV4eesRibVmJCOGt_5Co.roa
File: EEKpbtgWV4eesRibVmJCOGt_5Co.roa (raw, json)
Hash identifier: ba/HesDCQeR9plzHfCZI7KWVL+ysSbG2580ZCAcXYKM=
Subject key identifier: 10:42:A9:6E:D8:16:57:87:9E:B1:18:9B:56:62:42:38:6B:7F:E4:2A
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 019666A01A3A6536AD412C0F0D02654EC148
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/EEKpbtgWV4eesRibVmJCOGt_5Co.roa
Signing time: Thu 24 Apr 2025 07:08:10 +0000
ROA not before: Thu 24 Apr 2025 07:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202105
IP address blocks: 83.136.8.0/24 maxlen: 24
83.136.9.0/24 maxlen: 24
83.136.10.0/24 maxlen: 24
83.136.11.0/24 maxlen: 24
83.136.12.0/24 maxlen: 24
83.136.13.0/24 maxlen: 24
83.136.14.0/24 maxlen: 24
83.136.15.0/24 maxlen: 24
87.237.224.0/24 maxlen: 24
87.237.225.0/24 maxlen: 24
87.237.226.0/24 maxlen: 24
87.237.227.0/24 maxlen: 24
87.237.228.0/24 maxlen: 24
87.237.229.0/24 maxlen: 24
87.237.230.0/24 maxlen: 24
87.237.231.0/24 maxlen: 24
185.11.120.0/24 maxlen: 24
185.11.121.0/24 maxlen: 24
185.11.122.0/24 maxlen: 24
185.11.123.0/24 maxlen: 24
185.51.204.0/24 maxlen: 24
185.51.205.0/24 maxlen: 24
185.51.206.0/24 maxlen: 24
185.51.207.0/24 maxlen: 24
185.82.116.0/24 maxlen: 24
185.82.117.0/24 maxlen: 24
185.82.118.0/24 maxlen: 24
185.82.119.0/24 maxlen: 24
185.108.240.0/24 maxlen: 24
185.108.241.0/24 maxlen: 24
185.108.242.0/24 maxlen: 24
185.108.243.0/24 maxlen: 24
185.133.84.0/24 maxlen: 24
185.133.85.0/24 maxlen: 24
185.133.86.0/24 maxlen: 24
185.133.87.0/24 maxlen: 24
185.164.27.0/24 maxlen: 24
185.164.29.0/24 maxlen: 24
185.206.28.0/24 maxlen: 24
185.206.29.0/24 maxlen: 24
185.206.30.0/24 maxlen: 24
185.206.132.0/24 maxlen: 24
185.206.133.0/24 maxlen: 24
185.206.134.0/24 maxlen: 24
185.206.135.0/24 maxlen: 24
185.217.8.0/24 maxlen: 24
185.217.9.0/24 maxlen: 24
185.217.10.0/24 maxlen: 24
185.217.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Apr 2025 21:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:66:a0:1a:3a:65:36:ad:41:2c:0f:0d:02:65:4e:c1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Apr 24 07:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1042a96ed81657879eb1189b566242386b7fe42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:f3:13:6b:63:81:d6:8e:3d:86:d3:39:91:
85:f8:eb:ba:30:54:ed:78:29:b8:46:72:11:0f:42:
f0:8d:ae:3e:93:f9:bc:12:7a:79:59:a2:3c:1a:14:
34:15:52:fd:8d:53:30:2f:e2:d2:84:86:76:0b:84:
20:f5:e8:f3:4b:4d:0f:29:07:24:e8:d9:b1:9a:95:
ac:7e:a4:4f:a4:64:2b:d3:47:6e:92:71:9b:df:02:
86:19:29:2e:c2:00:ca:db:91:57:d0:1c:4e:e9:10:
86:6d:a7:77:a0:4c:28:9c:17:db:a7:e3:30:fd:b6:
fb:56:c9:91:22:9a:4d:b7:58:1b:8d:7c:80:9c:b3:
52:66:81:1f:46:ba:80:ef:98:4d:b8:d6:9d:6b:d6:
9a:d6:49:35:b0:57:48:98:d2:d0:1e:d0:e9:3f:29:
e3:50:e0:09:69:1a:e9:04:af:36:7d:35:4d:80:f5:
3e:85:94:46:0d:dd:51:32:11:ca:5d:e6:3a:0e:60:
2f:c9:16:87:36:e9:df:72:4e:fa:70:29:5c:25:68:
0f:a8:02:a0:3f:68:64:91:05:9f:6a:25:f5:0d:34:
6c:ca:95:4a:c5:0f:1f:fd:c4:47:b3:f6:5c:f7:74:
98:e6:eb:af:fd:3a:93:2a:df:c2:7d:c1:a8:20:dc:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:42:A9:6E:D8:16:57:87:9E:B1:18:9B:56:62:42:38:6B:7F:E4:2A
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/EEKpbtgWV4eesRibVmJCOGt_5Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.8.0/21
87.237.224.0/21
185.11.120.0/22
185.51.204.0/22
185.82.116.0/22
185.108.240.0/22
185.133.84.0/22
185.164.27.0/24
185.164.29.0/24
185.206.28.0-185.206.30.255
185.206.132.0/22
185.217.8.0/22
Signature Algorithm: sha256WithRSAEncryption
24:2a:80:55:2f:98:93:7d:a1:4f:c3:71:99:fa:e4:be:92:2e:
22:cf:a8:7c:d9:bc:24:93:13:36:5d:8c:14:25:77:f4:70:e8:
1b:9f:9a:c3:0f:8e:5e:5f:b3:13:3b:c2:fa:a6:7a:37:c8:77:
37:1d:48:96:ac:92:fe:3e:71:21:f5:e7:21:d6:cb:25:72:bf:
57:73:63:ac:12:4b:cb:41:bd:34:e1:cc:e8:27:b3:dd:e2:95:
13:92:69:73:d5:93:40:e6:6e:9a:f0:7c:13:a9:5b:b9:a8:9f:
e0:b7:41:31:70:a1:ef:7b:90:fe:f2:75:9f:69:26:1d:93:b9:
54:aa:c4:4b:66:72:9c:09:9c:66:38:78:f6:ec:a2:af:c4:44:
62:93:78:be:78:8d:71:a3:5d:57:3e:5b:0d:1d:6a:d1:a8:b1:
dd:77:ed:44:82:fd:f8:fe:8c:62:03:f2:08:26:a2:92:e5:c3:
29:3d:51:f1:e3:4b:59:4e:e0:82:8f:12:84:45:92:23:1a:9c:
55:d5:b5:29:1b:68:be:56:e5:6f:12:af:14:26:86:6c:9d:e0:
90:e5:5b:1c:88:e1:a5:1b:fd:0e:bd:b2:87:fa:56:d8:66:21:
c7:b4:7c:f2:5e:9a:0e:7e:ae:13:c1:7d:1a:1b:78:15:ef:2a:
d6:b8:72:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:08:49 2025 by rpki-client