Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/eiSnhi2NuSk_JI6aSQoohr0l1k4.roa
File: eiSnhi2NuSk_JI6aSQoohr0l1k4.roa (raw, json)
Hash identifier: T79Xa8oEEThiQkz05cBYkgphfJKJSHEOZ0O+GWSFErs=
Subject key identifier: 7A:24:A7:86:2D:8D:B9:29:3F:24:8E:9A:49:0A:28:86:BD:25:D6:4E
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01951765330213BCB1C24057F9CDE2DDEDC5
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/eiSnhi2NuSk_JI6aSQoohr0l1k4.roa
Signing time: Tue 18 Feb 2025 04:51:02 +0000
ROA not before: Tue 18 Feb 2025 04:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25490
IP address blocks: 62.183.0.0/17 maxlen: 17
62.183.0.0/19 maxlen: 19
62.183.32.0/20 maxlen: 20
62.183.48.0/23 maxlen: 23
62.183.50.0/24 maxlen: 24
62.183.52.0/22 maxlen: 22
62.183.56.0/22 maxlen: 22
62.183.60.0/22 maxlen: 22
62.183.64.0/21 maxlen: 21
62.183.64.0/24 maxlen: 24
62.183.72.0/22 maxlen: 22
62.183.88.0/22 maxlen: 22
62.183.92.0/22 maxlen: 22
62.183.96.0/22 maxlen: 22
83.239.0.0/18 maxlen: 18
83.239.0.0/20 maxlen: 20
83.239.16.0/20 maxlen: 20
83.239.32.0/19 maxlen: 19
83.239.32.0/21 maxlen: 21
83.239.40.0/22 maxlen: 22
83.239.48.0/20 maxlen: 20
83.239.64.0/19 maxlen: 19
83.239.96.0/20 maxlen: 20
83.239.200.0/21 maxlen: 24
83.239.224.0/20 maxlen: 20
83.239.240.0/22 maxlen: 22
83.239.244.0/22 maxlen: 22
85.172.0.0/19 maxlen: 19
85.172.32.0/19 maxlen: 19
85.172.64.0/21 maxlen: 21
85.172.72.0/22 maxlen: 22
85.172.79.0/24 maxlen: 24
85.172.82.0/23 maxlen: 23
85.172.84.0/22 maxlen: 22
85.172.96.0/21 maxlen: 21
85.172.104.0/22 maxlen: 22
85.172.108.0/23 maxlen: 23
85.172.160.0/21 maxlen: 21
85.173.4.0/22 maxlen: 22
85.173.144.0/20 maxlen: 23
85.173.150.0/23 maxlen: 23
85.173.152.0/22 maxlen: 22
85.174.128.0/18 maxlen: 18
85.174.128.0/22 maxlen: 22
85.174.132.0/23 maxlen: 23
85.174.134.0/24 maxlen: 24
85.174.136.0/24 maxlen: 24
85.174.143.0/24 maxlen: 24
85.174.190.0/23 maxlen: 23
85.174.224.0/20 maxlen: 20
85.174.240.0/20 maxlen: 20
85.175.0.0/16 maxlen: 23
85.175.0.0/19 maxlen: 19
85.175.32.0/21 maxlen: 21
85.175.46.0/24 maxlen: 24
85.175.62.0/23 maxlen: 23
85.175.65.0/24 maxlen: 24
85.175.66.0/23 maxlen: 23
85.175.71.0/24 maxlen: 24
85.175.72.0/22 maxlen: 22
85.175.82.0/23 maxlen: 23
85.175.91.0/24 maxlen: 24
85.175.96.0/22 maxlen: 22
85.175.100.0/23 maxlen: 23
85.175.152.0/23 maxlen: 23
85.175.170.0/23 maxlen: 23
85.175.194.0/23 maxlen: 24
85.175.196.0/22 maxlen: 24
85.175.200.0/21 maxlen: 24
85.175.216.0/22 maxlen: 22
85.175.226.0/23 maxlen: 23
85.175.236.0/24 maxlen: 24
94.233.144.0/21 maxlen: 21
94.233.160.0/20 maxlen: 20
109.172.72.0/24 maxlen: 24
178.34.0.0/17 maxlen: 17
2a02:8040::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 20 Feb 2025 07:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:17:65:33:02:13:bc:b1:c2:40:57:f9:cd:e2:dd:ed:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Feb 18 04:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a24a7862d8db9293f248e9a490a2886bd25d64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:7d:61:29:6e:89:32:a1:c7:9b:48:15:c3:
c4:8c:c8:0f:74:7e:32:da:b0:5e:2a:ae:85:68:1f:
05:33:cf:10:dc:aa:a8:fc:5d:54:e3:a4:db:1c:68:
43:3f:8f:48:45:13:a2:bb:5f:c2:3a:4b:b9:5b:ac:
01:a3:94:f8:63:e2:4b:30:54:ec:c8:07:9b:9a:21:
92:cd:ef:09:d0:79:d6:77:1b:d8:95:6c:d0:d8:7b:
5c:11:a6:65:51:0a:28:e6:b6:d7:4b:a2:a4:cf:7b:
83:35:17:a7:5c:12:e5:cf:e7:58:89:d7:c1:a3:e5:
78:d4:51:c5:34:39:c5:b9:fa:df:90:c4:23:fb:62:
d5:5d:ec:27:c3:02:3d:ef:30:3d:ef:35:81:66:50:
13:60:eb:90:c8:7b:d8:98:34:eb:59:e1:8f:78:6f:
6d:c8:f7:04:14:dd:84:40:08:1d:48:2f:cd:9c:ea:
37:b8:cc:72:35:f1:6d:28:df:1c:8f:45:a1:97:ac:
4c:10:88:78:e3:92:6e:d4:4e:8a:29:f7:34:de:d1:
eb:11:16:c6:56:f8:d3:c3:1d:85:c6:84:ed:42:f9:
32:4b:ec:c8:5f:a0:c5:e7:ac:7d:39:d3:2a:74:d2:
66:75:c6:e0:c7:4a:9f:3d:fc:f7:88:9d:99:63:4b:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:24:A7:86:2D:8D:B9:29:3F:24:8E:9A:49:0A:28:86:BD:25:D6:4E
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/eiSnhi2NuSk_JI6aSQoohr0l1k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.183.0.0/17
83.239.0.0-83.239.111.255
83.239.200.0/21
83.239.224.0-83.239.247.255
85.172.0.0-85.172.75.255
85.172.79.0/24
85.172.82.0-85.172.87.255
85.172.96.0-85.172.109.255
85.172.160.0/21
85.173.4.0/22
85.173.144.0/20
85.174.128.0/18
85.174.224.0-85.175.255.255
94.233.144.0/21
94.233.160.0/20
109.172.72.0/24
178.34.0.0/17
IPv6:
2a02:8040::/32
Signature Algorithm: sha256WithRSAEncryption
31:8a:a2:af:f0:79:5d:61:dc:5a:fd:c6:8e:c1:ab:12:ba:4c:
74:cd:53:00:35:ca:1e:2a:4f:c5:a0:b5:a9:61:a7:36:52:7c:
e8:aa:5c:8f:7b:04:87:d1:92:24:38:4f:bf:de:10:dd:d4:58:
99:7c:c9:25:24:77:69:d5:45:cc:72:79:82:ed:07:b0:70:a8:
77:77:a6:11:0c:a4:19:00:75:d9:bf:ca:19:59:82:9a:d9:d9:
62:33:48:38:90:d3:4f:13:66:e9:41:60:75:c4:79:aa:49:7a:
03:d7:bc:33:b1:37:a5:bb:49:3a:ec:bc:ab:bd:bd:d0:cf:6b:
c9:26:3d:f6:c6:6c:e1:66:a6:ab:06:da:8f:e3:78:bd:2f:13:
79:4a:f7:53:d3:c9:f5:6d:8e:e7:b2:61:b0:83:ee:53:02:af:
47:96:3a:41:21:a6:32:9d:f1:42:c4:c9:f3:10:ff:87:94:be:
1a:8a:6c:44:39:37:3f:9a:8e:cc:e3:42:22:c4:ab:63:40:61:
54:cb:f1:35:69:86:0a:63:82:ef:67:a9:13:9f:62:aa:6e:70:
48:15:e5:21:9a:6e:c1:42:5c:86:95:c6:67:7e:82:83:ec:d2:
7b:43:74:6b:6b:0b:dc:2a:50:6b:4b:25:71:b9:d1:51:a1:ca:
b0:61:63:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:29:49 2025 by rpki-client