Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/e8LzSmpxlvS2mPLs0g3IJCkVnOY.roa
File: e8LzSmpxlvS2mPLs0g3IJCkVnOY.roa (raw, json)
Hash identifier: G8laFBNYITcn1F1i9VA60Y1f4EPuhLgqiALW2YZImLY=
Subject key identifier: 7B:C2:F3:4A:6A:71:96:F4:B6:98:F2:EC:D2:0D:C8:24:29:15:9C:E6
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 0195F85895B5230AA0211F70706B6CAED172
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/e8LzSmpxlvS2mPLs0g3IJCkVnOY.roa
Signing time: Wed 02 Apr 2025 21:11:49 +0000
ROA not before: Wed 02 Apr 2025 21:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136258
IP address blocks: 46.16.128.0/24 maxlen: 24
46.16.129.0/24 maxlen: 24
46.16.130.0/24 maxlen: 24
46.16.131.0/24 maxlen: 24
109.104.152.0/24 maxlen: 24
109.104.153.0/24 maxlen: 24
109.104.155.0/24 maxlen: 24
147.78.0.0/24 maxlen: 24
147.78.1.0/24 maxlen: 24
147.78.2.0/24 maxlen: 24
147.78.3.0/24 maxlen: 24
185.126.237.0/24 maxlen: 24
185.126.238.0/24 maxlen: 24
185.126.239.0/24 maxlen: 24
185.213.20.0/24 maxlen: 24
185.213.21.0/24 maxlen: 24
185.213.23.0/24 maxlen: 24
2a11:840:1::/48 maxlen: 48
2a11:840:3::/48 maxlen: 48
2a11:840:6::/48 maxlen: 48
2a11:840:7::/48 maxlen: 48
2a11:840:8::/48 maxlen: 48
2a11:840:10::/48 maxlen: 48
2a11:840:11::/48 maxlen: 48
2a11:840:12::/48 maxlen: 48
2a11:840:13::/48 maxlen: 48
2a11:840:14::/48 maxlen: 48
2a11:840:17::/48 maxlen: 48
2a11:840:18::/48 maxlen: 48
2a11:840:19::/48 maxlen: 48
2a11:840:20::/48 maxlen: 48
2a11:840:21::/48 maxlen: 48
2a11:840:22::/48 maxlen: 48
2a11:840:23::/48 maxlen: 48
2a11:840:24::/48 maxlen: 48
2a11:840:25::/48 maxlen: 48
2a11:840:26::/48 maxlen: 48
2a11:840:28::/48 maxlen: 48
2a11:840:30::/48 maxlen: 48
2a11:840:33::/48 maxlen: 48
2a11:840:40::/48 maxlen: 48
2a11:840:41::/48 maxlen: 48
2a11:840:47::/48 maxlen: 48
2a11:840:48::/48 maxlen: 48
2a11:840:54::/48 maxlen: 48
2a11:840:57::/48 maxlen: 48
2a11:840:60::/48 maxlen: 48
2a11:840:61::/48 maxlen: 48
2a11:840:62::/48 maxlen: 48
2a11:840:63::/48 maxlen: 48
2a11:840:64::/48 maxlen: 48
2a11:840:65::/48 maxlen: 48
2a11:840:66::/48 maxlen: 48
2a11:840:67::/48 maxlen: 48
2a11:840:68::/48 maxlen: 48
2a11:840:69::/48 maxlen: 48
2a11:840:70::/48 maxlen: 48
2a11:840:71::/48 maxlen: 48
2a11:840:72::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 16 Apr 2025 00:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f8:58:95:b5:23:0a:a0:21:1f:70:70:6b:6c:ae:d1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Apr 2 21:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bc2f34a6a7196f4b698f2ecd20dc82429159ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:6a:fa:fb:f0:2f:a1:2b:bc:90:be:6f:05:
60:2f:26:d0:02:a4:5c:78:a9:f7:cc:5b:21:06:ee:
55:03:44:63:73:30:d1:6b:2d:ad:c1:6f:a8:2e:0a:
1d:93:b2:ba:4b:b4:9f:f2:93:36:bc:4e:dc:ea:5e:
8a:f7:1b:7a:de:60:22:25:fd:f4:b0:42:89:cb:e1:
87:3e:8a:cb:50:51:f7:6a:fb:97:d1:56:31:20:e3:
78:51:e5:c2:b0:67:b6:9f:93:54:46:94:96:c1:e6:
d5:5a:df:a1:e1:5f:66:26:f1:c1:f0:32:4b:22:91:
07:1a:88:e8:76:9f:4a:02:a6:f1:37:e5:0e:ce:08:
1b:b1:3f:b3:4e:a1:23:1a:62:bf:82:91:23:25:6d:
12:20:f2:b2:1e:78:5c:5d:79:a2:2a:f9:75:b5:66:
d0:38:c4:c8:ea:df:62:a9:4b:4f:0c:de:9d:e1:4f:
26:40:bd:e5:db:e9:8b:f6:09:35:42:75:7e:70:4e:
d2:93:4a:71:b0:65:eb:6a:79:0d:61:f8:11:2d:0b:
18:e0:5b:be:32:94:81:59:f4:dd:de:76:16:89:b4:
4e:f7:83:3f:f7:d6:6a:0f:10:ab:d9:ba:1d:0a:d8:
e0:1c:72:df:ec:c0:8d:bb:2e:14:05:2d:6e:dc:9d:
a5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C2:F3:4A:6A:71:96:F4:B6:98:F2:EC:D2:0D:C8:24:29:15:9C:E6
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/e8LzSmpxlvS2mPLs0g3IJCkVnOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.128.0/22
109.104.152.0/23
109.104.155.0/24
147.78.0.0/22
185.126.237.0-185.126.239.255
185.213.20.0/23
185.213.23.0/24
IPv6:
2a11:840:1::/48
2a11:840:3::/48
2a11:840:6::-2a11:840:8:ffff:ffff:ffff:ffff:ffff
2a11:840:10::-2a11:840:14:ffff:ffff:ffff:ffff:ffff
2a11:840:17::-2a11:840:19:ffff:ffff:ffff:ffff:ffff
2a11:840:20::-2a11:840:26:ffff:ffff:ffff:ffff:ffff
2a11:840:28::/48
2a11:840:30::/48
2a11:840:33::/48
2a11:840:40::/47
2a11:840:47::-2a11:840:48:ffff:ffff:ffff:ffff:ffff
2a11:840:54::/48
2a11:840:57::/48
2a11:840:60::-2a11:840:69:ffff:ffff:ffff:ffff:ffff
2a11:840:70::-2a11:840:72:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2b:e6:ae:6c:59:9b:be:41:1b:0c:53:ca:c4:9f:69:35:87:49:
3f:0f:89:00:f4:e4:9e:06:36:95:ef:c1:59:ae:5e:e5:0e:6d:
de:e7:45:f4:5b:b9:dc:1d:2e:80:2e:da:1b:74:36:a5:e9:ec:
38:13:f9:11:f1:47:16:fc:3b:70:93:f2:b4:f0:bd:01:d5:36:
e6:85:3e:8e:3b:d8:66:2d:89:cb:8c:c7:ce:4f:11:38:2f:01:
4b:44:c3:08:0e:9b:2e:5d:ac:1d:be:23:ea:b1:52:80:9a:f1:
59:6c:a4:ff:b8:5e:c3:f6:9c:65:7e:86:de:d6:4d:4e:04:5d:
7b:6e:72:34:19:18:42:fa:ad:88:6f:70:ba:54:bb:ee:20:74:
1e:1d:35:8a:36:08:0e:94:89:09:b8:87:94:5b:80:88:6b:64:
dd:28:24:42:c7:fc:b2:a1:71:b7:41:48:02:c8:50:d3:a1:b9:
e2:4e:d0:32:3c:5a:74:23:be:4f:73:dd:34:fd:b3:c3:16:31:
83:d6:6f:64:11:a3:bb:d0:3c:48:e9:24:80:cc:3e:6f:b9:02:
f2:43:8e:fc:ce:ba:15:20:a6:70:ed:2e:b4:6d:d7:b1:95:36:
3a:17:9b:e0:44:a0:86:92:70:fa:c5:3d:71:f0:4d:05:0a:a8:
39:aa:ae:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:42:47 2025 by rpki-client