Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/eiUyrcpFJE1rGYKhAn5i42I2Jws.roa
File: eiUyrcpFJE1rGYKhAn5i42I2Jws.roa (raw, json)
Hash identifier: vyQwtonjgWQ2IfJWg0UCzsnCGbRKLguIPE/KpTJogoU=
Subject key identifier: 7A:25:32:AD:CA:45:24:4D:6B:19:82:A1:02:7E:62:E3:62:36:27:0B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019620587C9D97173DA4C2E0954A706BEA56
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/eiUyrcpFJE1rGYKhAn5i42I2Jws.roa
Signing time: Thu 10 Apr 2025 15:36:31 +0000
ROA not before: Thu 10 Apr 2025 15:36:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
14.102.231.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.97.0/24 maxlen: 24
77.111.102.0/23 maxlen: 24
85.208.10.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.220.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
194.36.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 23:16:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:58:7c:9d:97:17:3d:a4:c2:e0:95:4a:70:6b:ea:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 10 15:36:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a2532adca45244d6b1982a1027e62e36236270b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:90:98:06:43:ee:c1:f9:b7:9c:3f:c5:8d:
87:57:43:84:ab:28:6c:70:d6:1b:c9:ce:ed:bb:4e:
da:8c:54:db:93:a4:54:50:db:46:e8:fa:ff:62:a6:
85:92:56:a5:5b:7b:dc:48:5b:b7:13:84:3a:a8:0a:
44:dc:12:ab:4b:5e:36:e0:54:9f:b3:ff:05:7f:52:
80:d9:18:7d:80:93:9d:28:ba:43:70:94:93:64:bd:
44:46:9d:7a:4d:79:12:8c:fb:10:b7:76:02:2c:c7:
2b:41:a8:9b:1f:c2:24:64:c1:e8:1e:9d:0c:e4:1a:
83:2e:c7:e2:af:19:ac:e5:43:1f:af:21:88:40:f7:
ed:d7:63:33:36:55:04:00:87:fb:ab:b6:5a:86:ed:
b4:2c:9c:ec:cb:43:e6:53:b2:25:d4:9d:be:8f:11:
72:b5:96:2e:bb:c3:d2:c6:f3:df:e8:48:20:5c:3f:
54:f5:fe:5d:fd:36:92:5e:b8:6b:2e:7e:38:72:52:
e0:58:65:32:fc:d7:fd:19:30:0b:e4:38:23:98:76:
97:4a:a2:93:b0:9b:e2:46:b0:a6:eb:f2:c2:83:f0:
e2:aa:c3:c3:c7:6e:d4:f4:29:37:9f:dd:f2:d1:08:
78:43:b8:51:36:61:58:5a:f5:4d:fb:52:40:55:5c:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:25:32:AD:CA:45:24:4D:6B:19:82:A1:02:7E:62:E3:62:36:27:0B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/eiUyrcpFJE1rGYKhAn5i42I2Jws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
14.102.231.0/24
77.111.96.0/22
77.111.102.0/23
85.208.10.0/24
94.229.212.0/24
94.229.220.0/24
94.229.223.0/24
194.36.32.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:7f:96:13:6c:79:26:60:9a:ab:75:a9:05:51:5d:cf:e5:86:
f4:d3:c0:f8:ca:1d:30:f7:f2:c9:c8:67:8a:e3:84:79:eb:65:
9b:fe:05:5e:56:0f:73:e2:da:07:b5:07:2f:de:2b:51:7b:69:
3c:a3:5b:95:81:a4:99:ab:79:c5:86:5d:2d:90:df:02:a4:e7:
64:7c:02:29:d1:f6:52:5c:54:09:47:eb:27:5a:27:1c:de:3e:
21:0b:00:3d:3a:43:2d:5e:43:77:9c:ed:0a:96:e0:47:f7:aa:
bc:10:99:cb:72:d7:d9:11:cd:4b:14:18:83:2a:11:4e:1e:fb:
65:f6:82:a0:9e:fd:74:18:99:2f:2b:15:de:5a:46:70:c1:4a:
47:ac:8b:2f:0e:aa:f9:20:25:ec:ee:58:10:fa:c7:5d:7d:d3:
a7:bb:91:81:f7:07:fd:b3:c1:a9:8f:09:c9:39:85:38:95:3b:
a2:96:cf:1d:db:a4:d3:15:1d:61:d2:5f:c1:91:59:bc:c1:b2:
43:6d:c8:89:96:2c:0c:03:97:c4:c4:0f:b7:e4:63:c8:c7:c0:
81:1e:c5:1a:96:49:9e:71:bb:9f:54:b8:b5:18:25:e0:37:62:
a9:02:eb:a8:36:f0:8e:8b:c3:04:62:62:a0:63:01:59:1f:c7:
b2:2b:53:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:14:21 2025 by rpki-client