Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/e6c8p-1JsT3Xxe0LmjhV5UZQtvU.roa
File: e6c8p-1JsT3Xxe0LmjhV5UZQtvU.roa (raw, json)
Hash identifier: AQSd5O2956L+jmGZ8xOJkNMm2WIyt9jLfilPhqFWQCE=
Subject key identifier: 7B:A7:3C:A7:ED:49:B1:3D:D7:C5:ED:0B:9A:38:55:E5:46:50:B6:F5
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 019639196F61A822D6D913E0BB67E55F2A5C
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/e6c8p-1JsT3Xxe0LmjhV5UZQtvU.roa
Signing time: Tue 15 Apr 2025 10:58:10 +0000
ROA not before: Tue 15 Apr 2025 10:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132839
IP address blocks: 2.59.100.0/22 maxlen: 22
2.59.100.0/24 maxlen: 24
2.59.101.0/24 maxlen: 24
2.59.102.0/24 maxlen: 24
2.59.103.0/24 maxlen: 24
45.8.29.0/24 maxlen: 24
45.8.30.0/24 maxlen: 24
45.9.108.0/22 maxlen: 22
45.9.108.0/24 maxlen: 24
45.9.109.0/24 maxlen: 24
45.9.110.0/24 maxlen: 24
45.9.111.0/24 maxlen: 24
45.10.208.0/22 maxlen: 22
45.13.160.0/22 maxlen: 22
45.13.160.0/24 maxlen: 24
45.66.188.0/22 maxlen: 22
45.66.188.0/24 maxlen: 24
45.66.189.0/24 maxlen: 24
45.66.190.0/24 maxlen: 24
45.66.191.0/24 maxlen: 24
45.80.113.0/24 maxlen: 24
45.80.114.0/23 maxlen: 23
45.87.228.0/22 maxlen: 22
45.87.231.0/24 maxlen: 24
45.93.64.0/22 maxlen: 22
45.93.64.0/24 maxlen: 24
45.93.65.0/24 maxlen: 24
45.93.66.0/24 maxlen: 24
45.93.67.0/24 maxlen: 24
45.131.156.0/22 maxlen: 22
45.131.156.0/24 maxlen: 24
45.131.157.0/24 maxlen: 24
45.131.158.0/24 maxlen: 24
45.131.159.0/24 maxlen: 24
45.142.76.0/22 maxlen: 22
45.142.79.0/24 maxlen: 24
45.147.212.0/22 maxlen: 22
45.147.215.0/24 maxlen: 24
45.149.68.0/22 maxlen: 22
45.149.68.0/24 maxlen: 24
45.149.69.0/24 maxlen: 24
45.156.168.0/22 maxlen: 22
45.156.169.0/24 maxlen: 24
45.156.171.0/24 maxlen: 24
45.156.216.0/22 maxlen: 22
45.158.220.0/22 maxlen: 22
45.158.221.0/24 maxlen: 24
45.158.223.0/24 maxlen: 24
62.192.188.0/22 maxlen: 22
62.192.188.0/24 maxlen: 24
62.192.189.0/24 maxlen: 24
62.192.190.0/24 maxlen: 24
62.192.191.0/24 maxlen: 24
83.150.224.0/22 maxlen: 22
83.150.224.0/24 maxlen: 24
83.150.225.0/24 maxlen: 24
85.208.56.0/22 maxlen: 22
85.208.56.0/24 maxlen: 24
85.208.57.0/24 maxlen: 24
85.208.58.0/24 maxlen: 24
85.208.59.0/24 maxlen: 24
92.118.144.0/22 maxlen: 22
92.118.144.0/24 maxlen: 24
92.118.145.0/24 maxlen: 24
92.118.146.0/24 maxlen: 24
92.118.147.0/24 maxlen: 24
185.51.164.0/22 maxlen: 22
185.51.164.0/24 maxlen: 24
185.51.167.0/24 maxlen: 24
193.42.15.0/24 maxlen: 24
193.42.132.0/24 maxlen: 24
193.42.135.0/24 maxlen: 24
193.42.149.0/24 maxlen: 24
193.108.46.0/23 maxlen: 23
193.108.96.0/23 maxlen: 23
193.164.222.0/23 maxlen: 23
193.168.4.0/23 maxlen: 23
194.146.84.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 17 Apr 2025 02:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:19:6f:61:a8:22:d6:d9:13:e0:bb:67:e5:5f:2a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: Apr 15 10:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ba73ca7ed49b13dd7c5ed0b9a3855e54650b6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:58:09:49:4b:ea:a1:c0:82:2a:b1:ab:76:52:
3f:4d:40:8f:ca:39:8f:0a:b0:87:d0:ab:58:72:06:
99:4b:de:76:2c:39:4a:61:c4:c8:c8:6e:78:25:5c:
03:15:32:b2:a9:9f:c7:48:08:b9:3a:75:70:df:23:
17:5d:76:2a:e7:5c:41:6d:64:ac:8c:24:bf:e7:74:
78:59:1f:76:7d:5b:99:a5:be:99:04:15:76:4b:cb:
00:7e:0d:0c:ad:6e:a3:d2:3b:da:25:1c:b7:ed:84:
c1:64:f4:e4:75:37:3f:f7:a6:c5:02:bd:2a:53:4e:
28:5a:76:a7:2a:4a:99:2d:85:c4:6a:ad:d0:60:61:
c9:d0:bb:a4:c6:9f:fe:0a:6b:c9:a0:e8:c5:2d:fc:
5e:c6:19:f7:8d:be:01:a7:40:f2:f3:8a:ef:90:e7:
a7:7a:d7:07:19:eb:e8:94:33:8c:58:d3:b2:45:db:
32:e9:65:88:86:cc:e5:1a:b5:34:b1:d6:f4:56:c9:
8f:8b:bc:ef:ca:59:f1:6f:a2:1b:5f:1f:18:41:06:
24:5b:a1:f7:82:de:65:02:8b:59:19:9f:92:28:cd:
b9:09:40:e6:6d:97:d3:de:80:10:8d:b5:72:d0:a4:
85:3e:9c:0a:43:7e:50:7a:4b:6d:f2:0e:86:ec:85:
e1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A7:3C:A7:ED:49:B1:3D:D7:C5:ED:0B:9A:38:55:E5:46:50:B6:F5
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/e6c8p-1JsT3Xxe0LmjhV5UZQtvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.100.0/22
45.8.29.0-45.8.30.255
45.9.108.0/22
45.10.208.0/22
45.13.160.0/22
45.66.188.0/22
45.80.113.0-45.80.115.255
45.87.228.0/22
45.93.64.0/22
45.131.156.0/22
45.142.76.0/22
45.147.212.0/22
45.149.68.0/22
45.156.168.0/22
45.156.216.0/22
45.158.220.0/22
62.192.188.0/22
83.150.224.0/22
85.208.56.0/22
92.118.144.0/22
185.51.164.0/22
193.42.15.0/24
193.42.132.0/24
193.42.135.0/24
193.42.149.0/24
193.108.46.0/23
193.108.96.0/23
193.164.222.0/23
193.168.4.0/23
194.146.84.0/22
Signature Algorithm: sha256WithRSAEncryption
79:f4:81:ef:b4:6f:4e:09:41:09:1c:ae:fd:ec:0f:a8:66:d3:
a3:81:d6:60:9c:27:5f:21:35:89:6c:3d:73:bc:82:b5:f1:ce:
11:4b:e9:bb:be:c3:9c:fd:ca:61:03:41:c4:9f:9d:52:dd:6c:
cf:d5:1d:fd:cb:1b:98:02:85:32:22:49:fd:cd:8a:89:aa:2d:
d1:7c:05:34:32:22:d3:a7:a0:6c:bb:ad:89:9a:a0:f8:49:9e:
2f:7b:dc:95:cf:88:46:42:cd:d7:d7:8c:a7:2c:ad:b6:a2:47:
25:90:2c:9e:c9:c7:5b:b5:b4:b4:7f:25:74:b1:0d:d4:4b:af:
2a:d6:e6:7c:90:88:44:d9:fd:13:58:38:ca:8f:62:41:37:78:
b3:71:4a:60:56:19:b9:09:e3:45:68:06:45:bd:39:99:b1:19:
43:2a:4e:af:35:22:a6:62:8b:86:53:72:6d:26:c9:c5:e3:0f:
31:2b:9a:8f:97:c3:39:3e:b7:1e:7c:0a:b3:87:d7:72:df:3c:
8e:53:04:7e:08:7d:cb:f2:f5:02:3f:03:3a:6b:80:8d:e7:7f:
42:d9:88:25:e4:4b:c3:1c:7e:af:ce:23:a8:87:b7:fe:62:95:
52:c3:bd:f6:26:fc:b8:81:3b:94:d3:08:5c:0d:5d:2e:b0:4c:
a6:50:cf:0f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgISAZY5GW9hqCLW2RPgu2flXypcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OGFiYjI5OTc3YTY1YjE0MGNhY2I2ZTcyYWIyNGNlZGRk
NGU4YzUwHhcNMjUwNDE1MTA1ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmE3M2NhN2VkNDliMTNkZDdjNWVkMGI5YTM4NTVlNTQ2NTBiNmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFgJSUvqocCCKrGrdlI/TUCPyjmP
CrCH0KtYcgaZS952LDlKYcTIyG54JVwDFTKyqZ/HSAi5OnVw3yMXXXYq51xBbWSs
jCS/53R4WR92fVuZpb6ZBBV2S8sAfg0MrW6j0jvaJRy37YTBZPTkdTc/96bFAr0q
U04oWnanKkqZLYXEaq3QYGHJ0Lukxp/+CmvJoOjFLfxexhn3jb4Bp0Dy84rvkOen
etcHGevolDOMWNOyRdsy6WWIhszlGrU0sdb0VsmPi7zvylnxb6IbXx8YQQYkW6H3
gt5lAotZGZ+SKM25CUDmbZfT3oAQjbVy0KSFPpwKQ35Qektt8g6G7IXhWwIDAQAB
o4ICzDCCAsgwHQYDVR0OBBYEFHunPKftSbE918XtC5o4VeVGULb1MB8GA1UdIwQY
MBaAFIeKuymXemWxQMrLbnKrJM7d1OjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2Et
YWM4NjQ3ZDA1NThhLzEvZTZjOHAtMUpzVDNYeGUwTG1qaFY1VVpRdHZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2EtYWM4NjQ3ZDA1NThh
LzEvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHhBggrBgEFBQcBBwEB/wSB0TCBzjCBywQCAAEwgcQDBAIC
O2QwDAMEAC0IHQMEAC0IHgMEAi0JbAMEAi0K0AMEAi0NoAMEAi1CvDAMAwQALVBx
AwQCLVBwAwQCLVfkAwQCLV1AAwQCLYOcAwQCLY5MAwQCLZPUAwQCLZVEAwQCLZyo
AwQCLZzYAwQCLZ7cAwQCPsC8AwQCU5bgAwQCVdA4AwQCXHaQAwQCuTOkAwQAwSoP
AwQAwSqEAwQAwSqHAwQAwSqVAwQBwWwuAwQBwWxgAwQBwaTeAwQBwagEAwQCwpJU
MA0GCSqGSIb3DQEBCwUAA4IBAQB59IHvtG9OCUEJHK797A+oZtOjgdZgnCdfITWJ
bD1zvIK18c4RS+m7vsOc/cphA0HEn51S3WzP1R39yxuYAoUyIkn9zYqJqi3RfAU0
MiLTp6Bsu62JmqD4SZ4ve9yVz4hGQs3X14ynLK22okclkCyeycdbtbS0fyV0sQ3U
S68q1uZ8kIhE2f0TWDjKj2JBN3izcUpgVhm5CeNFaAZFvTmZsRlDKk6vNSKmYouG
U3JtJsnF4w8xK5qPl8M5PrcefAqzh9dy3zyOUwR+CH3L8vUCPwM6a4CN539C2Ygl
5EvDHH6vziOoh7f+YpVSw732Jvy4gTuU0whcDV0usEymUM8P
-----END CERTIFICATE-----
Generated at Tue Apr 29 14:32:04 2025 by rpki-client