Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/eqxzJmJd17b1_Otaaa9r82ZRH54.roa
File: eqxzJmJd17b1_Otaaa9r82ZRH54.roa (raw, json)
Hash identifier: gwGcBHGzYMkVeVD3bqNyGd+ZD4yL6S5vhTKeFygpuTs=
Subject key identifier: 7A:AC:73:26:62:5D:D7:B6:F5:FC:EB:5A:69:AF:6B:F3:66:51:1F:9E
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 019387C0F495A4A98AC7B1FBD696618C1D6C
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/eqxzJmJd17b1_Otaaa9r82ZRH54.roa
Signing time: Mon 02 Dec 2024 14:23:09 +0000
ROA not before: Mon 02 Dec 2024 14:23:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a0b:cf45::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 23 Dec 2024 14:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:c0:f4:95:a4:a9:8a:c7:b1:fb:d6:96:61:8c:1d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Dec 2 14:23:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7aac7326625dd7b6f5fceb5a69af6bf366511f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b8:1d:26:59:c8:aa:bc:a8:60:80:17:93:6a:
31:bf:83:0f:c1:f0:4b:63:9b:a9:ee:14:1f:0f:db:
d9:b4:57:ae:c7:08:df:24:43:18:fa:e7:4a:b5:76:
c2:1a:58:44:8a:a4:ae:20:dc:3d:c8:71:ed:c7:67:
e7:0e:65:00:16:69:c3:e3:49:fc:4f:7f:19:3f:df:
08:9d:65:34:a3:63:e0:85:dd:5f:42:da:74:26:86:
c4:e3:34:85:ca:d0:b7:f9:7e:f2:26:b5:8b:7e:4d:
60:3a:ef:17:ce:2e:59:aa:b4:d2:cb:ca:eb:7d:c9:
da:10:f2:4a:da:1b:ec:44:93:85:74:e5:c4:75:b3:
49:9f:52:60:07:e3:fa:93:a3:e3:94:77:cc:84:c6:
d5:5d:b1:08:0c:fd:4b:da:13:af:69:b0:41:0a:e1:
32:af:fc:72:b2:5e:d3:b3:3c:a8:de:ba:d1:6c:c5:
76:8d:87:ec:6a:48:7b:d3:13:fc:11:17:32:9b:95:
03:0e:3e:e2:a6:03:9f:4e:b2:30:c8:3e:7d:fe:3d:
d7:be:26:0c:b8:75:ad:0c:77:40:25:73:80:b1:17:
14:af:dc:48:b3:12:78:1f:e3:98:5d:e4:18:e9:6f:
86:6e:54:1b:4a:87:01:8a:fe:fa:9e:7e:0a:0d:80:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AC:73:26:62:5D:D7:B6:F5:FC:EB:5A:69:AF:6B:F3:66:51:1F:9E
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/eqxzJmJd17b1_Otaaa9r82ZRH54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a0b:cf45::/32
2a11:3805::/32
2a11:3c02::/31
2a11:4c05::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a14:2d80::/30
2a14:2d85::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
6a:57:ee:54:5d:c7:8e:3a:2d:a9:7c:1e:df:7e:b1:af:e9:18:
93:66:f9:b1:3a:40:3e:86:d7:c6:93:a8:e5:f1:72:a7:5b:34:
47:12:b6:ca:16:c0:0b:ef:e1:8b:2e:6e:48:7d:7c:a3:a4:47:
3e:5a:ef:a8:f2:05:56:24:3c:e2:0a:c3:08:91:17:4e:ef:2c:
ca:b9:52:ba:e7:7b:d8:55:11:67:95:a9:41:dd:35:bf:bd:87:
af:b3:be:77:7d:72:2a:7b:38:69:f8:0e:0e:4a:66:89:52:fa:
9d:29:23:36:99:50:13:97:35:4c:15:fb:65:ea:84:78:aa:05:
24:36:65:ea:55:e9:85:d2:e7:4f:df:7b:04:54:96:c6:91:8b:
c4:31:c8:a5:b0:3d:ac:e4:d0:dd:39:71:4d:82:36:15:d0:dc:
20:66:c0:4d:44:a0:0b:df:64:54:98:1e:39:79:63:96:85:33:
b4:81:a8:12:2c:16:07:c8:12:c2:6e:9d:21:3b:58:13:9a:42:
91:46:12:63:1b:2f:71:7f:f9:4e:62:3b:23:04:36:6b:0a:0d:
24:c1:ff:1b:78:c0:93:78:31:e0:da:8f:c6:8d:f6:47:c1:c4:
9f:14:25:53:09:da:34:1e:d6:67:59:96:4e:53:7e:67:89:78:
f5:bd:4a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:14:43 2025 by rpki-client