Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/pzMyxpTcMdYGnQAcl6TQUJZFuzY.roa
File: pzMyxpTcMdYGnQAcl6TQUJZFuzY.roa (raw, json)
Hash identifier: HVFmgenRDD/alZ3lKNOIGUXet5zuUn3MwSsxc6uf9GM=
Subject key identifier: A7:33:32:C6:94:DC:31:D6:06:9D:00:1C:97:A4:D0:50:96:45:BB:36
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 01945E4D4B5B0555D50252B66FA86EEEA67B
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/pzMyxpTcMdYGnQAcl6TQUJZFuzY.roa
Signing time: Mon 13 Jan 2025 06:15:11 +0000
ROA not before: Mon 13 Jan 2025 06:15:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203217
IP address blocks: 93.180.216.0/21 maxlen: 21
93.180.216.0/23 maxlen: 23
93.180.216.0/24 maxlen: 24
93.180.217.0/24 maxlen: 24
93.180.218.0/23 maxlen: 23
93.180.218.0/24 maxlen: 24
93.180.219.0/24 maxlen: 24
93.180.220.0/23 maxlen: 23
93.180.220.0/24 maxlen: 24
93.180.221.0/24 maxlen: 24
93.180.222.0/24 maxlen: 24
93.180.223.0/24 maxlen: 24
138.124.156.0/22 maxlen: 22
138.124.156.0/23 maxlen: 23
138.124.156.0/24 maxlen: 24
138.124.157.0/24 maxlen: 24
138.124.158.0/23 maxlen: 23
138.124.158.0/24 maxlen: 24
138.124.159.0/24 maxlen: 24
144.86.228.0/22 maxlen: 22
144.86.228.0/23 maxlen: 23
144.86.228.0/24 maxlen: 24
144.86.229.0/24 maxlen: 24
144.86.230.0/23 maxlen: 23
144.86.230.0/24 maxlen: 24
144.86.231.0/24 maxlen: 24
185.20.196.0/23 maxlen: 23
185.20.196.0/24 maxlen: 24
185.20.197.0/24 maxlen: 24
185.20.198.0/23 maxlen: 23
185.20.198.0/24 maxlen: 24
185.20.199.0/24 maxlen: 24
185.138.120.0/23 maxlen: 23
185.138.120.0/24 maxlen: 24
185.138.121.0/24 maxlen: 24
185.138.122.0/23 maxlen: 23
185.138.122.0/24 maxlen: 24
185.138.123.0/24 maxlen: 24
185.254.12.0/23 maxlen: 23
185.254.13.0/24 maxlen: 24
185.254.14.0/23 maxlen: 23
185.254.14.0/24 maxlen: 24
185.254.15.0/24 maxlen: 24
195.133.220.0/23 maxlen: 23
195.133.220.0/24 maxlen: 24
195.133.221.0/24 maxlen: 24
195.133.222.0/23 maxlen: 23
195.133.222.0/24 maxlen: 24
195.133.223.0/24 maxlen: 24
199.74.188.0/23 maxlen: 23
199.74.188.0/24 maxlen: 24
199.74.189.0/24 maxlen: 24
199.74.190.0/23 maxlen: 23
199.74.190.0/24 maxlen: 24
199.74.191.0/24 maxlen: 24
2a0b:1880::/48 maxlen: 48
2a0b:1880:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 30 Jan 2025 09:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5e:4d:4b:5b:05:55:d5:02:52:b6:6f:a8:6e:ee:a6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Jan 13 06:15:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a73332c694dc31d6069d001c97a4d0509645bb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:4d:0b:44:c2:02:57:ca:8a:1c:e8:80:73:
ba:49:2e:e8:6e:98:76:6a:86:fc:25:e6:8d:e3:d7:
9e:37:3f:1e:8e:3c:81:57:36:11:ce:fc:18:c5:d5:
13:7d:96:16:58:50:96:44:93:a7:48:fc:20:8e:93:
55:18:5e:18:5a:5b:2c:80:f2:d0:66:29:51:bc:8d:
de:83:26:6a:3d:64:4d:43:95:36:c7:d9:ea:62:4f:
da:76:50:44:ca:68:78:e7:79:c1:98:bb:e5:f2:9b:
60:f8:f7:fa:05:5d:ca:77:9e:8e:eb:aa:02:cd:0b:
22:84:72:ca:98:f0:5e:5e:65:09:55:28:46:c4:c2:
02:0d:37:30:a9:5f:a1:25:56:94:ca:c6:5b:c8:a7:
e1:7c:a7:72:3d:cd:ac:09:e0:b5:40:b3:a6:89:74:
74:59:59:e8:b1:a9:27:b3:ed:10:69:13:e9:32:eb:
2d:e7:64:57:57:46:95:ba:21:58:20:e8:65:c9:c5:
b9:e5:dd:55:73:49:44:00:b7:91:d2:45:3a:50:84:
2f:b4:e3:a8:8f:50:3e:18:81:67:14:44:aa:aa:a0:
36:98:64:41:d6:3a:c1:2c:9b:38:33:84:00:cd:41:
96:9e:4e:95:29:63:ab:fe:48:0d:7c:4a:28:19:65:
6c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:33:32:C6:94:DC:31:D6:06:9D:00:1C:97:A4:D0:50:96:45:BB:36
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/pzMyxpTcMdYGnQAcl6TQUJZFuzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.216.0/21
138.124.156.0/22
144.86.228.0/22
185.20.196.0/22
185.138.120.0/22
185.254.12.0/22
195.133.220.0/22
199.74.188.0/22
IPv6:
2a0b:1880::/47
Signature Algorithm: sha256WithRSAEncryption
65:b4:dd:c7:77:4d:9d:76:09:2f:6d:d9:dc:da:a9:de:c0:d5:
10:eb:41:ae:61:fd:11:b7:77:17:84:2f:e5:5f:c8:1b:48:22:
80:e0:af:86:56:2b:c1:32:f1:c4:45:1c:98:c5:7f:e5:1b:c1:
d5:fc:7c:c6:3a:d7:19:cd:1d:2c:1d:b6:d0:84:95:aa:d5:4a:
10:61:ea:ee:f4:8c:c0:89:33:54:31:b6:0f:92:f9:9d:be:6b:
54:fb:56:b0:0b:61:51:aa:b6:38:8c:77:4b:d4:9a:eb:a0:4e:
8d:5e:f6:86:e1:14:0f:b7:c2:75:98:18:83:91:fe:35:fc:bd:
f5:b9:47:d6:24:c4:d1:33:a5:25:03:7c:aa:28:4d:c0:b9:51:
ff:48:70:37:50:e4:92:49:69:5c:f9:a5:60:6a:9b:c6:4f:91:
c6:93:83:e4:65:38:13:7a:a1:52:c9:41:75:d2:9b:da:6f:3b:
fa:34:6e:15:98:71:88:7e:10:6c:1c:94:39:06:c1:0a:1a:ac:
ab:41:99:70:75:d4:f7:5a:7a:2b:ce:f5:7b:07:39:57:74:1e:
a7:3a:ba:da:5a:59:65:05:70:c4:33:21:8a:ac:04:1d:ea:d6:
0f:ba:72:88:d6:33:f7:71:66:39:65:a7:66:b5:51:f1:41:d5:
92:ce:32:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:04:59 2025 by rpki-client