Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ezx-MaD1uT_ZXA8aamACrL5WJV0.roa
File: ezx-MaD1uT_ZXA8aamACrL5WJV0.roa (raw, json)
Hash identifier: 5gkut74ce9RzEr0C9ufirsYqfgwNNyDgNQJuzWTnK+g=
Subject key identifier: 7B:3C:7E:31:A0:F5:B9:3F:D9:5C:0F:1A:6A:60:02:AC:BE:56:25:5D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019427B554F173390CF3A986FC00FF7ACAEC
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ezx-MaD1uT_ZXA8aamACrL5WJV0.roa
Signing time: Thu 02 Jan 2025 15:49:42 +0000
ROA not before: Thu 02 Jan 2025 15:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52116
IP address blocks: 77.105.6.0/24 maxlen: 24
77.105.11.0/24 maxlen: 24
77.105.31.0/24 maxlen: 24
79.175.91.0/24 maxlen: 24
79.175.93.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.55.0/24 maxlen: 24
81.18.61.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
109.121.60.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
178.219.11.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
188.255.130.0/24 maxlen: 24
188.255.140.0/24 maxlen: 24
188.255.185.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.208.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.226.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.246.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.248.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.252.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 13:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:54:f1:73:39:0c:f3:a9:86:fc:00:ff:7a:ca:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 15:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b3c7e31a0f5b93fd95c0f1a6a6002acbe56255d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:dd:85:80:f4:f4:b8:22:7b:9d:1a:bc:51:
dd:0d:e8:35:51:62:a2:f2:c3:94:11:dd:48:af:5d:
bb:0e:78:74:4f:4b:74:92:36:05:9d:e7:e0:a2:1c:
eb:57:9d:f6:28:1c:d3:55:17:c6:18:78:dc:d6:98:
2e:71:7a:c9:16:64:c5:42:f8:4b:97:45:fa:f5:74:
5f:6f:f5:5a:d4:0d:a7:77:5a:ea:fa:a5:69:24:23:
3a:61:b0:f8:97:80:1f:05:2c:81:2b:76:a5:6e:b9:
78:d2:e9:a5:cc:23:9c:05:25:a5:8e:05:c7:92:b0:
78:bf:21:19:8f:ad:5d:5d:f9:20:a1:1a:3f:34:cc:
cf:3c:9b:bd:ce:35:8e:7a:ea:1b:eb:d9:15:60:02:
6c:5a:87:6c:eb:27:bf:b0:86:8a:e9:b2:29:2f:5a:
3b:90:77:62:0a:9a:31:84:e7:c3:75:68:0e:95:c4:
3c:1c:eb:f3:ae:0e:71:a6:31:0b:53:82:80:5a:69:
39:89:05:3c:12:9b:b9:f2:60:dd:d2:e1:e3:41:61:
8b:76:35:20:f2:71:f6:cc:89:de:26:d3:1f:87:90:
83:a4:db:b6:8d:1a:24:1e:d4:3f:b8:ae:3b:e2:0c:
ea:8b:0a:43:17:a6:7c:42:90:78:f3:fd:d6:b1:aa:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3C:7E:31:A0:F5:B9:3F:D9:5C:0F:1A:6A:60:02:AC:BE:56:25:5D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ezx-MaD1uT_ZXA8aamACrL5WJV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.6.0/24
77.105.11.0/24
77.105.31.0/24
79.175.91.0/24
79.175.93.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.121.60.0/24
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.255.130.0/24
188.255.140.0/24
188.255.185.0/24
188.255.190.0/24
188.255.208.0/24
188.255.213.0/24
188.255.219.0/24
188.255.226.0/24
188.255.238.0/24
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/24
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d0:05:a3:99:33:e9:72:0a:65:e6:01:64:5d:72:c6:d2:a9:
5f:36:01:04:ad:1a:81:48:fe:8e:0b:8e:dc:f0:53:5f:2c:7c:
1a:a1:52:36:f1:d9:47:b4:85:a7:ea:a1:73:f8:bc:94:9f:2d:
57:cf:3d:0e:e0:b2:81:82:d2:a6:59:75:70:f4:11:06:2c:95:
29:8b:65:16:52:db:98:1b:e6:6e:b1:9c:57:e7:5c:a1:82:c2:
4f:2e:fd:11:50:a0:ae:f7:16:bf:cd:62:de:3c:33:e9:f6:d1:
34:2e:97:49:3c:29:98:1a:5e:6a:7d:e1:70:50:91:07:92:bb:
a3:57:8c:24:e5:4e:40:2b:08:24:21:30:a6:0b:ad:b0:a8:1d:
4d:b4:5f:28:59:03:24:13:f8:3c:8f:56:57:8b:35:a3:a1:18:
0e:95:4c:93:0b:35:04:b8:85:d5:66:d7:e6:45:06:7a:bb:f4:
de:b6:5c:03:cf:fd:01:09:79:bd:0b:84:0e:5e:c9:1f:c4:d9:
f9:41:09:bc:62:91:bc:a7:1e:85:b8:a4:72:a1:0e:e4:a0:01:
3c:b5:18:80:0c:8d:d2:9b:6f:e4:c9:3d:74:4c:08:ca:d6:85:
56:9e:fe:6b:61:80:b6:3d:78:e3:88:57:96:4a:9d:7f:4c:6e:
4a:67:3b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:45 2025 by rpki-client