Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/EPPKRlXpu1EmY4xZwsQwh3cKzGU.roa
File: EPPKRlXpu1EmY4xZwsQwh3cKzGU.roa (raw, json)
Hash identifier: cNMQSmlX2o/gKvFy3iEt9fMg7BlgQ4J9tBc5DxRlXAg=
Subject key identifier: 10:F3:CA:46:55:E9:BB:51:26:63:8C:59:C2:C4:30:87:77:0A:CC:65
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 01945F4BD010D0E3AE9F03DDCF56395791BB
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/EPPKRlXpu1EmY4xZwsQwh3cKzGU.roa
Signing time: Mon 13 Jan 2025 10:53:11 +0000
ROA not before: Mon 13 Jan 2025 10:53:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24940
IP address blocks: 5.9.0.0/16 maxlen: 24
5.75.128.0/17 maxlen: 24
5.161.0.0/16 maxlen: 24
23.88.0.0/17 maxlen: 24
37.27.0.0/16 maxlen: 24
46.4.0.0/16 maxlen: 24
46.62.128.0/17 maxlen: 24
49.12.0.0/16 maxlen: 24
49.13.0.0/16 maxlen: 24
65.21.0.0/16 maxlen: 24
65.108.0.0/16 maxlen: 24
65.109.0.0/16 maxlen: 24
78.46.0.0/15 maxlen: 24
85.10.192.0/18 maxlen: 24
88.99.0.0/16 maxlen: 24
88.198.0.0/16 maxlen: 24
91.98.0.0/16 maxlen: 24
91.107.128.0/17 maxlen: 24
94.130.0.0/16 maxlen: 24
95.216.0.0/16 maxlen: 24
95.217.0.0/16 maxlen: 24
116.202.0.0/16 maxlen: 24
116.203.0.0/16 maxlen: 24
128.140.0.0/17 maxlen: 24
135.181.0.0/16 maxlen: 24
138.199.128.0/17 maxlen: 24
142.132.128.0/17 maxlen: 24
157.90.0.0/16 maxlen: 24
157.180.0.0/17 maxlen: 24
159.69.0.0/16 maxlen: 24
162.55.0.0/16 maxlen: 24
167.233.0.0/16 maxlen: 24
167.235.0.0/16 maxlen: 24
168.119.0.0/16 maxlen: 24
176.9.0.0/16 maxlen: 24
178.63.0.0/16 maxlen: 24
185.12.64.0/22 maxlen: 24
188.34.128.0/17 maxlen: 24
188.40.0.0/16 maxlen: 24
188.245.0.0/16 maxlen: 24
195.201.0.0/16 maxlen: 24
213.133.96.0/19 maxlen: 24
213.239.192.0/18 maxlen: 24
2a01:4f8::/32 maxlen: 48
2a01:4f9::/32 maxlen: 48
2a01:4ff:ff01::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 13 Jan 2025 14:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:4b:d0:10:d0:e3:ae:9f:03:dd:cf:56:39:57:91:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Jan 13 10:53:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10f3ca4655e9bb5126638c59c2c43087770acc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:9c:74:81:ab:d3:1d:af:2c:a2:2d:e1:08:
53:b3:1f:d1:40:5e:21:54:42:d9:c9:b8:59:d6:8b:
f7:64:c8:76:73:e4:ca:03:6a:fb:06:c8:6d:2e:0d:
83:d8:6b:2f:2a:da:f1:31:1c:fe:de:b8:c3:db:d8:
13:ed:f3:51:fb:4f:69:d5:7f:f4:45:ad:3a:f7:d7:
96:af:12:dc:6d:88:74:b5:24:18:55:85:9e:03:f5:
0d:e1:87:dd:a4:0f:35:57:43:7d:22:8d:9b:56:b5:
26:34:1c:38:e4:69:ae:29:46:84:ff:0a:74:e4:70:
19:38:7f:66:15:fe:d7:09:17:52:7a:8f:0a:58:5a:
af:7b:23:47:c4:c3:1d:54:89:58:3f:d7:e9:5e:84:
01:c6:29:a6:9e:1b:a5:ee:c1:12:30:bf:8d:80:bf:
93:37:c8:bd:55:95:7e:59:13:a9:35:ee:99:10:3b:
7b:ee:ba:3c:19:ef:74:73:74:f7:dc:59:15:ee:df:
86:43:62:c2:af:50:86:bb:12:5a:47:12:70:d5:91:
f5:0f:b2:e0:bc:12:55:00:2d:74:20:57:29:42:f6:
01:7b:96:30:40:fe:e5:12:35:b7:c6:8e:4c:04:f6:
37:da:4b:d2:84:86:dd:92:be:ac:8c:5e:21:05:50:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F3:CA:46:55:E9:BB:51:26:63:8C:59:C2:C4:30:87:77:0A:CC:65
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/EPPKRlXpu1EmY4xZwsQwh3cKzGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.9.0.0/16
5.75.128.0/17
5.161.0.0/16
23.88.0.0/17
37.27.0.0/16
46.4.0.0/16
46.62.128.0/17
49.12.0.0/15
65.21.0.0/16
65.108.0.0/15
78.46.0.0/15
85.10.192.0/18
88.99.0.0/16
88.198.0.0/16
91.98.0.0/16
91.107.128.0/17
94.130.0.0/16
95.216.0.0/15
116.202.0.0/15
128.140.0.0/17
135.181.0.0/16
138.199.128.0/17
142.132.128.0/17
157.90.0.0/16
157.180.0.0/17
159.69.0.0/16
162.55.0.0/16
167.233.0.0/16
167.235.0.0/16
168.119.0.0/16
176.9.0.0/16
178.63.0.0/16
185.12.64.0/22
188.34.128.0/17
188.40.0.0/16
188.245.0.0/16
195.201.0.0/16
213.133.96.0/19
213.239.192.0/18
IPv6:
2a01:4f8::/31
2a01:4ff:ff01::/48
Signature Algorithm: sha256WithRSAEncryption
5d:08:0c:d4:88:91:c5:73:74:4c:d1:30:4c:d4:ca:d7:f4:a7:
c0:2f:1b:cb:f6:c1:b8:a9:f2:18:5e:32:fa:86:51:a3:50:dd:
7e:6a:3b:ff:11:6d:d4:ff:f3:78:19:90:d6:b6:21:c3:33:d8:
34:54:da:e7:77:fc:2e:b3:1d:c8:74:5d:6e:d1:f4:5d:60:e9:
94:64:49:1a:0b:64:26:4b:2d:3a:7b:a0:fb:a8:0a:13:c1:3a:
21:52:e0:d6:52:95:aa:04:23:26:ff:60:9f:58:ef:1d:70:bd:
02:00:f4:75:a8:10:b5:3f:d2:19:a7:34:9e:b1:97:be:32:a3:
1a:08:de:d9:1b:29:34:c5:5d:df:20:f5:6b:f5:c2:d0:60:6c:
d2:1b:86:b0:3e:44:a6:d3:d0:9f:b8:5f:42:60:65:29:49:06:
d6:18:03:a1:7d:61:4b:74:97:1a:c2:63:4d:b5:a4:f5:d3:d1:
d1:a7:0e:cd:cd:63:c2:e8:cb:f7:62:c3:2e:cc:a5:97:a5:a2:
01:c3:71:67:9d:f2:5c:45:a8:b4:be:fb:e2:38:cb:1f:b3:33:
b6:ed:ae:4a:71:03:e6:08:71:e5:b8:09:79:3b:a7:36:2e:5b:
37:43:af:09:84:d2:71:5a:72:c0:e3:b1:bf:d4:ab:01:e1:52:
4e:31:73:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:58:07 2025 by rpki-client