Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EOGJdhUiiVq-sTactxyvqD_wA8w.roa
File: EOGJdhUiiVq-sTactxyvqD_wA8w.roa (raw, json)
Hash identifier: ZgmCrTwk0t8CQtB3N0d5O6r79czZUEK8Ypfr8dXm/xk=
Subject key identifier: 10:E1:89:76:15:22:89:5A:BE:B1:36:9C:B7:1C:AF:A8:3F:F0:03:CC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0196C470375F1FCF513412B142A734D85E07
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EOGJdhUiiVq-sTactxyvqD_wA8w.roa
Signing time: Mon 12 May 2025 12:20:10 +0000
ROA not before: Mon 12 May 2025 12:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.104.0/24 maxlen: 24
84.32.106.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.151.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.217.0/24 maxlen: 24
84.32.223.0/24 maxlen: 24
84.32.230.0/24 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.66.0/23 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.127.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 May 2025 05:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:70:37:5f:1f:cf:51:34:12:b1:42:a7:34:d8:5e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 12 12:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10e189761522895abeb1369cb71cafa83ff003cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:83:7d:91:2d:b4:fe:b3:d1:dd:c1:d1:75:
7a:de:a4:c3:de:1f:1f:fe:a3:8c:03:a3:c1:0c:0f:
06:2a:6e:eb:78:19:5d:47:8d:fb:e4:fa:83:fd:e9:
cd:8a:d7:36:52:7f:c2:8b:08:c3:f2:be:20:41:5c:
dc:ed:2b:89:e4:e5:48:d8:98:f3:74:a5:b4:48:2a:
6b:28:0c:37:c7:47:90:d3:b6:d2:54:4f:cf:21:92:
bf:7c:7f:c2:ea:72:a2:9d:86:59:a6:1c:97:15:3a:
1a:4d:e3:8c:a0:66:65:ec:04:1c:65:65:b2:30:e6:
fb:de:83:a6:1b:4f:c5:71:73:8e:5b:d6:b4:5a:c1:
88:da:81:1d:af:4a:e9:fb:16:37:b5:17:0f:af:af:
f5:d9:12:c7:e8:1a:eb:73:0e:8f:75:74:10:98:d7:
38:76:2d:fe:99:d5:72:44:b3:c7:e5:9b:32:fd:a2:
13:d0:7a:42:f6:e8:fa:a7:ea:2a:36:0a:8f:82:09:
3f:1d:34:49:25:8c:ce:cd:b4:cb:1d:2c:22:67:a4:
98:31:da:90:ab:a4:20:b9:a0:e5:09:ed:b4:7c:19:
88:2f:96:60:f2:26:10:d4:cb:4a:30:7d:3f:ba:76:
0a:77:ca:44:d1:6a:52:10:52:b3:dc:05:44:23:78:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E1:89:76:15:22:89:5A:BE:B1:36:9C:B7:1C:AF:A8:3F:F0:03:CC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/EOGJdhUiiVq-sTactxyvqD_wA8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0/22
84.32.46.0/23
84.32.64.0/24
84.32.104.0/24
84.32.106.0/24
84.32.148.0/22
84.32.174.0/23
84.32.214.0/23
84.32.217.0/24
84.32.223.0/24
84.32.230.0/24
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.66.0/23
88.216.93.0/24
88.216.127.0/24
88.216.130.0/23
88.216.134.0/23
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
89:43:7e:75:f1:ae:d3:fc:4a:38:97:56:b2:36:4c:43:a5:2a:
0f:e2:ee:1e:b8:de:c2:8e:ba:c9:c8:3b:cd:2d:10:56:c0:fa:
d5:2b:5b:0c:a9:7e:66:ab:3e:20:42:db:09:10:c1:15:c2:0a:
07:6f:94:b8:da:22:4e:f8:1b:0c:77:0f:35:54:83:1b:74:7d:
5d:c2:24:76:20:32:1f:98:10:f1:f8:ee:b1:98:bb:e8:24:3f:
dd:b4:7a:52:85:79:44:b3:d0:ff:12:d4:e2:05:7a:b5:a8:42:
1a:fa:d9:a3:30:8f:e3:2f:74:88:0e:56:2b:88:0c:d9:18:5b:
41:42:d9:19:73:24:82:4c:97:61:b8:c8:ae:69:42:58:33:25:
c8:2a:69:32:6e:82:8f:83:6c:21:d1:ff:68:71:98:e9:80:9b:
cb:3b:f6:13:5c:4a:28:ce:95:f2:89:e5:01:34:c5:20:d4:11:
88:3a:ce:2e:df:79:21:52:32:59:71:5f:c1:b9:df:3e:d2:66:
ee:d4:87:e4:d9:91:e7:1a:89:95:a4:ed:27:0a:34:58:e7:7f:
54:5b:2c:9b:8b:b0:4f:e1:cf:36:4c:09:92:44:0d:01:c2:98:
3a:47:e7:9f:8e:ba:c6:e3:be:53:41:8f:9b:5b:99:ed:7f:01:
c6:1c:fa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:20:05 2025 by rpki-client