Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/eKY_mmFP9PZl7ftqlGatoYdVFY4.roa
File: eKY_mmFP9PZl7ftqlGatoYdVFY4.roa (raw, json)
Hash identifier: dmVLGZE6qZnuUAwCzIhapbtriKWUGg+VbrM8qTBQZxw=
Subject key identifier: 78:A6:3F:9A:61:4F:F4:F6:65:ED:FB:6A:94:66:AD:A1:87:55:15:8E
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 01918E7E88BE0F2ED36EDC72126D1953845D
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/eKY_mmFP9PZl7ftqlGatoYdVFY4.roa
Signing time: Mon 26 Aug 2024 11:42:22 +0000
ROA not before: Mon 26 Aug 2024 11:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8895
IP address blocks: 45.94.15.0/24 maxlen: 24
91.229.52.0/22 maxlen: 22
212.26.0.0/17 maxlen: 17
212.26.6.0/23 maxlen: 24
212.26.7.0/24 maxlen: 24
212.26.8.0/22 maxlen: 24
212.26.16.0/24 maxlen: 24
212.26.17.0/24 maxlen: 24
212.26.18.0/24 maxlen: 24
212.26.19.0/24 maxlen: 24
212.26.20.0/24 maxlen: 24
212.26.21.0/24 maxlen: 24
212.26.22.0/24 maxlen: 24
212.26.23.0/24 maxlen: 24
212.26.24.0/21 maxlen: 24
212.26.32.0/24 maxlen: 24
212.26.36.0/24 maxlen: 25
212.26.37.0/24 maxlen: 25
212.26.38.0/24 maxlen: 25
212.26.39.0/24 maxlen: 25
212.26.40.0/24 maxlen: 24
212.26.41.0/24 maxlen: 24
212.26.42.0/24 maxlen: 24
212.26.43.0/24 maxlen: 24
212.26.44.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
212.26.46.0/23 maxlen: 24
212.26.48.0/24 maxlen: 24
212.26.50.0/23 maxlen: 24
212.26.52.0/24 maxlen: 24
212.26.53.0/24 maxlen: 24
212.26.54.0/24 maxlen: 24
212.26.56.0/24 maxlen: 24
212.26.58.0/24 maxlen: 24
212.26.60.0/24 maxlen: 24
212.26.63.0/24 maxlen: 24
212.26.64.0/24 maxlen: 24
212.26.65.0/24 maxlen: 24
212.26.68.0/23 maxlen: 24
212.26.71.0/24 maxlen: 24
212.26.72.0/24 maxlen: 25
212.26.74.0/24 maxlen: 25
212.26.78.0/24 maxlen: 24
212.138.0.0/16 maxlen: 16
212.138.41.0/24 maxlen: 25
212.138.42.0/24 maxlen: 25
212.138.43.0/24 maxlen: 24
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.70.0/24 maxlen: 24
212.138.71.0/24 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.80.0/23 maxlen: 23
212.138.82.0/24 maxlen: 24
212.138.83.0/24 maxlen: 24
212.138.84.0/23 maxlen: 24
212.138.86.0/24 maxlen: 24
212.138.88.0/24 maxlen: 25
212.138.92.0/24 maxlen: 24
212.138.94.0/24 maxlen: 24
212.138.96.0/21 maxlen: 24
212.138.97.0/24 maxlen: 24
212.138.98.0/23 maxlen: 23
212.138.104.0/24 maxlen: 24
212.138.108.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.121.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.126.0/24 maxlen: 25
212.138.127.0/24 maxlen: 25
212.138.128.0/24 maxlen: 24
212.138.130.0/24 maxlen: 24
212.138.132.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.140.0/24 maxlen: 24
212.138.147.0/24 maxlen: 24
212.138.150.0/24 maxlen: 24
212.138.153.0/24 maxlen: 24
212.138.155.0/24 maxlen: 25
212.138.157.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.162.0/24 maxlen: 24
212.138.164.0/24 maxlen: 25
212.138.166.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.170.0/24 maxlen: 25
212.138.172.0/24 maxlen: 24
212.138.175.0/24 maxlen: 25
212.138.176.0/24 maxlen: 24
212.138.177.0/24 maxlen: 24
212.138.180.0/24 maxlen: 24
212.138.181.0/24 maxlen: 25
212.138.183.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
212.138.187.0/24 maxlen: 24
212.138.188.0/24 maxlen: 25
212.138.190.0/24 maxlen: 24
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.202.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.138.206.0/24 maxlen: 24
212.138.207.0/24 maxlen: 24
212.138.250.0/24 maxlen: 24
2001:1490::/32 maxlen: 32
2001:1490::/48 maxlen: 48
2001:1490:1::/48 maxlen: 48
2001:1490:103::/48 maxlen: 48
2001:1490:106::/48 maxlen: 48
2001:1490:107::/48 maxlen: 48
2001:1490:110::/48 maxlen: 49
2001:1490:110:8000::/49 maxlen: 49
2001:1490:111::/48 maxlen: 48
2001:1490:112::/48 maxlen: 48
2001:1490:113::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Sep 2024 04:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:7e:88:be:0f:2e:d3:6e:dc:72:12:6d:19:53:84:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Aug 26 11:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78a63f9a614ff4f665edfb6a9466ada18755158e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:ab:a6:30:76:9a:d6:ae:e9:07:18:5e:15:
cb:35:cd:62:50:50:72:51:f5:64:b1:bb:cc:6d:36:
30:3e:57:71:1a:b7:30:86:01:62:d9:81:b7:a8:3e:
40:b3:92:03:cd:ab:07:ac:ba:13:de:0c:bb:05:0e:
60:d5:7d:82:03:82:99:60:15:7f:92:22:0e:5e:11:
f9:fb:77:6f:9b:88:36:64:46:46:e0:91:2a:87:2c:
a1:a3:32:d7:22:f6:f6:58:7f:71:db:3c:12:6b:0f:
eb:84:55:39:31:7d:be:c4:39:6d:54:48:62:e7:bf:
3e:16:a5:67:84:f2:c2:c5:59:58:cd:b1:c7:f6:d4:
76:99:f6:70:83:72:0d:84:40:87:45:4a:7a:25:13:
45:19:2f:20:07:c7:27:9e:96:de:4f:70:36:43:76:
e2:19:fb:25:e2:73:c3:ef:39:3d:f1:52:4d:16:b8:
65:51:6a:34:75:ff:fe:da:1c:e6:b7:da:ce:7d:db:
a5:10:17:07:e2:7d:b0:47:f9:8c:bb:e2:63:c3:f6:
a1:90:18:0b:33:7d:36:4e:a4:54:ba:c6:cf:df:e7:
4a:bb:c7:c0:67:f7:73:4e:2f:36:6d:da:48:71:e8:
18:71:a8:71:9b:5e:93:23:4e:03:7b:99:d7:1c:09:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A6:3F:9A:61:4F:F4:F6:65:ED:FB:6A:94:66:AD:A1:87:55:15:8E
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/eKY_mmFP9PZl7ftqlGatoYdVFY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.15.0/24
91.229.52.0/22
212.26.0.0/17
212.138.0.0/16
IPv6:
2001:1490::/32
Signature Algorithm: sha256WithRSAEncryption
4a:6f:ac:c4:18:ae:3a:81:95:16:3a:39:0c:3c:32:52:2e:2c:
a2:c8:5b:2c:c5:8f:24:62:09:e5:6e:24:68:94:9c:40:bd:8e:
ee:cb:9a:a3:dc:25:cb:08:85:d2:36:06:fe:53:4e:45:3b:40:
71:14:00:2b:58:4a:5b:d1:2a:7d:98:25:92:90:37:4e:5d:f8:
d8:10:b8:38:5a:d2:27:a8:54:ac:2a:42:c2:ac:44:db:61:90:
ed:56:3c:08:c0:ec:8c:51:c8:59:56:e3:c1:65:9a:82:f7:2e:
76:14:81:2f:d7:c6:1a:97:90:b7:29:43:ab:8c:c4:b5:be:20:
61:d8:da:67:1b:da:c5:80:01:3e:5e:29:dd:49:53:ab:fc:70:
32:c5:a1:56:03:c5:02:24:6c:5d:0a:78:4e:ca:5f:e4:d8:37:
9d:16:98:7a:0d:34:35:ae:c6:a5:a9:56:bf:5c:13:87:c2:00:
41:aa:0a:57:39:33:09:79:2c:78:bf:99:c4:26:ff:27:23:28:
af:eb:87:80:33:b1:2c:de:37:37:ab:e2:83:97:be:38:3f:6b:
6e:f5:09:68:47:e8:20:c0:77:12:9d:5d:5f:16:f4:91:3d:f2:
8c:78:a6:11:c6:a8:58:e5:97:6c:f7:67:cd:4d:07:b7:f6:56:
6c:03:7a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 06:07:45 2024 by rpki-client on console-fra.rpki-client.org