Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/EQtBW_eQBSDgGP3xtLrGHTAVCCY.roa
File: EQtBW_eQBSDgGP3xtLrGHTAVCCY.roa (raw, json)
Hash identifier: AvU7EH30K4UP0LGkZ0W9v05L8e3OPfNhRriQoC6mMy4=
Subject key identifier: 11:0B:41:5B:F7:90:05:20:E0:18:FD:F1:B4:BA:C6:1D:30:15:08:26
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0190E470EF187B0AA8E63C7A81B23EF9E94D
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/EQtBW_eQBSDgGP3xtLrGHTAVCCY.roa
Signing time: Wed 24 Jul 2024 11:12:04 +0000
ROA not before: Wed 24 Jul 2024 11:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 17 Aug 2024 23:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e4:70:ef:18:7b:0a:a8:e6:3c:7a:81:b2:3e:f9:e9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jul 24 11:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=110b415bf7900520e018fdf1b4bac61d30150826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d7:b6:f4:66:18:d5:17:d4:ea:85:82:ed:74:
f4:f1:f9:a5:42:7f:c9:d5:b8:6d:6a:06:9f:f8:a1:
c1:4c:fd:f0:02:c2:07:51:0d:a9:de:09:02:d0:83:
31:55:21:e5:d1:2c:9a:40:ed:f0:a1:0c:87:99:8e:
98:d2:b0:8d:e2:b9:99:a6:aa:80:31:17:27:7c:88:
ef:5a:72:1b:81:52:35:a1:b6:06:e0:73:03:90:da:
be:23:76:89:81:23:1c:42:a3:a3:4d:71:13:8d:cf:
2e:55:10:18:b2:75:8c:15:d8:ac:78:7e:e0:b5:b4:
51:54:54:b3:bf:4c:e5:59:61:f9:29:c0:0f:0e:0e:
0e:13:2d:66:49:33:15:3a:1d:ab:d6:bf:3d:31:e8:
fb:11:1f:e1:8b:fb:35:ec:e8:86:2b:de:75:fe:e1:
c3:f4:78:e9:62:a9:e1:26:42:12:87:8b:8f:6c:84:
68:b0:a9:1e:33:ef:f8:30:0a:c8:ee:97:b6:1c:b6:
b2:28:08:a4:13:d0:14:d1:b0:06:68:e8:07:17:5a:
40:0f:9f:da:0a:29:3f:4b:23:08:f3:cc:ba:f6:95:
37:0b:e8:5c:97:50:6a:8e:69:a1:8e:cf:6f:f7:32:
77:32:c3:63:41:33:74:e4:13:93:ab:c5:15:f6:5e:
60:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0B:41:5B:F7:90:05:20:E0:18:FD:F1:B4:BA:C6:1D:30:15:08:26
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/EQtBW_eQBSDgGP3xtLrGHTAVCCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a11:3805::/32
2a11:3c02::/31
2a14:2d80::/30
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
60:d6:e9:bf:c2:c9:bd:c2:e7:b7:5c:58:59:69:89:35:44:bf:
33:34:74:18:1b:e1:8d:1a:ee:7e:97:f1:51:93:a9:c4:c3:62:
89:5b:6d:d1:0d:60:1f:51:41:45:a0:eb:ca:89:3a:b7:15:73:
09:01:22:43:27:2b:0c:04:4b:c1:57:cb:93:70:79:0c:b5:cc:
c5:19:10:81:37:56:16:d6:35:6b:ac:10:c5:46:7c:2c:4b:b1:
c0:37:f7:87:1a:71:b9:b5:66:63:4a:96:48:07:eb:21:32:db:
fa:ea:8a:e8:e5:a7:79:20:92:5a:77:a5:c9:43:07:f9:80:3f:
da:4b:a2:bc:31:7a:ba:a8:06:79:82:d2:a7:50:59:10:06:56:
7e:f9:e0:be:2f:19:18:2a:43:67:3d:f3:91:20:ed:83:5d:d3:
98:f2:8a:41:31:70:aa:7c:99:2d:76:da:0c:1b:d7:22:8c:96:
0a:d2:27:01:70:18:7d:a3:37:7c:58:35:0b:72:cf:b0:db:e4:
b5:26:56:50:0c:9b:2a:21:8c:be:e1:75:64:e2:61:f1:25:ab:
ca:91:ba:d4:63:8a:46:32:39:92:bf:8a:38:a4:3e:75:61:57:
6f:e0:8f:27:e4:bc:cb:68:5d:2d:3d:d6:be:c0:2d:c6:25:07:
65:23:7e:e5
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgISAZDkcO8Yewqo5jx6gbI++elNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl
YWNkNDAwHhcNMjQwNzI0MTExMjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTBiNDE1YmY3OTAwNTIwZTAxOGZkZjFiNGJhYzYxZDMwMTUwODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1te29GYY1RfU6oWC7XT08fmlQn/J
1bhtagaf+KHBTP3wAsIHUQ2p3gkC0IMxVSHl0SyaQO3woQyHmY6Y0rCN4rmZpqqA
MRcnfIjvWnIbgVI1obYG4HMDkNq+I3aJgSMcQqOjTXETjc8uVRAYsnWMFdiseH7g
tbRRVFSzv0zlWWH5KcAPDg4OEy1mSTMVOh2r1r89Mej7ER/hi/s17OiGK951/uHD
9HjpYqnhJkISh4uPbIRosKkeM+/4MArI7pe2HLayKAikE9AU0bAGaOgHF1pAD5/a
Cik/SyMI88y69pU3C+hcl1Bqjmmhjs9v9zJ3MsNjQTN05BOTq8UV9l5gSwIDAQAB
o4IDAzCCAv8wHQYDVR0OBBYEFBELQVv3kAUg4Bj98bS6xh0wFQgmMB8GA1UdIwQY
MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt
MTE5ZWZjYmIyMDIzLzEvRVF0QldfZVFCU0RnR1AzeHRMckdIVEFWQ0NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz
LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBFwYIKwYBBQUHAQcBAf8EggEGMIIBAjCBvwQCAAEwgbgD
BAIl3XwDBAItQ+QDBAIteLADBAA+AwwDBAJKd8AwDAMEAlBczAMEAFBczgMEAlZo
SAMEAVnd4AMEAluEhAMEAFvCoTAMAwQAW+HZAwQCW+HYAwQCZyO8AwQCZ2oAAwQC
Z3FEAwQCZ+dIAwQCsHhAAwQCsHhIAwQCueo4AwQCuepAAwQCuevwAwQCuezoAwQC
ufJUAwQCufqUAwQAwcvKAwQBwvZyAwQCwyroAwQAw5VXAwQE1Z9AMD4EAgACMDgD
BQMqCXxAAwUAKhE4BQMFASoRPAIDBQIqFC2AAwUAKhQugAMFACoUL4ADBQAqFDCA
AwUAKhQ4gDANBgkqhkiG9w0BAQsFAAOCAQEAYNbpv8LJvcLnt1xYWWmJNUS/MzR0
GBvhjRrufpfxUZOpxMNiiVtt0Q1gH1FBRaDryok6txVzCQEiQycrDARLwVfLk3B5
DLXMxRkQgTdWFtY1a6wQxUZ8LEuxwDf3hxpxubVmY0qWSAfrITLb+uqK6OWneSCS
WnelyUMH+YA/2kuivDF6uqgGeYLSp1BZEAZWfvngvi8ZGCpDZz3zkSDtg13TmPKK
QTFwqnyZLXbaDBvXIoyWCtInAXAYfaM3fFg1C3LPsNvktSZWUAybKiGMvuF1ZOJh
8SWrypG61GOKRjI5kr+KOKQ+dWFXb+CPJ+S8y2hdLT3WvsAtxiUHZSN+5Q==
-----END CERTIFICATE-----
Generated at Sun Aug 18 00:35:04 2024 by rpki-client on console-fra.rpki-client.org