Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/e6ShCo3QyR5Ky2QvcxRTpIduEL4.roa
File: e6ShCo3QyR5Ky2QvcxRTpIduEL4.roa (raw, json)
Hash identifier: tMD2pjonR3KknIEaO4VI0l2mRih0TPVhR+u2ckgHslY=
Subject key identifier: 7B:A4:A1:0A:8D:D0:C9:1E:4A:CB:64:2F:73:14:53:A4:87:6E:10:BE
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 019039F45E47964F0E8B1BA6F10B48B741DC
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/e6ShCo3QyR5Ky2QvcxRTpIduEL4.roa
Signing time: Fri 21 Jun 2024 08:40:34 +0000
ROA not before: Fri 21 Jun 2024 08:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5610
IP address blocks: 37.188.128.0/17 maxlen: 17
37.188.128.0/21 maxlen: 21
37.188.136.0/21 maxlen: 21
37.188.144.0/20 maxlen: 20
37.188.144.0/21 maxlen: 21
37.188.152.0/21 maxlen: 21
37.188.160.0/20 maxlen: 20
37.188.160.0/21 maxlen: 21
37.188.168.0/21 maxlen: 21
37.188.176.0/20 maxlen: 20
37.188.176.0/21 maxlen: 21
37.188.184.0/21 maxlen: 21
37.188.192.0/23 maxlen: 23
37.188.194.0/23 maxlen: 23
37.188.224.0/21 maxlen: 21
37.188.232.0/21 maxlen: 21
37.188.240.0/20 maxlen: 20
37.188.240.0/21 maxlen: 21
37.188.248.0/21 maxlen: 21
80.188.0.0/16 maxlen: 16
80.188.0.0/17 maxlen: 17
80.188.40.0/24 maxlen: 24
80.188.128.0/17 maxlen: 17
80.188.222.0/24 maxlen: 24
81.90.160.0/20 maxlen: 20
81.90.168.0/24 maxlen: 24
81.90.170.0/24 maxlen: 24
81.90.173.0/24 maxlen: 24
83.69.32.0/19 maxlen: 19
83.208.0.0/16 maxlen: 16
83.208.0.0/18 maxlen: 18
83.208.64.0/18 maxlen: 18
83.208.128.0/19 maxlen: 19
85.70.0.0/15 maxlen: 15
85.70.0.0/16 maxlen: 16
85.70.0.0/17 maxlen: 17
85.70.128.0/17 maxlen: 17
85.71.0.0/16 maxlen: 16
85.160.0.0/15 maxlen: 15
85.193.0.0/18 maxlen: 18
88.83.160.0/19 maxlen: 19
88.83.175.0/24 maxlen: 24
88.100.0.0/14 maxlen: 14
88.100.0.0/15 maxlen: 15
88.102.0.0/15 maxlen: 15
88.102.0.0/16 maxlen: 16
90.176.32.0/19 maxlen: 19
90.176.64.0/18 maxlen: 18
90.176.128.0/17 maxlen: 17
90.177.0.0/16 maxlen: 16
90.178.0.0/15 maxlen: 15
90.180.0.0/14 maxlen: 14
90.182.6.0/24 maxlen: 24
90.182.108.0/24 maxlen: 24
90.183.72.0/24 maxlen: 24
90.183.76.0/24 maxlen: 24
90.183.77.0/24 maxlen: 24
90.183.78.0/24 maxlen: 24
92.243.192.0/19 maxlen: 19
109.80.0.0/15 maxlen: 15
109.81.208.0/24 maxlen: 24
109.81.209.0/24 maxlen: 24
109.81.210.0/24 maxlen: 24
109.81.211.0/24 maxlen: 24
109.81.212.0/24 maxlen: 24
109.81.213.0/24 maxlen: 24
109.81.214.0/24 maxlen: 24
109.81.215.0/24 maxlen: 24
160.218.0.0/16 maxlen: 16
160.218.13.0/24 maxlen: 24
185.61.228.0/22 maxlen: 22
194.228.0.0/16 maxlen: 16
194.228.0.0/17 maxlen: 17
194.228.11.0/24 maxlen: 24
194.228.13.0/24 maxlen: 24
194.228.20.0/24 maxlen: 24
194.228.32.0/24 maxlen: 24
194.228.59.0/24 maxlen: 24
194.228.68.0/24 maxlen: 24
194.228.72.0/22 maxlen: 22
194.228.76.0/24 maxlen: 24
194.228.79.0/24 maxlen: 24
194.228.128.0/17 maxlen: 17
217.117.208.0/20 maxlen: 20
217.194.160.0/20 maxlen: 20
2001:41d8::/32 maxlen: 32
2a00:1028::/29 maxlen: 29
2a00:1028::/32 maxlen: 32
2a00:1028:d::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 25 Jun 2024 15:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:f4:5e:47:96:4f:0e:8b:1b:a6:f1:0b:48:b7:41:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jun 21 08:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ba4a10a8dd0c91e4acb642f731453a4876e10be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:4f:7e:1c:21:98:a3:32:24:67:40:02:0a:
43:e3:c6:1e:37:b5:fa:80:ff:08:db:93:66:fc:fe:
15:ff:40:cf:36:c4:f1:91:5e:49:a6:7b:23:d5:95:
69:dc:76:f0:8c:ab:f7:4c:30:00:ef:d9:60:99:25:
bf:bc:f6:77:84:91:5c:04:18:45:76:03:4d:ed:a3:
77:76:92:68:b1:b1:67:a7:de:51:c3:9d:58:2f:03:
40:a1:ed:c6:a1:c5:f4:6d:8c:11:73:b6:67:ff:1c:
a4:dd:cc:09:15:98:7a:46:73:0f:6e:d5:c2:a0:55:
82:c7:3f:97:dd:48:c1:68:24:14:6a:2f:9b:48:b0:
92:2c:cb:fd:4a:36:77:f9:49:fb:9d:b5:18:0d:43:
b2:4d:0d:ba:e3:48:a0:20:c1:4e:e1:4c:48:b8:0d:
9f:d8:f2:44:d3:0e:ec:5f:50:0e:3b:b8:14:46:84:
40:54:d9:9c:68:11:ac:0f:2d:b0:c9:e3:fc:dd:90:
fa:88:69:13:7b:45:b8:40:9f:87:aa:33:5a:9d:f5:
a9:9c:fd:b6:7a:76:03:e1:1f:c1:75:29:9a:03:f9:
c1:86:f0:a7:e3:5b:84:be:32:9a:80:e2:93:9c:cf:
c1:40:a0:5e:17:87:7f:06:ac:dc:82:20:ce:97:ea:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A4:A1:0A:8D:D0:C9:1E:4A:CB:64:2F:73:14:53:A4:87:6E:10:BE
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/e6ShCo3QyR5Ky2QvcxRTpIduEL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.188.128.0/17
80.188.0.0/16
81.90.160.0/20
83.69.32.0/19
83.208.0.0/16
85.70.0.0/15
85.160.0.0/15
85.193.0.0/18
88.83.160.0/19
88.100.0.0/14
90.176.32.0-90.183.255.255
92.243.192.0/19
109.80.0.0/15
160.218.0.0/16
185.61.228.0/22
194.228.0.0/16
217.117.208.0/20
217.194.160.0/20
IPv6:
2001:41d8::/32
2a00:1028::/29
Signature Algorithm: sha256WithRSAEncryption
39:66:1e:6b:aa:ac:a1:10:74:de:68:5f:30:df:0a:bd:13:10:
fe:d8:ec:f2:05:5a:14:71:37:19:e7:02:2d:63:43:af:af:06:
26:40:bf:35:b5:e3:35:cb:eb:e4:e5:f8:87:95:ee:f1:53:8c:
e6:8f:10:cd:ff:1a:2b:50:34:5f:2c:af:ee:09:31:39:70:e2:
57:0d:48:1c:e7:af:d3:2d:b1:3d:46:99:9e:84:75:a2:9c:5f:
7d:fc:d9:ff:7a:61:6a:6e:7f:4a:90:8b:9b:06:35:f9:4f:23:
11:1e:1e:ce:0d:d4:43:5b:46:ee:a0:e7:ab:66:5c:03:b2:87:
b8:4a:c3:2a:6a:f8:bf:83:bb:be:6d:1a:69:35:fd:b0:08:32:
f6:f4:33:c4:b5:0e:fa:c6:52:bf:9c:f1:c7:e3:d2:90:5d:21:
47:23:20:0f:91:67:5e:ca:9c:52:68:48:1c:64:a2:17:0a:44:
bd:06:b9:b7:4f:7c:dd:1c:99:cd:fe:32:d5:47:ba:6b:4a:d4:
f8:2b:c0:ff:06:45:d9:1c:e1:76:a1:cc:c2:98:a9:7a:7a:06:
38:a9:6e:3c:c0:e3:56:91:a9:8e:4e:cf:33:7a:e4:eb:be:e4:
ac:4a:fa:14:45:1d:97:5b:ab:b1:4b:84:d9:41:c5:8e:aa:e3:
1b:aa:7b:70
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAZA59F5Hlk8Oixum8QtIt0HcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4
NDFhZTgwHhcNMjQwNjIxMDg0MDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmE0YTEwYThkZDBjOTFlNGFjYjY0MmY3MzE0NTNhNDg3NmUxMGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjtPfhwhmKMyJGdAAgpD48YeN7X6
gP8I25Nm/P4V/0DPNsTxkV5Jpnsj1ZVp3HbwjKv3TDAA79lgmSW/vPZ3hJFcBBhF
dgNN7aN3dpJosbFnp95Rw51YLwNAoe3GocX0bYwRc7Zn/xyk3cwJFZh6RnMPbtXC
oFWCxz+X3UjBaCQUai+bSLCSLMv9SjZ3+Un7nbUYDUOyTQ2640igIMFO4UxIuA2f
2PJE0w7sX1AOO7gURoRAVNmcaBGsDy2wyeP83ZD6iGkTe0W4QJ+HqjNanfWpnP22
enYD4R/BdSmaA/nBhvCn41uEvjKagOKTnM/BQKBeF4d/BqzcgiDOl+rL2QIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFHukoQqN0MkeSstkL3MUU6SHbhC+MB8GA1UdIwQY
MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt
YmQyNDliNjI1Nzk3LzEvZTZTaENvM1F5UjVLeTJRdmN4UlRwSWR1RUw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3
LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGcBggrBgEFBQcBBwEB/wSBjDCBiTBxBAIAATBrAwQHJbyA
AwMAULwDBARRWqADBAVTRSADAwBT0AMDAVVGAwMBVaADBAZVwQADBAVYU6ADAwJY
ZDALAwQFWrAgAwMDWrADBAVc88ADAwFtUAMDAKDaAwQCuT3kAwMAwuQDBATZddAD
BATZwqAwFAQCAAIwDgMFACABQdgDBQMqABAoMA0GCSqGSIb3DQEBCwUAA4IBAQA5
Zh5rqqyhEHTeaF8w3wq9ExD+2OzyBVoUcTcZ5wItY0OvrwYmQL81teM1y+vk5fiH
le7xU4zmjxDN/xorUDRfLK/uCTE5cOJXDUgc56/TLbE9RpmehHWinF99/Nn/emFq
bn9KkIubBjX5TyMRHh7ODdRDW0buoOerZlwDsoe4SsMqavi/g7u+bRppNf2wCDL2
9DPEtQ76xlK/nPHH49KQXSFHIyAPkWdeypxSaEgcZKIXCkS9Brm3T3zdHJnN/jLV
R7prStT4K8D/BkXZHOF2oczCmKl6egY4qW48wONWkamOTs8zeuTrvuSsSvoURR2X
W6uxS4TZQcWOquMbqntw
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:08:49 2025 by rpki-client