Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/eHwYjwol3ZgSbsrhZg1kdxtftiE.roa
File: eHwYjwol3ZgSbsrhZg1kdxtftiE.roa (raw, json)
Hash identifier: 7ZHNHK8TmQghB47YxQngAs1bPZYoQYV77uR6U2f2FwI=
Subject key identifier: 78:7C:18:8F:0A:25:DD:98:12:6E:CA:E1:66:0D:64:77:1B:5F:B6:21
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 0194C5D213592F9C2CF8FC0C66AD3D56158F
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/eHwYjwol3ZgSbsrhZg1kdxtftiE.roa
Signing time: Sun 02 Feb 2025 08:41:06 +0000
ROA not before: Sun 02 Feb 2025 08:41:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 45.94.14.0/24 maxlen: 24
45.94.15.0/24 maxlen: 24
91.229.52.0/22 maxlen: 22
212.26.6.0/23 maxlen: 24
212.26.7.0/24 maxlen: 24
212.26.8.0/22 maxlen: 24
212.26.16.0/24 maxlen: 24
212.26.17.0/24 maxlen: 24
212.26.18.0/24 maxlen: 24
212.26.19.0/24 maxlen: 24
212.26.20.0/24 maxlen: 24
212.26.21.0/24 maxlen: 24
212.26.22.0/24 maxlen: 24
212.26.23.0/24 maxlen: 24
212.26.24.0/21 maxlen: 24
212.26.26.0/23 maxlen: 24
212.26.28.0/23 maxlen: 24
212.26.32.0/24 maxlen: 24
212.26.36.0/24 maxlen: 25
212.26.37.0/24 maxlen: 25
212.26.38.0/24 maxlen: 24
212.26.39.0/24 maxlen: 24
212.26.40.0/24 maxlen: 24
212.26.41.0/24 maxlen: 24
212.26.42.0/24 maxlen: 24
212.26.43.0/24 maxlen: 24
212.26.44.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
212.26.46.0/23 maxlen: 24
212.26.48.0/24 maxlen: 24
212.26.50.0/23 maxlen: 24
212.26.52.0/24 maxlen: 24
212.26.53.0/24 maxlen: 24
212.26.54.0/24 maxlen: 24
212.26.56.0/24 maxlen: 24
212.26.58.0/24 maxlen: 24
212.26.60.0/24 maxlen: 24
212.26.63.0/24 maxlen: 24
212.26.64.0/24 maxlen: 24
212.26.65.0/24 maxlen: 24
212.26.68.0/23 maxlen: 24
212.26.71.0/24 maxlen: 24
212.26.72.0/24 maxlen: 25
212.26.74.0/24 maxlen: 25
212.26.76.0/24 maxlen: 24
212.26.78.0/24 maxlen: 24
212.138.41.0/24 maxlen: 24
212.138.42.0/24 maxlen: 25
212.138.43.0/24 maxlen: 24
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.70.0/24 maxlen: 24
212.138.71.0/24 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.80.0/23 maxlen: 23
212.138.82.0/24 maxlen: 24
212.138.83.0/24 maxlen: 24
212.138.84.0/23 maxlen: 24
212.138.86.0/24 maxlen: 24
212.138.88.0/24 maxlen: 25
212.138.92.0/24 maxlen: 24
212.138.94.0/24 maxlen: 24
212.138.96.0/21 maxlen: 24
212.138.97.0/24 maxlen: 24
212.138.98.0/23 maxlen: 23
212.138.104.0/24 maxlen: 24
212.138.108.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.121.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.126.0/24 maxlen: 25
212.138.127.0/24 maxlen: 25
212.138.128.0/24 maxlen: 24
212.138.130.0/24 maxlen: 24
212.138.132.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.140.0/24 maxlen: 24
212.138.147.0/24 maxlen: 24
212.138.150.0/24 maxlen: 24
212.138.153.0/24 maxlen: 24
212.138.155.0/24 maxlen: 25
212.138.157.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.162.0/24 maxlen: 24
212.138.164.0/24 maxlen: 25
212.138.166.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.170.0/24 maxlen: 25
212.138.172.0/24 maxlen: 24
212.138.175.0/24 maxlen: 25
212.138.176.0/24 maxlen: 24
212.138.177.0/24 maxlen: 24
212.138.180.0/24 maxlen: 24
212.138.181.0/24 maxlen: 25
212.138.183.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
212.138.187.0/24 maxlen: 24
212.138.188.0/24 maxlen: 25
212.138.190.0/24 maxlen: 24
212.138.192.0/24 maxlen: 24
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.202.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.138.206.0/24 maxlen: 24
212.138.210.0/24 maxlen: 24
212.138.210.0/28 maxlen: 28
212.138.250.0/24 maxlen: 24
2001:1490::/48 maxlen: 48
2001:1490:1::/48 maxlen: 48
2001:1490:103::/48 maxlen: 48
2001:1490:106::/48 maxlen: 48
2001:1490:107::/48 maxlen: 48
2001:1490:110::/48 maxlen: 49
2001:1490:110:8000::/49 maxlen: 49
2001:1490:111::/48 maxlen: 48
2001:1490:113::/48 maxlen: 48
2001:1490:114::/48 maxlen: 48
2001:1490:115::/48 maxlen: 50
2001:1497:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Mar 2025 00:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:d2:13:59:2f:9c:2c:f8:fc:0c:66:ad:3d:56:15:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Feb 2 08:41:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=787c188f0a25dd98126ecae1660d64771b5fb621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:16:3a:ca:9e:43:90:05:3f:b5:c4:0d:bf:
a9:aa:56:dd:12:6d:3b:0d:b4:49:d3:2d:89:95:c7:
aa:e6:f9:58:63:a1:27:05:49:7b:ed:cf:58:b7:9c:
a6:9a:f6:55:ca:ae:07:45:8b:8b:27:e4:62:08:a9:
1f:23:85:3b:28:d2:91:81:c0:cd:84:7e:06:4a:25:
31:0b:79:62:f9:1c:24:f4:b5:cf:20:9c:eb:f5:8d:
05:09:1e:56:a7:20:79:45:33:6a:a5:61:25:b8:1f:
71:8e:9f:69:36:d0:da:b3:d1:fc:9f:c2:60:43:d5:
a0:51:c4:72:73:c8:4c:98:4c:23:6e:64:3b:7d:a2:
47:ff:a6:7c:38:d2:d1:0d:52:0b:a2:7d:75:2e:87:
01:46:92:9a:e7:b6:f6:15:e3:e8:fd:43:6f:fd:ff:
76:84:2b:8f:be:a9:1c:d3:aa:07:6b:cb:2e:ab:69:
1f:85:fa:46:be:4d:b0:7f:fb:c4:23:3b:74:ee:33:
e7:7a:03:1b:f6:66:48:fc:88:4d:e9:2c:d0:cc:93:
03:64:fb:0c:44:fa:03:5d:5a:df:06:87:63:0e:94:
9f:be:3b:6b:d6:68:2e:b3:34:07:18:33:0e:c6:9a:
cc:b4:37:95:2f:34:0f:ed:66:ee:0e:84:97:d7:25:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7C:18:8F:0A:25:DD:98:12:6E:CA:E1:66:0D:64:77:1B:5F:B6:21
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/eHwYjwol3ZgSbsrhZg1kdxtftiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.14.0/23
91.229.52.0/22
212.26.6.0-212.26.11.255
212.26.16.0-212.26.32.255
212.26.36.0-212.26.48.255
212.26.50.0-212.26.54.255
212.26.56.0/24
212.26.58.0/24
212.26.60.0/24
212.26.63.0-212.26.65.255
212.26.68.0/23
212.26.71.0-212.26.72.255
212.26.74.0/24
212.26.76.0/24
212.26.78.0/24
212.138.41.0-212.138.43.255
212.138.52.0-212.138.67.255
212.138.70.0-212.138.86.255
212.138.88.0/24
212.138.92.0/24
212.138.94.0/24
212.138.96.0-212.138.104.255
212.138.108.0/24
212.138.115.0-212.138.121.255
212.138.125.0-212.138.128.255
212.138.130.0/24
212.138.132.0/24
212.138.134.0/24
212.138.139.0-212.138.140.255
212.138.147.0/24
212.138.150.0/24
212.138.153.0/24
212.138.155.0/24
212.138.157.0/24
212.138.160.0/24
212.138.162.0/24
212.138.164.0/24
212.138.166.0/24
212.138.168.0/24
212.138.170.0/24
212.138.172.0/24
212.138.175.0-212.138.177.255
212.138.180.0/23
212.138.183.0/24
212.138.185.0/24
212.138.187.0-212.138.188.255
212.138.190.0/24
212.138.192.0/24
212.138.194.0/24
212.138.196.0/24
212.138.201.0-212.138.203.255
212.138.206.0/24
212.138.210.0/24
212.138.250.0/24
IPv6:
2001:1490::/47
2001:1490:103::/48
2001:1490:106::/47
2001:1490:110::/47
2001:1490:113::-2001:1490:115:ffff:ffff:ffff:ffff:ffff
2001:1497:2::/48
Signature Algorithm: sha256WithRSAEncryption
c7:2e:f4:f5:6f:fc:34:e2:84:ee:60:c2:9d:07:c0:76:7f:e8:
93:dd:f3:81:7f:ac:b8:16:5f:ad:f4:6c:7a:fa:42:9c:4e:7b:
82:2c:5c:50:7d:d9:58:13:fd:9a:95:a9:b5:38:2f:35:ba:fe:
9e:af:25:6b:2e:04:c0:87:2e:1e:b2:96:e4:64:de:38:09:36:
3d:78:6d:0a:76:ca:35:37:c5:ab:17:19:a9:90:e8:79:dd:b1:
11:ed:e7:ea:69:09:c5:6e:cf:25:5e:61:ed:7c:13:bb:b6:ab:
03:1b:1d:5d:6a:c8:2f:a2:44:6c:a3:3c:2c:e3:24:e9:41:bb:
4f:f6:4d:d6:58:75:05:e0:8a:3c:6d:86:ca:7b:da:19:62:65:
ff:fc:48:01:14:1d:5d:28:55:79:86:43:5e:7a:be:b5:37:c3:
48:0d:28:22:3c:1a:d1:6a:98:03:6c:e0:7a:ad:7e:ae:e6:db:
ce:f1:68:cb:c2:fa:54:6a:11:4d:5e:b7:5b:6a:66:7c:8d:1a:
a9:18:91:f0:16:6b:75:6e:54:bf:99:48:00:1b:80:a1:a9:3a:
c5:96:b1:a8:fe:16:04:c0:c6:89:53:a7:76:11:8a:ba:9f:6f:
a9:d2:c1:48:de:df:1a:c5:94:23:55:ec:b4:21:4c:76:53:3d:
8e:53:d7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:07:53 2025 by rpki-client