Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/eocBsALT-eFYF52SlpkuOCY1YdQ.roa
File: eocBsALT-eFYF52SlpkuOCY1YdQ.roa (raw, json)
Hash identifier: EkBDJj9vdo9w/YiBXvduAzt8+dP/xLHTBXE1ufNbqsc=
Subject key identifier: 7A:87:01:B0:02:D3:F9:E1:58:17:9D:92:96:99:2E:38:26:35:61:D4
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 0196616684BBF20149B01324A92521E9636A
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/eocBsALT-eFYF52SlpkuOCY1YdQ.roa
Signing time: Wed 23 Apr 2025 06:47:10 +0000
ROA not before: Wed 23 Apr 2025 06:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 5.154.174.0/24 maxlen: 24
45.10.192.0/24 maxlen: 32
45.10.193.0/24 maxlen: 32
45.95.24.0/22 maxlen: 32
45.144.88.0/22 maxlen: 24
45.149.28.0/22 maxlen: 24
45.153.157.0/24 maxlen: 24
45.153.158.0/23 maxlen: 32
45.156.224.0/22 maxlen: 32
80.246.30.0/24 maxlen: 32
86.105.183.0/24 maxlen: 32
87.239.255.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
89.40.24.0/24 maxlen: 32
89.44.205.0/24 maxlen: 32
91.228.216.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
103.204.222.0/23 maxlen: 32
104.36.50.0/24 maxlen: 32
185.36.254.0/24 maxlen: 32
185.96.162.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
185.147.140.0/22 maxlen: 32
185.152.36.0/22 maxlen: 32
185.152.248.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.166.84.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.201.188.0/24 maxlen: 24
185.217.64.0/22 maxlen: 22
185.242.217.0/24 maxlen: 24
188.119.154.0/24 maxlen: 32
193.36.89.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
199.249.223.0/24 maxlen: 32
2a01:4740::/32 maxlen: 32
2a05:28c0::/29 maxlen: 32
2a05:f4c0::/29 maxlen: 29
2a06:3040::/29 maxlen: 48
2a06:46c0::/29 maxlen: 32
2a06:4a00::/29 maxlen: 32
2a06:5000::/29 maxlen: 32
2a06:5700::/29 maxlen: 32
2a06:df80::/29 maxlen: 29
2a06:e480::/29 maxlen: 29
2a07:4780::/29 maxlen: 29
2a07:9c80::/29 maxlen: 29
2a07:f2c0::/29 maxlen: 29
2a0a:3080::/29 maxlen: 29
2a0b:3f40::/29 maxlen: 29
2a0c:d8c0::/29 maxlen: 29
2a0c:ec40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 23 Apr 2025 12:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:66:84:bb:f2:01:49:b0:13:24:a9:25:21:e9:63:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Apr 23 06:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a8701b002d3f9e158179d9296992e38263561d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:fd:77:4a:07:dd:5a:93:8f:ba:40:a4:5b:
f4:06:87:2e:ab:04:0d:f2:fd:ec:e5:0a:a2:82:90:
a4:1a:58:e4:30:e9:e5:c0:86:8b:2e:03:66:b5:59:
11:c3:97:42:31:9f:64:ce:09:04:13:05:82:5c:a9:
06:bd:be:a6:6f:0b:1b:0b:dc:54:d8:44:e6:ff:35:
d1:dc:d1:34:50:93:1b:b6:4e:1f:a8:7d:fb:ab:79:
9e:bd:cb:a2:c4:76:01:6b:99:77:c8:dd:83:7c:c0:
fc:b0:e0:bd:05:c5:75:e9:97:95:63:07:23:32:0d:
2a:83:74:05:a9:43:2f:a1:3b:0f:6d:03:f3:fc:5b:
bb:ca:75:25:df:72:5f:36:22:64:ca:0b:e0:8c:68:
fb:53:a1:e2:a1:b1:1f:2e:59:2c:da:2d:87:1d:52:
97:2d:43:6b:87:54:8b:24:94:46:97:ca:c0:2a:ea:
cc:3f:57:d0:93:91:ea:f9:6d:d5:49:31:81:c3:ce:
0a:a9:aa:0c:36:3b:e8:6e:8d:c4:08:87:b2:29:4e:
2e:8b:64:de:e8:0f:b8:f9:9d:5c:e6:d6:1b:6e:b2:
01:3f:12:a7:5a:8a:ba:0e:de:ff:4c:7f:e6:40:46:
e7:94:31:16:52:7d:70:d5:2e:b8:76:2a:2f:c6:60:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:87:01:B0:02:D3:F9:E1:58:17:9D:92:96:99:2E:38:26:35:61:D4
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/eocBsALT-eFYF52SlpkuOCY1YdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
45.10.192.0/23
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.153.157.0-45.153.159.255
45.156.224.0/22
80.246.30.0/24
86.105.183.0/24
87.239.255.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
103.204.222.0/23
104.36.50.0/24
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.147.140.0/22
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0/24
185.201.188.0/24
185.217.64.0/22
185.242.217.0/24
188.119.154.0/24
193.36.89.0/24
195.47.194.0/24
199.249.223.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
2a06:df80::/29
2a06:e480::/29
2a07:4780::/29
2a07:9c80::/29
2a07:f2c0::/29
2a0a:3080::/29
2a0b:3f40::/29
2a0c:d8c0::/29
2a0c:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
9b:05:c6:1e:49:7b:13:d4:b4:34:ef:86:2f:29:cd:b6:6f:63:
e6:57:78:b4:f3:14:b6:50:4d:d9:68:53:77:2d:4c:38:dd:d9:
70:65:b9:ea:28:6c:05:0b:31:0f:35:f7:94:dd:f0:7a:fc:c8:
cb:32:81:fa:86:62:99:66:cf:96:18:8b:27:17:92:7f:c3:56:
13:57:0b:2b:e9:28:61:39:45:61:42:58:bd:56:dd:1e:3e:70:
29:8d:2e:1b:59:eb:86:64:9a:88:c4:d5:fc:3c:df:55:51:e4:
89:30:56:b4:a9:bc:a9:48:68:f5:04:8c:36:dd:f2:5b:de:ab:
37:5e:e1:68:6d:87:18:68:db:af:55:a2:3a:7e:61:f5:00:fe:
8e:5a:6f:bb:94:bf:74:7b:c1:c4:c4:63:e6:3c:59:5f:4e:73:
42:f0:f7:66:ca:31:f4:e2:66:d5:b3:86:2a:83:1c:a8:74:72:
2c:11:05:40:b5:3a:df:87:f2:67:d6:f3:41:cc:d1:ad:34:7b:
28:af:b1:74:fb:0d:08:73:a7:99:44:7b:0c:20:6b:79:ec:3a:
05:0f:a2:9e:66:a4:cf:13:50:69:9f:c9:87:a2:b3:1f:62:1b:
2e:32:a5:9d:b5:d2:44:28:30:6b:f2:02:21:67:a0:a5:a8:88:
f7:f7:81:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:39:01 2025 by rpki-client