Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/e2BzbgoFCtK0ePeAcVsfBghJfeo.roa
File: e2BzbgoFCtK0ePeAcVsfBghJfeo.roa (raw, json)
Hash identifier: fCDNR7rQOeMLOcIMnLVkkrsGiPRc7o/JxktxU1NjoFs=
Subject key identifier: 7B:60:73:6E:0A:05:0A:D2:B4:78:F7:80:71:5B:1F:06:08:49:7D:EA
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 019633B67D9A981137740F18FBE2F636917C
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/e2BzbgoFCtK0ePeAcVsfBghJfeo.roa
Signing time: Mon 14 Apr 2025 09:51:59 +0000
ROA not before: Mon 14 Apr 2025 09:51:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198668
IP address blocks: 37.221.240.0/20 maxlen: 32
45.153.192.0/22 maxlen: 24
85.255.88.0/22 maxlen: 22
185.19.0.0/22 maxlen: 32
185.64.222.0/24 maxlen: 32
185.74.60.0/23 maxlen: 32
185.97.24.0/22 maxlen: 24
185.188.100.0/22 maxlen: 24
185.188.100.0/24 maxlen: 24
2a03:d840::/32 maxlen: 48
2a03:d840:ffff::/48 maxlen: 48
2a04:c740::/29 maxlen: 48
2a0d:3140::/29 maxlen: 29
2a0f:9300::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 14 Apr 2025 10:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:b6:7d:9a:98:11:37:74:0f:18:fb:e2:f6:36:91:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Apr 14 09:51:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b60736e0a050ad2b478f780715b1f0608497dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:ec:98:f6:b6:e7:30:53:60:29:99:70:bc:
e3:f7:fa:a4:8c:eb:87:ad:85:e5:e0:5a:93:1e:1d:
e8:56:1f:68:b0:3d:00:a0:ba:cb:99:c7:52:dd:d3:
b6:33:b0:f2:12:c0:8d:85:08:c4:3c:58:42:d1:59:
26:ef:96:33:56:7a:e6:11:f5:db:7a:68:d1:f4:22:
b2:1e:07:3a:f8:00:ca:69:ff:a2:22:5b:73:fb:cd:
33:fb:b0:5e:72:b4:06:49:39:15:4a:43:10:01:b7:
18:e3:32:63:3e:b2:d4:45:f5:89:60:7b:0a:f4:4c:
58:5c:ef:e0:a7:09:35:db:9c:58:77:e1:8a:2e:6c:
86:76:fe:f5:2b:5a:17:16:9a:39:07:e3:2b:4a:06:
47:88:0d:e1:f7:c2:e8:07:4f:e4:aa:b0:92:81:c5:
7b:15:67:0e:2d:d9:62:cf:d5:c6:2b:be:24:07:5b:
2b:97:6b:2a:b3:42:c5:16:10:7d:3b:1d:bf:65:e7:
9a:88:ce:8a:e0:d3:1e:85:3f:4b:27:6c:74:73:eb:
7f:1e:7b:e3:59:d3:f3:08:4a:a1:1d:69:c3:05:02:
61:46:16:39:82:7b:9c:b5:e2:a1:7b:ee:ad:74:30:
9a:7a:62:ed:7e:2c:dc:06:c9:47:02:32:34:8b:53:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:60:73:6E:0A:05:0A:D2:B4:78:F7:80:71:5B:1F:06:08:49:7D:EA
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/e2BzbgoFCtK0ePeAcVsfBghJfeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.240.0/20
45.153.192.0/22
85.255.88.0/22
185.19.0.0/22
185.64.222.0/24
185.74.60.0/23
185.97.24.0/22
185.188.100.0/22
IPv6:
2a03:d840::/32
2a04:c740::/29
2a0d:3140::/29
2a0f:9300::/29
Signature Algorithm: sha256WithRSAEncryption
71:1b:65:4e:44:f9:03:30:0d:a0:72:23:98:bf:14:40:f2:36:
17:77:93:5a:97:55:4c:3e:7c:3e:be:76:83:54:b1:d4:a4:98:
9e:2a:4f:77:67:be:fd:b8:df:2c:d3:5c:4e:63:9a:65:92:6f:
b5:37:42:d8:3c:35:45:4f:1d:94:e5:48:42:64:fe:66:19:09:
ad:b0:d2:cd:31:f8:85:47:cb:db:fa:b6:6f:6c:a1:96:4b:f8:
76:1d:c2:c3:27:66:d3:76:ed:a2:e3:f0:6f:32:ee:73:12:1c:
04:51:87:48:39:b3:10:9e:a7:70:4a:95:a3:81:a2:2a:42:3e:
39:d1:5c:20:de:35:a9:b4:c0:ac:e3:a0:2e:c7:b4:27:04:dd:
2b:68:25:5b:28:cc:7e:40:05:12:37:67:20:84:4b:28:f7:fe:
7a:a5:3e:73:46:d5:1b:20:69:fc:08:ed:3a:0e:65:ff:0a:3c:
47:42:6a:fe:87:b3:12:f0:5e:ed:50:8c:19:96:60:84:24:93:
7e:7b:a3:47:1b:45:61:b9:7c:6a:70:59:9a:bf:fc:86:2e:86:
f7:8b:84:a6:1e:de:42:3a:04:0a:08:a5:0a:51:a9:7d:1f:b8:
99:22:a3:88:46:0f:18:6b:67:6a:db:5d:5a:b4:f0:74:4e:03:
26:42:a5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:11:24 2025 by rpki-client