Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EACH4ZLGuX2ODlH39p3MXiJynwo.roa
File: EACH4ZLGuX2ODlH39p3MXiJynwo.roa (raw, json)
Hash identifier: d3WDnzpnqaVRrQfxl1MleoORkypqHwMZjpYM6vZioAI=
Subject key identifier: 10:00:87:E1:92:C6:B9:7D:8E:0E:51:F7:F6:9D:CC:5E:22:72:9F:0A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0195470C995F69801D29B33702F89FCEE455
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EACH4ZLGuX2ODlH39p3MXiJynwo.roa
Signing time: Thu 27 Feb 2025 10:56:02 +0000
ROA not before: Thu 27 Feb 2025 10:56:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201942
IP address blocks: 31.170.100.0/22 maxlen: 24
37.32.99.0/24 maxlen: 24
45.81.152.0/22 maxlen: 24
45.90.238.0/24 maxlen: 24
45.131.132.0/23 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
45.147.116.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
62.106.87.0/24 maxlen: 24
81.21.228.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
91.235.40.0/24 maxlen: 24
91.235.41.0/24 maxlen: 24
91.238.239.0/24 maxlen: 24
92.60.34.0/24 maxlen: 24
92.60.35.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
93.189.120.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
109.230.250.0/24 maxlen: 24
185.91.108.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.119.48.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
185.163.168.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
185.175.152.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
185.196.40.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.197.216.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.199.55.0/24 maxlen: 24
185.200.228.0/22 maxlen: 24
185.201.152.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
185.204.108.0/24 maxlen: 24
185.204.244.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.217.12.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.221.16.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.224.184.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.226.8.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
185.232.8.0/22 maxlen: 24
185.239.252.0/22 maxlen: 24
185.239.252.0/24 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.255.0/24 maxlen: 24
185.245.32.0/23 maxlen: 23
185.247.4.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
193.26.152.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
193.105.66.0/24 maxlen: 24
193.162.15.0/24 maxlen: 24
194.35.40.0/24 maxlen: 24
194.38.56.0/22 maxlen: 24
194.41.116.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
195.182.13.0/24 maxlen: 24
212.80.208.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
213.232.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 22:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:0c:99:5f:69:80:1d:29:b3:37:02:f8:9f:ce:e4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 27 10:56:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=100087e192c6b97d8e0e51f7f69dcc5e22729f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:06:e0:82:40:23:93:a1:24:76:1d:02:b1:
1b:87:d6:47:d5:7d:1b:d0:90:71:70:fe:25:f0:12:
d2:cb:21:0b:4b:fd:11:95:52:9e:3b:36:f2:bc:3d:
cb:af:98:0e:0a:86:c5:f5:c9:84:f3:8b:ac:75:2d:
a3:66:25:d6:69:05:da:ab:ec:01:5f:b3:8c:3b:0c:
c9:20:d6:54:42:94:bc:b2:6d:56:98:76:cd:05:7b:
df:e4:e9:9e:e9:6c:0b:b4:53:73:d7:35:84:c8:93:
28:51:f4:10:15:85:86:8a:2b:87:4d:64:ee:d4:15:
c8:0d:26:06:be:13:53:de:9b:9e:d1:ec:13:3a:3d:
3f:33:aa:81:b9:6f:ca:e2:18:84:13:08:dc:31:35:
71:03:b8:0e:09:85:6e:2e:08:88:a4:c2:32:e3:80:
bd:67:ef:c9:7a:48:2b:bf:61:08:60:74:4f:c4:ca:
c9:40:22:67:76:50:c7:32:be:f7:68:d8:77:0b:93:
75:27:f4:7b:ef:58:a4:e5:e7:b9:3a:eb:f3:bb:c1:
31:25:2c:ba:48:27:d0:64:40:46:b9:a5:a1:1b:92:
10:17:91:6e:b2:0c:6d:89:e3:a4:7c:e6:f5:5c:7d:
25:6e:1f:44:7b:50:4a:46:66:b5:d3:be:e5:ab:19:
92:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:00:87:E1:92:C6:B9:7D:8E:0E:51:F7:F6:9D:CC:5E:22:72:9F:0A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EACH4ZLGuX2ODlH39p3MXiJynwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
37.32.99.0/24
45.81.152.0/22
45.90.238.0/24
45.131.132.0/23
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
62.106.87.0/24
81.21.228.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
91.238.239.0/24
92.60.34.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.163.168.0/22
185.163.232.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.55.0/24
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.108.0/24
185.204.244.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.221.16.0/22
185.222.188.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/22
185.232.8.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
193.105.66.0/24
193.162.15.0/24
194.35.40.0/24
194.38.56.0/22
194.41.116.0/22
195.182.13.0/24
212.80.208.0/22
212.115.44.0/22
213.232.232.0/24
Signature Algorithm: sha256WithRSAEncryption
69:0d:73:51:c4:2d:fd:03:6b:42:75:c2:6c:9b:9d:19:13:4e:
5d:a1:e6:4f:12:63:21:5a:20:c3:51:45:95:cc:e4:58:40:5b:
87:f9:f5:d5:87:8b:b8:e5:ab:f6:a0:e8:a8:69:12:49:60:df:
a6:a6:53:ce:fb:c1:bf:ff:ad:29:e3:03:4a:67:74:b7:53:a7:
30:3b:33:88:ef:ca:39:0b:63:fe:62:77:41:c7:15:51:d6:30:
7e:49:25:55:e6:1f:b7:cc:09:7b:3d:7d:bf:c9:63:60:88:8c:
44:55:49:0b:75:83:3d:5e:f6:6b:a2:4a:c1:bb:1e:ef:38:85:
96:b4:a9:72:49:68:b3:3a:6f:e8:a2:1d:37:1f:b6:fb:6d:88:
e3:fa:8b:f9:64:cb:d9:0c:f4:62:00:6b:db:fc:ab:ac:a7:34:
f3:3b:42:f5:1e:56:99:b9:13:15:3b:35:bb:81:fd:2e:a3:51:
ec:da:72:b8:0b:de:30:d1:5a:54:33:17:21:cb:6c:f3:2f:eb:
b2:50:7e:c8:a5:74:1c:da:fe:65:c8:92:c8:f2:0c:8e:3e:43:
a7:60:13:47:45:18:9c:37:c4:58:3a:3d:b2:30:ad:41:f8:5a:
53:3e:72:21:26:9f:43:ad:68:df:da:a7:cc:d9:1e:da:3b:11:
8d:d6:28:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:29:40 2025 by rpki-client