Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/eBOeh73s00m-xZcLKSe3Ta2QFEI.roa
File: eBOeh73s00m-xZcLKSe3Ta2QFEI.roa (raw, json)
Hash identifier: lQq1LczHsNpNyVeaSq+ymqrlbDIFJYMdmn2xz2YmSP0=
Subject key identifier: 78:13:9E:87:BD:EC:D3:49:BE:C5:97:0B:29:27:B7:4D:AD:90:14:42
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 018A9288232E16D965B16596C5A69E853F7B
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/eBOeh73s00m-xZcLKSe3Ta2QFEI.roa
Signing time: Thu 14 Sep 2023 07:11:50 +0000
ROA not before: Thu 14 Sep 2023 07:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3225
IP address blocks: 91.140.216.0/22 maxlen: 24
91.140.221.0/24 maxlen: 24
91.140.220.0/24 maxlen: 24
91.140.224.0/24 maxlen: 24
91.140.222.0/24 maxlen: 24
91.140.223.0/24 maxlen: 24
91.140.224.0/22 maxlen: 22
91.140.226.0/24 maxlen: 24
91.140.233.0/24 maxlen: 24
91.140.228.0/22 maxlen: 22
91.140.232.0/24 maxlen: 24
91.140.240.0/24 maxlen: 24
91.140.235.0/24 maxlen: 24
91.140.234.0/24 maxlen: 24
91.140.238.0/24 maxlen: 24
91.140.239.0/24 maxlen: 24
91.140.236.0/24 maxlen: 24
91.140.237.0/24 maxlen: 24
91.140.242.0/24 maxlen: 24
91.140.241.0/24 maxlen: 24
91.140.244.0/22 maxlen: 22
91.140.246.0/24 maxlen: 24
91.140.248.0/24 maxlen: 24
91.140.249.0/24 maxlen: 24
91.140.248.0/22 maxlen: 22
91.140.252.0/24 maxlen: 24
91.140.253.0/24 maxlen: 24
91.140.250.0/24 maxlen: 24
91.140.252.0/22 maxlen: 22
91.140.251.0/24 maxlen: 24
91.140.255.0/24 maxlen: 24
91.140.254.0/24 maxlen: 24
185.16.4.0/22 maxlen: 22
91.140.164.0/22 maxlen: 24
91.140.160.0/22 maxlen: 24
91.140.172.0/22 maxlen: 24
94.187.224.0/19 maxlen: 24
91.140.180.0/22 maxlen: 24
94.187.232.0/22 maxlen: 22
91.140.192.0/22 maxlen: 24
94.187.228.0/22 maxlen: 22
91.140.188.0/22 maxlen: 24
94.187.236.0/22 maxlen: 22
91.140.196.0/22 maxlen: 24
94.187.240.0/22 maxlen: 24
91.140.200.0/22 maxlen: 24
91.140.201.0/24 maxlen: 24
91.140.203.0/24 maxlen: 24
91.140.204.0/22 maxlen: 24
94.187.244.0/22 maxlen: 22
91.140.202.0/24 maxlen: 24
94.187.252.0/22 maxlen: 24
91.140.212.0/22 maxlen: 24
91.140.207.0/24 maxlen: 24
94.187.248.0/22 maxlen: 22
91.140.208.0/22 maxlen: 24
91.140.128.0/17 maxlen: 24
91.140.128.0/22 maxlen: 24
91.140.132.0/22 maxlen: 24
91.140.140.0/22 maxlen: 24
91.140.152.0/22 maxlen: 24
91.140.148.0/22 maxlen: 24
194.54.241.0/24 maxlen: 24
194.54.244.0/22 maxlen: 22
194.54.243.0/24 maxlen: 24
194.54.248.0/22 maxlen: 22
194.54.252.0/22 maxlen: 22
194.54.192.0/19 maxlen: 24
194.54.192.0/18 maxlen: 18
194.54.194.0/23 maxlen: 23
194.54.196.0/22 maxlen: 22
194.54.204.0/22 maxlen: 22
194.54.200.0/22 maxlen: 22
194.54.202.0/24 maxlen: 24
194.54.209.0/24 maxlen: 24
194.54.208.0/22 maxlen: 22
194.54.208.0/24 maxlen: 24
194.54.212.0/22 maxlen: 22
194.54.216.0/22 maxlen: 22
194.54.224.0/19 maxlen: 19
194.54.220.0/24 maxlen: 24
194.54.220.0/22 maxlen: 22
194.54.224.0/22 maxlen: 22
194.54.232.0/22 maxlen: 22
194.54.228.0/22 maxlen: 22
194.54.234.0/24 maxlen: 24
194.54.236.0/22 maxlen: 22
194.54.240.0/22 maxlen: 24
2a01:7780::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 14 Sep 2023 07:12:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:88:23:2e:16:d9:65:b1:65:96:c5:a6:9e:85:3f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Sep 14 07:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78139e87bdecd349bec5970b2927b74dad901442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:45:d8:21:5a:e9:9e:39:20:6b:71:be:06:72:
d2:f9:ea:5b:db:04:94:01:36:03:3d:5c:44:ca:e2:
85:b2:da:61:25:ab:1b:95:ee:1d:8c:02:01:c8:f0:
bc:28:24:27:ef:c7:3f:a9:50:23:78:56:e7:fb:9e:
f7:05:91:78:8c:22:16:a6:84:5a:c3:55:2f:97:a6:
c4:1e:91:e7:a6:0e:46:eb:78:2b:d1:93:d6:92:73:
40:c2:85:76:7a:41:62:15:91:20:c5:80:a6:be:cd:
a0:1d:36:e5:f2:25:f9:62:9c:46:92:6a:04:5e:f0:
a9:6e:d0:a5:ee:33:3d:cd:6b:64:98:a5:69:ac:32:
c5:86:0c:ba:9f:aa:52:78:00:46:1a:fd:72:e7:ef:
cc:d5:8a:35:e7:df:bd:46:8a:88:be:52:9f:d5:75:
7c:95:9d:a7:04:72:92:94:b1:80:26:cf:b9:14:a0:
4f:a0:ea:16:8e:2a:76:37:11:b9:58:53:66:35:fd:
2d:33:43:c3:eb:0e:29:01:b2:7b:2e:52:23:5f:08:
72:fb:e3:f2:e8:c7:79:78:68:e2:a0:b0:ae:f6:7b:
ee:88:d8:e7:ed:56:ae:80:2d:62:33:87:17:b2:b8:
a1:b4:ee:cd:6d:c1:84:69:70:b3:91:1f:53:b9:b2:
e1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:13:9E:87:BD:EC:D3:49:BE:C5:97:0B:29:27:B7:4D:AD:90:14:42
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/eBOeh73s00m-xZcLKSe3Ta2QFEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.128.0/17
94.187.224.0/19
185.16.4.0/22
194.54.192.0/18
IPv6:
2a01:7780::/32
Signature Algorithm: sha256WithRSAEncryption
9d:65:2d:3d:9f:c7:27:40:cb:16:be:fb:2b:03:76:d5:d2:8d:
1c:1e:9d:7f:1d:65:e4:79:a6:92:a1:b0:82:4b:ba:6c:1b:d9:
4a:37:a6:c0:d7:8d:a9:32:02:b6:cd:0a:94:a7:7c:2d:a7:31:
27:e0:80:94:7f:89:6b:14:d8:7f:3b:8c:dc:5d:98:b7:27:ab:
47:af:36:b3:b1:f3:12:9a:fc:82:65:09:45:17:95:58:1d:7f:
2c:ab:5f:8f:4c:67:8b:c3:17:e1:64:9e:f9:85:9b:21:b4:bc:
b3:93:aa:e9:19:df:94:02:94:a9:12:6b:c7:25:e1:5b:1a:58:
90:5e:6e:2a:30:f4:53:12:74:1f:16:ad:58:c5:44:55:04:5c:
b3:58:33:8b:b4:23:bb:09:a3:57:e7:22:61:2c:c7:ab:8f:a2:
59:29:3d:f8:92:de:8c:97:c1:93:3c:17:18:84:fb:2b:43:3b:
cc:3c:81:3f:c2:92:c0:f5:3d:22:b8:54:1e:99:61:1e:91:96:
cb:36:9f:1d:60:61:81:0a:d9:0f:0b:92:fa:28:a4:51:0a:7d:
40:c9:2b:30:47:e4:42:b7:b0:c5:7b:1a:ba:86:36:d9:05:f8:
58:57:76:4e:12:29:47:e6:ab:68:2f:42:6f:26:c0:20:79:c7:
39:29:23:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:58 2024 by rpki-client on console-ams.rpki-client.org