Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EISxywE_eyoiVPraVYQlbZJwFW8.roa
File: EISxywE_eyoiVPraVYQlbZJwFW8.roa (raw, json)
Hash identifier: mD+yAAk0BW59U5d3sVgWMNMJmddy2oByh4BN19eFvTc=
Subject key identifier: 10:84:B1:CB:01:3F:7B:2A:22:54:FA:DA:55:84:25:6D:92:70:15:6F
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0194258F92EE9C93E1513AA7B389F01B560E
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EISxywE_eyoiVPraVYQlbZJwFW8.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207023
IP address blocks: 37.97.116.0/22 maxlen: 24
77.36.72.0/21 maxlen: 21
91.229.147.0/24 maxlen: 24
91.232.18.0/24 maxlen: 24
91.234.122.0/23 maxlen: 24
91.245.88.0/23 maxlen: 23
176.116.238.0/23 maxlen: 24
176.118.200.0/22 maxlen: 22
176.118.204.0/22 maxlen: 22
192.162.186.0/23 maxlen: 24
194.33.64.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 26 Feb 2025 10:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:92:ee:9c:93:e1:51:3a:a7:b3:89:f0:1b:56:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1084b1cb013f7b2a2254fada5584256d9270156f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f8:5f:44:62:40:14:95:2b:ba:21:7f:43:dc:
a5:22:82:c6:71:c0:fb:d0:1c:76:63:db:cf:48:76:
bb:4e:6b:3b:c1:f5:00:54:a1:67:b3:dc:c5:97:78:
e1:7d:b0:94:05:ee:bb:3d:54:82:f0:eb:2d:f3:5b:
ea:d5:bf:71:48:be:d9:d5:55:be:66:b7:b9:ee:a9:
60:58:f2:1c:7c:28:49:cc:39:5f:62:80:f7:1c:aa:
b3:a5:6d:7b:c6:79:37:a3:ef:34:6e:c8:c9:ec:6d:
2a:57:c5:45:b1:7a:ca:01:68:63:e2:80:44:1d:ee:
e9:7c:ca:90:54:0a:37:52:da:92:7c:22:64:d2:14:
1b:b9:f9:1f:8e:3c:74:49:75:e0:e9:4d:ba:33:51:
0e:0e:e2:6a:3d:c6:c4:2e:85:df:39:7f:07:72:8c:
ef:03:52:c9:f6:0a:19:ab:1d:56:0f:82:0f:d2:05:
57:8d:37:3c:ac:f0:4a:35:33:aa:e9:29:c1:9b:4b:
0a:f0:bc:e9:bb:b8:1a:45:86:a8:62:a8:88:63:6e:
81:63:c2:1a:96:8b:89:7e:28:bc:81:e5:9b:1d:e6:
b1:27:e8:c2:66:06:5b:73:c0:b5:bf:97:b1:0f:d7:
fc:0d:70:67:ee:ea:7e:a9:05:fa:42:b5:0d:0d:67:
6a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:84:B1:CB:01:3F:7B:2A:22:54:FA:DA:55:84:25:6D:92:70:15:6F
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EISxywE_eyoiVPraVYQlbZJwFW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.116.0/22
77.36.72.0/21
91.229.147.0/24
91.232.18.0/24
91.234.122.0/23
91.245.88.0/23
176.116.238.0/23
176.118.200.0/21
192.162.186.0/23
194.33.64.0/23
Signature Algorithm: sha256WithRSAEncryption
23:be:2a:7a:32:b9:51:c5:9d:b8:d2:e2:d4:ee:ab:d6:b3:93:
22:9b:48:aa:6f:f6:00:3d:2f:7b:46:6e:d7:b9:5e:47:71:28:
b2:f9:5c:35:1e:41:df:2c:c4:a0:f1:57:b9:1e:0b:a1:88:56:
77:6c:a4:24:0b:f1:02:9f:2e:57:05:34:ed:1d:33:24:0d:b4:
03:73:ff:da:42:d1:a8:06:6a:77:41:53:f9:36:be:3c:44:55:
49:ed:d5:3a:59:cf:4a:51:da:f4:a7:a6:89:df:f3:cc:c6:3b:
a6:ce:84:a3:96:7b:b4:00:36:12:4a:50:a5:49:93:e2:2f:ba:
36:c6:95:7d:36:a0:20:1a:a6:87:ef:4f:d9:46:1d:a9:99:7b:
75:60:d6:15:14:69:9c:a3:2a:5c:27:c4:90:9d:95:0b:df:de:
40:d0:07:b8:74:66:eb:bd:0c:37:fe:9c:3f:a6:c7:35:ec:0e:
4b:6c:19:93:5b:58:1d:c4:74:c1:32:ca:e1:e6:2e:2b:60:6e:
0b:f9:68:58:56:c2:5f:b8:c1:c0:7d:6d:9e:4a:6b:f7:bc:0d:
d1:47:af:09:7d:77:e9:19:a6:5d:3f:ca:dc:4f:1c:7e:30:9c:
6a:8a:b3:ef:6a:e7:fc:ad:94:e3:0a:4a:a0:6a:92:55:c8:b1:
f0:f7:21:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:04:34 2025 by rpki-client