Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/eNUS7o8OUHsXmyZ9u3fbWFplP1c.roa
File: eNUS7o8OUHsXmyZ9u3fbWFplP1c.roa (raw, json)
Hash identifier: 4a/UX6Lo50GPbrarSYrFNPesUBnw4uCa2+WxG64+Q0E=
Subject key identifier: 78:D5:12:EE:8F:0E:50:7B:17:9B:26:7D:BB:77:DB:58:5A:65:3F:57
Certificate issuer: /CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Certificate serial: 018CC7934E9D7616A66AE22B964462E906A9
Authority key identifier: B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/eNUS7o8OUHsXmyZ9u3fbWFplP1c.roa
Signing time: Tue 02 Jan 2024 00:29:29 +0000
ROA not before: Tue 02 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198317
IP address blocks: 185.235.125.0/24 maxlen: 24
185.235.124.0/22 maxlen: 22
185.235.124.0/23 maxlen: 23
185.235.124.0/24 maxlen: 24
185.235.126.0/23 maxlen: 23
185.235.127.0/24 maxlen: 24
185.235.126.0/24 maxlen: 24
91.200.107.0/24 maxlen: 24
91.200.106.0/24 maxlen: 24
91.200.106.0/23 maxlen: 23
155.133.58.0/24 maxlen: 24
155.133.58.0/23 maxlen: 23
155.133.56.0/23 maxlen: 23
155.133.56.0/22 maxlen: 22
155.133.57.0/24 maxlen: 24
155.133.56.0/24 maxlen: 24
155.133.59.0/24 maxlen: 24
185.96.123.0/24 maxlen: 24
185.96.122.0/23 maxlen: 23
185.96.122.0/24 maxlen: 24
185.96.121.0/24 maxlen: 24
185.96.120.0/22 maxlen: 22
185.96.120.0/24 maxlen: 24
185.96.120.0/23 maxlen: 23
195.88.145.0/24 maxlen: 24
195.88.144.0/24 maxlen: 24
195.88.144.0/23 maxlen: 23
91.200.105.0/24 maxlen: 24
91.200.104.0/24 maxlen: 24
91.200.104.0/22 maxlen: 22
91.200.104.0/23 maxlen: 23
91.239.199.0/24 maxlen: 24
91.239.198.0/24 maxlen: 24
91.239.197.0/24 maxlen: 24
91.239.198.0/23 maxlen: 23
91.239.196.0/23 maxlen: 23
91.239.196.0/22 maxlen: 22
91.239.196.0/24 maxlen: 24
2a05:ffc0:c000::/34 maxlen: 34
2a05:ffc0:8000::/34 maxlen: 34
2a05:ffc0:4000::/34 maxlen: 34
2a05:ffc0::/34 maxlen: 34
2a05:ffc0:8000::/33 maxlen: 33
2a05:ffc0::/33 maxlen: 33
2a05:ffc0::/32 maxlen: 32
2a05:ffc2:c000::/34 maxlen: 34
2a05:ffc2:8000::/34 maxlen: 34
2a05:ffc2:4000::/34 maxlen: 34
2a05:ffc2::/34 maxlen: 34
2a05:ffc2::/32 maxlen: 32
2a05:ffc2:8000::/33 maxlen: 33
2a05:ffc2::/33 maxlen: 33
2a05:ffc1:8000::/33 maxlen: 33
2a05:ffc1::/33 maxlen: 33
2a05:ffc1::/32 maxlen: 32
2a05:ffc1:c000::/34 maxlen: 34
2a05:ffc1:8000::/34 maxlen: 34
2a05:ffc1:4000::/34 maxlen: 34
2a05:ffc1::/34 maxlen: 34
Validation: Failed, certificate revoked on Sat 13 Jan 2024 19:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:4e:9d:76:16:a6:6a:e2:2b:96:44:62:e9:06:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Validity
Not Before: Jan 2 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78d512ee8f0e507b179b267dbb77db585a653f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:55:57:e0:bd:ee:60:4a:37:67:28:fc:b2:fd:
93:f4:89:f3:02:a9:6a:00:b7:43:3e:0a:29:00:e3:
0c:05:c3:ce:1c:d1:d3:5f:ea:8c:e6:dd:b7:32:7c:
59:8b:ab:a9:f0:65:c2:b6:fe:a5:79:8b:3b:66:63:
a9:56:16:d6:38:c1:00:6d:c1:30:01:41:50:c4:fd:
e5:19:44:2f:86:a6:5f:97:0f:43:5c:47:ae:e2:b3:
45:41:af:ee:e6:59:ee:a5:85:91:7e:00:ed:86:29:
33:db:e4:cf:85:89:00:30:96:92:2e:d3:f1:68:ab:
0b:20:2f:2c:1c:1e:97:8b:9f:33:a1:14:2a:b2:41:
ab:84:39:94:38:4c:c9:13:35:40:3e:b2:02:0b:b7:
4a:6f:37:93:65:15:64:a8:bf:19:1e:09:00:3d:94:
a9:10:e1:d3:a2:16:51:b5:ce:10:51:dc:3c:e4:70:
ed:34:5b:5c:ec:b0:12:df:ab:ba:07:55:50:92:72:
fa:48:95:9d:df:b6:c7:b5:fe:33:26:4f:d8:d2:c3:
4f:30:9a:88:38:02:85:72:bb:ca:28:6b:fc:e4:37:
3b:cc:f7:30:d8:7a:5c:33:66:27:48:09:c7:bd:79:
c0:77:93:8f:cf:c8:6e:4a:a2:0d:8d:b2:4e:d1:3e:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D5:12:EE:8F:0E:50:7B:17:9B:26:7D:BB:77:DB:58:5A:65:3F:57
X509v3 Authority Key Identifier:
keyid:B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/eNUS7o8OUHsXmyZ9u3fbWFplP1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.104.0/22
91.239.196.0/22
155.133.56.0/22
185.96.120.0/22
185.235.124.0/22
195.88.144.0/23
IPv6:
2a05:ffc0::-2a05:ffc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
af:b7:b9:fd:0f:20:81:73:a3:34:7d:85:5d:51:92:63:c3:7b:
01:08:18:27:dd:86:bb:59:61:f7:c1:51:b4:2e:e5:8a:b5:71:
04:08:66:63:65:77:72:39:a9:d9:e7:af:8d:31:93:0c:fa:80:
b5:a1:5f:3c:f7:80:f0:3e:27:a7:c6:e8:4e:2b:52:a1:a5:bf:
0b:89:80:7c:38:6f:eb:b1:05:59:0e:9c:cd:a0:45:0b:7c:cc:
a7:45:57:ad:ee:17:40:8e:cb:7c:6f:9f:ea:ee:aa:b5:c5:b6:
4c:32:24:51:40:23:a3:cd:85:b7:96:c5:97:ab:19:0c:bc:de:
b9:2d:e3:4d:58:ec:ec:ae:3d:02:47:bd:88:26:e7:51:cf:61:
aa:8a:44:33:f1:d0:70:63:7b:c5:cf:fe:41:c6:66:4a:4a:bc:
ac:0a:50:e3:10:05:b4:dd:85:05:4e:70:e9:b0:88:ce:8a:74:
46:cd:6a:f9:67:88:4e:89:c3:d9:0f:0d:62:5a:a4:ba:f5:e9:
bb:ea:db:8a:80:04:67:c9:19:56:a1:a1:6c:2b:f2:43:83:12:
85:66:2e:34:91:99:58:c8:1b:5b:b6:bd:5a:d8:9f:5b:9c:f1:
dc:76:cc:80:3d:db:4f:17:30:9a:a5:86:65:34:79:cb:35:34:
c5:a6:ec:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:47 2025 by rpki-client