Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/EbZ0ErSVtMpig2vI1YtuECKaRFI.roa
File: EbZ0ErSVtMpig2vI1YtuECKaRFI.roa (raw, json)
Hash identifier: DjJNpyH8tYgub/oUt7lqLJiOy/YOws3FF7Yqgb9kbiQ=
Subject key identifier: 11:B6:74:12:B4:95:B4:CA:62:83:6B:C8:D5:8B:6E:10:22:9A:44:52
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 01985EF14CF76BE71183241F92617EE3E35F
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/EbZ0ErSVtMpig2vI1YtuECKaRFI.roa
Signing time: Thu 31 Jul 2025 05:25:28 +0000
ROA not before: Thu 31 Jul 2025 05:25:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 84.37.58.0/23 maxlen: 24
84.37.74.0/23 maxlen: 24
84.37.78.0/23 maxlen: 24
84.37.90.0/23 maxlen: 24
84.37.94.0/23 maxlen: 24
84.37.102.0/23 maxlen: 24
84.37.130.0/23 maxlen: 24
84.37.150.0/23 maxlen: 24
84.37.154.0/23 maxlen: 24
84.37.158.0/23 maxlen: 24
84.37.162.0/23 maxlen: 24
84.37.166.0/23 maxlen: 24
84.37.170.0/23 maxlen: 24
84.37.174.0/23 maxlen: 24
84.37.188.0/23 maxlen: 24
84.37.252.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Aug 2025 07:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5e:f1:4c:f7:6b:e7:11:83:24:1f:92:61:7e:e3:e3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Jul 31 05:25:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11b67412b495b4ca62836bc8d58b6e10229a4452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:69:fa:41:fd:35:44:51:69:84:e1:65:93:8a:
8e:63:0b:87:cf:0d:0a:68:d2:20:10:24:49:61:b7:
c6:b1:99:07:1c:b9:5d:a9:81:d0:26:a3:b4:cf:40:
ab:23:c4:d3:d5:96:75:8d:7c:4c:03:0b:d0:83:42:
53:65:bc:07:1b:d7:5f:61:a8:da:eb:26:4b:94:ff:
10:b3:b6:6a:e1:f5:25:13:cf:a8:ca:b5:cb:62:00:
1e:60:35:6a:e9:98:cf:3d:ae:5a:3a:ea:09:7a:64:
6a:1a:63:85:31:7a:64:af:c5:c1:25:23:b7:1e:7e:
14:cd:7a:f8:b5:16:d0:86:55:c6:5f:48:5e:83:ff:
23:f6:ac:e3:36:f0:e5:cb:eb:9b:3a:fa:b5:92:11:
a6:47:fc:07:1d:23:7e:47:4d:6f:cc:5b:52:46:ce:
aa:9e:13:d9:fa:c3:95:91:d9:ac:1f:f0:69:d6:c7:
89:7e:0f:85:96:13:02:72:4c:00:c5:fb:4c:4b:29:
ae:fc:da:51:58:6f:20:31:08:ac:79:8d:4e:6a:e2:
00:dc:97:d0:02:6b:89:ec:be:b4:9d:0b:35:91:15:
e3:eb:f6:77:46:0d:c8:0d:56:d3:22:4d:2e:29:fe:
3b:11:05:76:ac:6f:88:cb:77:2a:28:6b:ff:b6:11:
9a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B6:74:12:B4:95:B4:CA:62:83:6B:C8:D5:8B:6E:10:22:9A:44:52
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/EbZ0ErSVtMpig2vI1YtuECKaRFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.37.58.0/23
84.37.74.0/23
84.37.78.0/23
84.37.90.0/23
84.37.94.0/23
84.37.102.0/23
84.37.130.0/23
84.37.150.0/23
84.37.154.0/23
84.37.158.0/23
84.37.162.0/23
84.37.166.0/23
84.37.170.0/23
84.37.174.0/23
84.37.188.0/23
84.37.252.0/23
Signature Algorithm: sha256WithRSAEncryption
76:99:76:a5:a4:ee:63:bd:6d:c3:ea:4e:82:76:03:b6:84:5c:
47:34:54:1d:78:98:8b:0c:70:81:fc:c1:4f:57:8d:6d:e4:02:
1a:90:06:bb:da:76:ca:91:ef:0c:a7:60:b7:85:3f:42:bb:f8:
8a:e8:f6:1d:09:51:74:e7:82:05:eb:61:9b:3f:12:e8:fd:f2:
9c:4c:c8:a7:bf:49:37:50:21:93:92:dc:db:a6:0f:2e:a4:0d:
ad:59:e0:b7:ac:af:53:ab:fb:91:be:b7:ea:8b:20:3d:e8:b7:
e0:ad:6e:b2:53:ad:54:41:23:a4:54:74:6f:b1:a1:18:35:75:
dc:16:10:f2:ac:16:3a:07:5b:2e:c9:bc:b6:00:a2:0f:80:b4:
8b:76:38:a3:21:f0:ad:6c:36:e4:44:0a:f9:59:6d:5f:ba:19:
91:71:e3:7b:05:28:67:b2:63:0b:e9:52:fc:fc:38:92:dd:93:
32:d4:ca:68:27:d4:4f:3e:20:4a:31:bc:4f:e6:f0:50:b9:4d:
c2:34:6e:f7:4e:b1:b1:68:e2:ee:4d:fd:88:f5:47:c0:ea:8b:
20:da:4f:d6:be:5f:04:28:12:c9:68:e4:5d:ae:62:37:6e:5b:
8a:b7:51:95:31:c1:b8:af:8d:09:d5:b5:69:6d:2c:84:9d:4f:
61:3f:5b:20
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAZhe8Uz3a+cRgyQfkmF+4+NfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky
YWUzYjcwHhcNMjUwNzMxMDUyNTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWI2NzQxMmI0OTViNGNhNjI4MzZiYzhkNThiNmUxMDIyOWE0NDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22n6Qf01RFFphOFlk4qOYwuHzw0K
aNIgECRJYbfGsZkHHLldqYHQJqO0z0CrI8TT1ZZ1jXxMAwvQg0JTZbwHG9dfYaja
6yZLlP8Qs7Zq4fUlE8+oyrXLYgAeYDVq6ZjPPa5aOuoJemRqGmOFMXpkr8XBJSO3
Hn4UzXr4tRbQhlXGX0heg/8j9qzjNvDly+ubOvq1khGmR/wHHSN+R01vzFtSRs6q
nhPZ+sOVkdmsH/Bp1seJfg+FlhMCckwAxftMSymu/NpRWG8gMQiseY1OauIA3JfQ
AmuJ7L60nQs1kRXj6/Z3Rg3IDVbTIk0uKf47EQV2rG+Iy3cqKGv/thGaGQIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFBG2dBK0lbTKYoNryNWLbhAimkRSMB8GA1UdIwQY
MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt
ZDJhZGVlZDc1NWQ4LzEvRWJaMEVyU1Z0TXBpZzJ2STFZdHVFQ0thUkZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4
LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQBVCU6AwQB
VCVKAwQBVCVOAwQBVCVaAwQBVCVeAwQBVCVmAwQBVCWCAwQBVCWWAwQBVCWaAwQB
VCWeAwQBVCWiAwQBVCWmAwQBVCWqAwQBVCWuAwQBVCW8AwQBVCX8MA0GCSqGSIb3
DQEBCwUAA4IBAQB2mXalpO5jvW3D6k6CdgO2hFxHNFQdeJiLDHCB/MFPV41t5AIa
kAa72nbKke8Mp2C3hT9Cu/iK6PYdCVF054IF62GbPxLo/fKcTMinv0k3UCGTktzb
pg8upA2tWeC3rK9Tq/uRvrfqiyA96LfgrW6yU61UQSOkVHRvsaEYNXXcFhDyrBY6
B1suyby2AKIPgLSLdjijIfCtbDbkRAr5WW1fuhmRceN7BShnsmML6VL8/DiS3ZMy
1MpoJ9RPPiBKMbxP5vBQuU3CNG73TrGxaOLuTf2I9UfA6osg2k/Wvl8EKBLJaORd
rmI3bluKt1GVMcG4r40J1bVpbSyEnU9hP1sg
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:25:39 2025 by rpki-client