Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EFOII37lfQsT6q-_OkkSww4tT4M.roa
File: EFOII37lfQsT6q-_OkkSww4tT4M.roa (raw, json)
Hash identifier: JfNdzloX7T9KtA0M+nP8QYXc2sCD2xuYGDNe5aoru58=
Subject key identifier: 10:53:88:23:7E:E5:7D:0B:13:EA:AF:BF:3A:49:12:C3:0E:2D:4F:83
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0195377C39E0A09E22D85D76F29D3EA8C4FD
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EFOII37lfQsT6q-_OkkSww4tT4M.roa
Signing time: Mon 24 Feb 2025 10:24:02 +0000
ROA not before: Mon 24 Feb 2025 10:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8434
IP address blocks: 192.36.37.0/24 maxlen: 24
192.71.97.0/24 maxlen: 24
192.71.158.0/24 maxlen: 24
192.121.21.0/24 maxlen: 24
192.121.172.0/24 maxlen: 24
192.121.192.0/24 maxlen: 24
192.165.65.0/24 maxlen: 24
192.165.86.0/24 maxlen: 24
192.176.161.0/24 maxlen: 24
193.180.61.0/24 maxlen: 24
193.181.0.0/24 maxlen: 24
193.181.187.0/24 maxlen: 24
193.183.3.0/24 maxlen: 24
193.183.68.0/23 maxlen: 23
193.183.79.0/24 maxlen: 24
193.183.92.0/24 maxlen: 24
193.183.93.0/24 maxlen: 24
193.183.104.0/24 maxlen: 24
193.183.118.0/24 maxlen: 24
193.234.68.0/23 maxlen: 23
193.234.220.0/23 maxlen: 23
193.234.237.0/24 maxlen: 24
193.235.142.0/23 maxlen: 24
194.14.129.0/24 maxlen: 24
194.14.212.0/24 maxlen: 24
194.68.56.0/23 maxlen: 23
194.68.99.0/24 maxlen: 24
194.68.126.0/24 maxlen: 24
194.68.194.0/23 maxlen: 23
194.71.27.0/24 maxlen: 24
194.71.83.0/24 maxlen: 24
194.71.140.0/23 maxlen: 23
194.71.168.0/24 maxlen: 24
194.71.248.0/21 maxlen: 21
194.103.50.0/24 maxlen: 24
194.132.108.0/23 maxlen: 24
194.132.174.0/24 maxlen: 24
194.132.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 09:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:7c:39:e0:a0:9e:22:d8:5d:76:f2:9d:3e:a8:c4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 24 10:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=105388237ee57d0b13eaafbf3a4912c30e2d4f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:2a:e3:73:dd:d4:46:54:59:88:f3:ee:51:
f3:07:7a:9f:f2:52:89:32:95:6e:50:b2:01:56:93:
e0:5a:bb:17:86:45:f4:71:bf:de:2c:9c:0d:78:21:
e0:07:5e:7c:a2:80:b2:f7:4f:d6:a7:dd:01:c1:cc:
95:7a:de:16:fb:f6:e8:7b:e5:0d:7f:90:ed:bf:3a:
b6:5d:2c:4e:9d:97:10:f0:fc:db:ab:88:6e:21:04:
17:c8:5f:e8:2a:87:ad:37:90:e4:ae:a2:e2:6b:1b:
0b:ca:e2:8b:89:30:6a:cf:c7:e6:e5:80:46:77:90:
61:f2:bd:05:7f:95:21:43:89:86:12:ae:85:7f:0a:
94:72:d3:cc:a7:25:fa:34:c2:c0:03:b4:c5:47:b5:
13:77:68:72:04:64:c0:fc:71:7b:9b:c1:1d:46:68:
2d:0a:00:ac:2d:15:1b:0d:17:60:76:77:0f:df:59:
9f:8c:86:63:06:c8:4c:e7:19:c3:9d:e5:31:c7:d0:
95:14:03:32:8f:9a:ad:dc:48:72:5c:d4:92:1a:6f:
2f:ce:f3:e4:35:27:d8:8b:ee:ca:73:55:57:ca:28:
45:60:09:3a:7e:8d:00:63:bb:a0:f3:d9:30:3f:5c:
ee:c4:bf:04:ae:5d:c0:77:0d:1e:0c:84:ff:2e:f7:
7a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:53:88:23:7E:E5:7D:0B:13:EA:AF:BF:3A:49:12:C3:0E:2D:4F:83
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EFOII37lfQsT6q-_OkkSww4tT4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.37.0/24
192.71.97.0/24
192.71.158.0/24
192.121.21.0/24
192.121.172.0/24
192.121.192.0/24
192.165.65.0/24
192.165.86.0/24
192.176.161.0/24
193.180.61.0/24
193.181.0.0/24
193.181.187.0/24
193.183.3.0/24
193.183.68.0/23
193.183.79.0/24
193.183.92.0/23
193.183.104.0/24
193.183.118.0/24
193.234.68.0/23
193.234.220.0/23
193.234.237.0/24
193.235.142.0/23
194.14.129.0/24
194.14.212.0/24
194.68.56.0/23
194.68.99.0/24
194.68.126.0/24
194.68.194.0/23
194.71.27.0/24
194.71.83.0/24
194.71.140.0/23
194.71.168.0/24
194.71.248.0/21
194.103.50.0/24
194.132.108.0/23
194.132.174.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:e4:7d:52:ce:d1:ca:36:87:b8:c2:e4:dc:f7:93:4c:e6:9f:
13:f9:b4:97:21:b6:03:ed:e9:cd:9e:f9:41:55:e0:fc:03:f1:
8f:3f:97:a8:04:22:a7:eb:99:99:f8:b2:c4:61:08:1d:90:a0:
69:7c:28:02:f4:34:3f:de:8b:fc:54:81:a3:8e:46:ad:ea:07:
09:f1:c9:77:9e:da:67:28:76:de:ec:d0:89:e6:07:ab:23:36:
0d:10:3f:f5:a4:a2:a9:6b:25:95:84:d4:e0:05:3d:65:6b:3b:
0b:8f:db:9a:ab:fb:c3:47:c4:a9:af:3a:55:ff:68:5b:15:20:
e6:5f:f7:e4:ad:58:45:4a:11:f1:c5:d3:cd:75:f1:54:e5:e7:
7f:87:83:9b:7b:82:de:3c:f5:92:b6:af:fc:77:b5:14:09:18:
39:42:51:a4:56:0d:ec:cb:5c:fa:73:39:12:b6:e5:ba:98:6b:
05:a8:4e:03:94:c5:8c:7e:4d:3e:16:c0:96:f6:84:d1:63:41:
d2:0f:81:bb:f7:11:98:f5:7b:a9:9a:7a:91:17:12:6c:bf:3e:
ec:3e:0f:26:c3:b4:c5:52:f1:6d:55:2e:3a:66:ba:6f:12:8d:
0b:c1:84:4d:13:fd:db:c5:46:3a:d6:8d:e3:06:45:be:35:28:
97:2e:7c:28
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgISAZU3fDngoJ4i2F128p0+qMT9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMjI0MTAyNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDUzODgyMzdlZTU3ZDBiMTNlYWFmYmYzYTQ5MTJjMzBlMmQ0ZjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqcq43Pd1EZUWYjz7lHzB3qf8lKJ
MpVuULIBVpPgWrsXhkX0cb/eLJwNeCHgB158ooCy90/Wp90BwcyVet4W+/boe+UN
f5Dtvzq2XSxOnZcQ8Pzbq4huIQQXyF/oKoetN5DkrqLiaxsLyuKLiTBqz8fm5YBG
d5Bh8r0Ff5UhQ4mGEq6FfwqUctPMpyX6NMLAA7TFR7UTd2hyBGTA/HF7m8EdRmgt
CgCsLRUbDRdgdncP31mfjIZjBshM5xnDneUxx9CVFAMyj5qt3EhyXNSSGm8vzvPk
NSfYi+7Kc1VXyihFYAk6fo0AY7ug89kwP1zuxL8Erl3Adw0eDIT/Lvd6pwIDAQAB
o4IC4DCCAtwwHQYDVR0OBBYEFBBTiCN+5X0LE+qvvzpJEsMOLU+DMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvRUZPSUkzN2xmUXNUNnEtX09ra1N3dzR0VDRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH1BggrBgEFBQcBBwEB/wSB5TCB4jCB3wQCAAEwgdgDBADA
JCUDBADAR2EDBADAR54DBADAeRUDBADAeawDBADAecADBADApUEDBADApVYDBADA
sKEDBADBtD0DBADBtQADBADBtbsDBADBtwMDBAHBt0QDBADBt08DBAHBt1wDBADB
t2gDBADBt3YDBAHB6kQDBAHB6twDBADB6u0DBAHB644DBADCDoEDBADCDtQDBAHC
RDgDBADCRGMDBADCRH4DBAHCRMIDBADCRxsDBADCR1MDBAHCR4wDBADCR6gDBAPC
R/gDBADCZzIDBAHChGwDBAHChK4wDQYJKoZIhvcNAQELBQADggEBAB/kfVLO0co2
h7jC5Nz3k0zmnxP5tJchtgPt6c2e+UFV4PwD8Y8/l6gEIqfrmZn4ssRhCB2QoGl8
KAL0ND/ei/xUgaOORq3qBwnxyXee2mcodt7s0InmB6sjNg0QP/WkoqlrJZWE1OAF
PWVrOwuP25qr+8NHxKmvOlX/aFsVIOZf9+StWEVKEfHF08118VTl53+Hg5t7gt48
9ZK2r/x3tRQJGDlCUaRWDezLXPpzORK25bqYawWoTgOUxYx+TT4WwJb2hNFjQdIP
gbv3EZj1e6maepEXEmy/Puw+DybDtMVS8W1VLjpmum8SjQvBhE0T/dvFRjrWjeMG
Rb41KJcufCg=
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:23:48 2025 by rpki-client