Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/EZKqsNz54cRlEVw49FvsVm03BC0.roa
File: EZKqsNz54cRlEVw49FvsVm03BC0.roa (raw, json)
Hash identifier: Jcm2KC0Rd1kIQlPLv6hWUkxbWaGaHRwfc54Dngd4ayw=
Subject key identifier: 11:92:AA:B0:DC:F9:E1:C4:65:11:5C:38:F4:5B:EC:56:6D:37:04:2D
Certificate issuer: /CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Certificate serial: 01953FD33B13EC8C41724AC30190771E31C5
Authority key identifier: 59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/EZKqsNz54cRlEVw49FvsVm03BC0.roa
Signing time: Wed 26 Feb 2025 01:16:02 +0000
ROA not before: Wed 26 Feb 2025 01:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9186
IP address blocks: 62.233.41.0/24 maxlen: 24
185.31.156.0/22 maxlen: 22
185.31.156.0/24 maxlen: 24
185.31.157.0/24 maxlen: 24
185.31.158.0/24 maxlen: 24
185.90.56.0/22 maxlen: 22
185.90.57.0/24 maxlen: 24
185.90.59.0/24 maxlen: 24
185.204.111.0/24 maxlen: 24
185.248.35.0/24 maxlen: 24
194.39.124.0/22 maxlen: 22
194.39.125.0/24 maxlen: 24
194.39.126.0/24 maxlen: 24
194.39.127.0/24 maxlen: 24
2a00:bc20::/32 maxlen: 32
2a05:df40::/29 maxlen: 29
2a10:7b40::/29 maxlen: 29
2a10:a4c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 26 Feb 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3f:d3:3b:13:ec:8c:41:72:4a:c3:01:90:77:1e:31:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Validity
Not Before: Feb 26 01:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1192aab0dcf9e1c465115c38f45bec566d37042d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:34:bd:3c:4a:16:06:97:15:f8:7d:dc:04:
0d:da:e4:c7:bb:56:5f:47:41:36:ea:ba:f8:01:7c:
14:9d:c3:d2:cb:cc:ca:de:1d:70:07:5c:e9:2b:58:
c0:98:b2:31:4d:ff:8a:27:d5:d1:55:f1:19:42:69:
83:a8:80:1d:b1:e8:ce:94:e0:8b:79:2c:19:9b:df:
db:f1:1a:12:12:2e:60:d4:20:59:92:92:ac:d9:60:
7a:6a:17:f5:aa:35:d4:fd:7b:4c:5e:b2:b5:94:50:
92:9f:89:31:57:a2:ed:db:4e:03:24:de:cf:03:7b:
7c:7e:1d:96:cb:72:ab:ee:2c:c3:43:c7:e0:7d:c0:
7f:26:04:0c:0a:8b:cc:08:4d:de:a9:e0:06:4e:ff:
78:46:e5:42:7f:e6:ba:e2:ad:f7:ab:da:ed:dd:d7:
a8:65:da:17:85:97:d5:3f:03:37:cb:b6:13:a5:1f:
00:79:e9:d1:1e:d1:05:89:a3:d6:d1:12:ef:00:c2:
dc:be:25:4d:15:20:84:fb:76:43:aa:7f:e7:77:77:
41:63:d7:7d:15:2b:49:59:c7:24:aa:67:1f:13:af:
e2:ae:d8:84:73:c6:f5:e0:0d:18:9c:e6:e1:a1:8b:
be:53:55:9a:30:f7:f7:a5:1a:5a:a4:ad:a4:a2:dc:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:92:AA:B0:DC:F9:E1:C4:65:11:5C:38:F4:5B:EC:56:6D:37:04:2D
X509v3 Authority Key Identifier:
keyid:59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/EZKqsNz54cRlEVw49FvsVm03BC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.41.0/24
185.31.156.0/22
185.90.56.0/22
185.204.111.0/24
185.248.35.0/24
194.39.124.0/22
IPv6:
2a00:bc20::/32
2a05:df40::/29
2a10:7b40::/29
2a10:a4c0::/29
Signature Algorithm: sha256WithRSAEncryption
c0:04:49:e3:d1:29:81:61:53:78:ef:24:e9:cc:4d:70:25:22:
20:f5:78:53:1f:c9:0e:a7:9f:4b:70:a8:49:be:0b:b3:ad:be:
6a:28:51:79:b1:93:79:b4:f4:cf:49:57:a2:df:fe:2c:82:a0:
a6:30:4e:b9:7b:46:d2:d6:d6:ea:c3:56:4a:f9:d4:2f:e3:f5:
38:c1:82:99:95:1e:8c:5d:a3:d4:5c:86:d7:db:9f:fe:80:62:
17:c3:eb:c2:44:49:0a:66:15:8b:f2:cd:0b:c5:da:45:4c:34:
19:8e:d6:fe:29:71:6d:36:18:8e:cc:5b:f2:8c:e2:23:1d:bf:
07:52:66:ed:b8:87:37:81:22:24:22:2a:30:48:37:5f:00:f3:
66:15:f8:6c:5c:f9:a1:97:13:16:da:35:95:e1:a7:99:e2:cc:
78:e5:54:6c:3e:b3:47:48:1a:74:3a:a5:09:e5:17:bb:04:ed:
55:f4:75:ea:82:93:97:2f:dd:ae:e4:9d:74:f3:96:e8:08:0e:
d6:4f:d4:f5:46:ba:c2:65:fd:d1:7c:24:39:45:a0:ae:68:ce:
63:9a:72:b6:cc:85:d4:36:b0:dd:27:ba:e0:3b:49:2f:31:44:
1a:83:16:8d:c1:41:2d:f3:2f:c3:3a:9e:1b:8a:4b:0b:7b:de:
6e:7a:3b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:51:36 2025 by rpki-client