Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/uT8Fdl9d6MqQp0AXyGz5HvKl8tM.roa
File: uT8Fdl9d6MqQp0AXyGz5HvKl8tM.roa (raw, json)
Hash identifier: 4t/kOJT9ooSIT9dv7KNhZXTPs3vWQdSZlm1UF83egMM=
Subject key identifier: B9:3F:05:76:5F:5D:E8:CA:90:A7:40:17:C8:6C:F9:1E:F2:A5:F2:D3
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 0194236A3392BC2DEBA8667B1F9757426569
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/uT8Fdl9d6MqQp0AXyGz5HvKl8tM.roa
Signing time: Wed 01 Jan 2025 19:49:10 +0000
ROA not before: Wed 01 Jan 2025 19:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 93.180.216.0/24 maxlen: 24
93.180.217.0/24 maxlen: 24
93.180.218.0/24 maxlen: 24
93.180.219.0/24 maxlen: 24
93.180.220.0/24 maxlen: 24
93.180.221.0/24 maxlen: 24
93.180.222.0/24 maxlen: 24
93.180.223.0/24 maxlen: 24
144.86.228.0/24 maxlen: 24
144.86.229.0/24 maxlen: 24
144.86.230.0/24 maxlen: 24
144.86.231.0/24 maxlen: 24
185.20.196.0/24 maxlen: 24
185.20.197.0/24 maxlen: 24
185.20.198.0/23 maxlen: 23
185.20.198.0/24 maxlen: 24
185.20.199.0/24 maxlen: 24
185.138.120.0/23 maxlen: 23
185.138.120.0/24 maxlen: 24
185.138.121.0/24 maxlen: 24
185.138.122.0/24 maxlen: 24
185.138.123.0/24 maxlen: 24
185.254.12.0/24 maxlen: 24
185.254.13.0/24 maxlen: 24
185.254.14.0/24 maxlen: 24
185.254.15.0/24 maxlen: 24
195.133.220.0/24 maxlen: 24
195.133.221.0/24 maxlen: 24
195.133.222.0/24 maxlen: 24
195.133.223.0/24 maxlen: 24
199.74.189.0/24 maxlen: 24
199.74.191.0/24 maxlen: 24
2a0b:1880::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 30 Jan 2025 09:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:33:92:bc:2d:eb:a8:66:7b:1f:97:57:42:65:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Jan 1 19:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b93f05765f5de8ca90a74017c86cf91ef2a5f2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:f6:ef:fd:68:13:bd:f9:a7:73:67:19:da:
ce:53:7f:ac:a6:48:d7:f7:69:f8:fc:0c:7c:9c:58:
1b:ab:4c:9d:90:09:e8:29:c2:7d:e9:59:06:4a:e6:
68:5e:99:fe:b9:02:cc:9a:90:7f:8d:78:01:8a:4b:
e8:1c:6d:60:d7:4b:b5:55:0c:be:7c:aa:29:48:38:
2e:88:a5:7e:5a:ca:34:46:40:a8:ad:72:a7:34:60:
c2:b5:8d:f4:53:a5:8b:03:7a:b1:ed:e7:f6:7c:5f:
b9:10:8c:cc:46:a6:67:f0:cb:f4:15:fb:17:a6:6c:
a8:30:9e:87:17:d8:bf:27:54:f0:c3:db:3e:5f:2e:
38:b2:ee:37:ef:44:54:2c:6d:3b:4d:b0:97:76:b0:
ee:45:a1:5e:cf:43:d1:7e:6b:27:ec:66:fa:79:be:
1b:e4:3b:eb:77:dc:ee:46:82:ad:6e:cf:94:98:d6:
08:75:21:92:54:ac:7f:f2:33:3e:97:74:9b:dd:db:
2a:24:b5:a2:0f:7c:03:17:7c:c4:dd:c0:7c:09:ce:
22:13:6d:7f:1f:43:c5:a4:3d:ed:aa:d4:a9:d8:97:
b6:57:1b:b5:82:e8:f9:88:6d:f6:5e:de:4d:59:4b:
da:cc:1e:bc:e4:ac:95:ae:dc:56:bc:81:06:a3:5e:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3F:05:76:5F:5D:E8:CA:90:A7:40:17:C8:6C:F9:1E:F2:A5:F2:D3
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/uT8Fdl9d6MqQp0AXyGz5HvKl8tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.216.0/21
144.86.228.0/22
185.20.196.0/22
185.138.120.0/22
185.254.12.0/22
195.133.220.0/22
199.74.189.0/24
199.74.191.0/24
IPv6:
2a0b:1880::/29
Signature Algorithm: sha256WithRSAEncryption
af:99:a2:c7:20:d3:2b:9e:8d:a3:6e:61:62:34:18:a6:e1:f4:
d1:6b:04:50:d5:7d:6d:a4:1a:db:2e:3d:5e:c9:a1:53:ae:db:
33:37:d0:63:79:a0:83:fb:a5:d3:1b:c0:2f:8f:73:39:76:34:
b3:75:c7:9c:9a:65:1b:d9:ba:80:39:aa:c8:34:c3:d0:3e:a9:
6f:f2:98:fc:cf:4a:4b:04:5a:cb:f4:89:db:10:4c:c3:84:ce:
8c:a5:9f:8f:68:f4:76:9b:7c:3b:f3:10:b3:8d:32:42:2c:79:
d5:27:e2:ce:de:45:4c:88:ec:d9:c9:6b:30:41:e6:46:06:51:
e3:ee:80:3e:1e:ee:d7:7f:40:c0:79:7a:51:47:82:35:e7:d4:
21:71:c9:36:52:06:cc:53:2d:26:b8:e1:58:1e:48:4f:39:0c:
3f:47:ab:7f:3d:c7:26:5b:70:66:8f:61:84:a1:de:a0:0e:20:
12:31:93:19:70:72:94:96:6e:1a:3c:bf:ac:80:af:3d:02:fa:
ab:45:9c:33:c9:f6:cf:d2:bf:40:b9:f2:de:8f:3f:3b:8a:64:
b8:30:2c:da:be:e9:1c:59:82:e4:52:20:84:16:4d:47:b3:da:
2c:18:5e:cf:73:e5:d9:c5:9f:0c:05:27:23:ff:bc:22:e6:e8:
d9:81:72:da
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZQjajOSvC3rqGZ7H5dXQmVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy
NDhlMTQwHhcNMjUwMTAxMTk0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTNmMDU3NjVmNWRlOGNhOTBhNzQwMTdjODZjZjkxZWYyYTVmMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9727/1oE735p3NnGdrOU3+spkjX
92n4/Ax8nFgbq0ydkAnoKcJ96VkGSuZoXpn+uQLMmpB/jXgBikvoHG1g10u1VQy+
fKopSDguiKV+Wso0RkCorXKnNGDCtY30U6WLA3qx7ef2fF+5EIzMRqZn8Mv0FfsX
pmyoMJ6HF9i/J1Tww9s+Xy44su4370RULG07TbCXdrDuRaFez0PRfmsn7Gb6eb4b
5Dvrd9zuRoKtbs+UmNYIdSGSVKx/8jM+l3Sb3dsqJLWiD3wDF3zE3cB8Cc4iE21/
H0PFpD3tqtSp2Je2Vxu1guj5iG32Xt5NWUvazB685KyVrtxWvIEGo16nRwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFLk/BXZfXejKkKdAF8hs+R7ypfLTMB8GA1UdIwQY
MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt
ZmJjNmZjYjVlN2E2LzEvdVQ4RmRsOWQ2TXFRcDBBWHlHejVIdktsOHRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2
LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDXbTYAwQC
kFbkAwQCuRTEAwQCuYp4AwQCuf4MAwQCw4XcAwQAx0q9AwQAx0q/MA0EAgACMAcD
BQMqCxiAMA0GCSqGSIb3DQEBCwUAA4IBAQCvmaLHINMrno2jbmFiNBim4fTRawRQ
1X1tpBrbLj1eyaFTrtszN9BjeaCD+6XTG8Avj3M5djSzdcecmmUb2bqAOarINMPQ
Pqlv8pj8z0pLBFrL9InbEEzDhM6MpZ+PaPR2m3w78xCzjTJCLHnVJ+LO3kVMiOzZ
yWswQeZGBlHj7oA+Hu7Xf0DAeXpRR4I159Qhcck2UgbMUy0muOFYHkhPOQw/R6t/
PccmW3Bmj2GEod6gDiASMZMZcHKUlm4aPL+sgK89AvqrRZwzyfbP0r9AufLejz87
imS4MCzavukcWYLkUiCEFk1Hs9osGF7Pc+XZxZ8MBScj/7wi5ujZgXLa
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:31:13 2025 by rpki-client