Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/eQiVa0HHNCcNRI2yDLQqUVKvGzA.roa
File: eQiVa0HHNCcNRI2yDLQqUVKvGzA.roa (raw, json)
Hash identifier: 3+bEpMB8AovZ40M2ROxby1NHPdzVKpFXwDVV8ysNc2Q=
Subject key identifier: 79:08:95:6B:41:C7:34:27:0D:44:8D:B2:0C:B4:2A:51:52:AF:1B:30
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0192996034739246A3745B15068DEDF7BC8A
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/eQiVa0HHNCcNRI2yDLQqUVKvGzA.roa
Signing time: Thu 17 Oct 2024 07:27:51 +0000
ROA not before: Thu 17 Oct 2024 07:27:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 15 Nov 2024 13:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:60:34:73:92:46:a3:74:5b:15:06:8d:ed:f7:bc:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Oct 17 07:27:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7908956b41c734270d448db20cb42a5152af1b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:65:fd:6f:4d:4b:71:69:82:44:b7:f0:88:3c:
7b:34:ee:88:e3:c9:57:dc:2d:aa:4c:b2:95:3a:9a:
1b:0f:75:f9:54:03:9d:fe:76:df:90:bf:4a:da:25:
90:07:dd:5a:4b:2a:3f:7e:1b:ae:a2:7c:b2:07:d4:
0e:81:a0:3a:00:b1:0f:c5:e4:9a:8f:c2:a8:1f:5a:
10:7f:11:fc:0a:3d:58:6f:da:13:a6:81:f8:28:90:
45:b5:22:55:10:46:26:cd:53:73:22:e6:1b:1f:64:
52:9a:2f:00:16:95:9f:76:f3:ee:56:5b:27:c0:b3:
5e:b5:09:ed:ed:39:6b:0a:6d:91:48:56:71:77:a4:
96:e9:0b:3b:f0:d1:c9:53:cc:af:5d:c2:a0:c5:28:
27:c8:23:2e:01:77:22:fa:57:8e:35:71:3a:eb:a7:
2f:52:d3:b7:aa:24:ec:22:01:70:a7:44:b0:04:26:
d5:29:2d:71:85:76:4c:b5:3e:55:62:20:d4:b2:ac:
0e:fa:30:b0:92:3a:43:1b:8e:57:5b:8e:53:aa:1b:
25:a0:8a:e8:d5:e6:23:7e:f2:75:31:d2:2e:80:ac:
8a:cf:8e:ad:8e:75:90:43:27:bb:0e:b6:e4:0d:17:
d7:56:b0:c6:17:e9:27:0d:39:aa:d0:c5:2f:d2:de:
42:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:08:95:6B:41:C7:34:27:0D:44:8D:B2:0C:B4:2A:51:52:AF:1B:30
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/eQiVa0HHNCcNRI2yDLQqUVKvGzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a11:3805::/32
2a11:3c02::/31
2a11:4c06::/32
2a14:2d80::/30
2a14:2d85::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/32
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
97:3b:5e:eb:b9:5f:c0:7d:51:0e:0c:c9:d4:da:14:ad:52:bb:
42:bc:a0:48:d7:7d:39:14:64:f5:de:c6:83:a7:7d:01:4f:aa:
19:13:1f:ec:6f:13:41:ea:ee:c4:33:0d:28:c5:f4:12:1e:34:
29:04:ed:09:37:7c:59:73:ba:8e:5d:65:ee:74:27:66:87:6a:
a0:6b:cb:7f:89:22:a8:ea:3c:8a:c1:42:a6:e2:1d:4b:16:a0:
71:56:33:e1:dc:c6:5e:3a:8b:aa:97:e5:14:81:cb:d4:68:75:
0e:dc:35:9b:f7:09:2b:e2:9f:92:f8:87:84:4c:d3:e4:92:b8:
ad:bb:9d:e0:10:da:cf:b5:85:65:df:44:56:9c:6e:c9:0d:6a:
d1:d6:d2:61:14:ee:04:60:fd:e7:32:2b:c1:a9:9f:32:35:69:
9b:ad:69:88:a2:a1:4f:39:15:f3:21:e9:f7:b1:0a:ed:a1:33:
77:01:a5:fe:b7:e6:d5:22:ff:44:55:1c:10:f4:eb:a0:c8:a0:
93:85:f4:f3:46:82:05:26:d3:72:15:c7:b7:76:c7:8d:8f:2b:
18:20:cd:a7:86:48:2b:a6:5d:cb:a4:c7:a3:49:a6:f3:de:3d:
ae:d8:5d:47:76:fd:e0:4d:25:bc:ed:90:22:99:61:99:49:a0:
44:cb:ec:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 16:28:32 2024 by rpki-client on console-fra.rpki-client.org