Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/77p_62RJmOpi6mgwEZSccs5CFB4.roa
File: 77p_62RJmOpi6mgwEZSccs5CFB4.roa (raw, json)
Hash identifier: NMIOcac7+fjIYAtqBuNzNqpFPozowPwmCYC2g5CAr/8=
Subject key identifier: EF:BA:7F:EB:64:49:98:EA:62:EA:68:30:11:94:9C:72:CE:42:14:1E
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 018CC56E860942A350A27FD9D4890ED86795
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/77p_62RJmOpi6mgwEZSccs5CFB4.roa
Signing time: Mon 01 Jan 2024 14:30:03 +0000
ROA not before: Mon 01 Jan 2024 14:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13237
IP address blocks: 185.250.87.0/24 maxlen: 24
82.98.200.0/21 maxlen: 24
62.93.192.0/18 maxlen: 24
82.98.208.0/20 maxlen: 24
83.124.0.0/14 maxlen: 24
82.98.224.0/21 maxlen: 24
62.80.96.0/19 maxlen: 24
62.4.64.0/22 maxlen: 24
62.4.64.0/19 maxlen: 24
83.137.80.0/21 maxlen: 21
84.207.0.0/16 maxlen: 24
83.133.0.0/16 maxlen: 24
217.112.144.0/21 maxlen: 24
217.112.144.0/20 maxlen: 24
84.207.205.0/24 maxlen: 24
217.71.96.0/20 maxlen: 24
83.125.71.0/24 maxlen: 24
84.207.210.0/24 maxlen: 24
81.209.128.0/17 maxlen: 24
84.207.225.0/24 maxlen: 24
84.207.226.0/24 maxlen: 24
84.207.228.0/24 maxlen: 24
80.86.160.0/19 maxlen: 24
84.207.229.0/24 maxlen: 24
84.207.231.0/24 maxlen: 24
84.207.240.0/24 maxlen: 24
82.197.128.0/19 maxlen: 24
83.125.45.0/24 maxlen: 24
2001:4d40::/32 maxlen: 48
2001:1618::/29 maxlen: 48
2001:7f0::/32 maxlen: 48
2001:7f0:4020::/48 maxlen: 48
2a00:cc0::/29 maxlen: 48
2001:4d40::/29 maxlen: 48
2a00:fa0::/32 maxlen: 48
2a00:cc0::/32 maxlen: 48
2001:7f0::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 07 Jun 2024 08:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:86:09:42:a3:50:a2:7f:d9:d4:89:0e:d8:67:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 14:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efba7feb644998ea62ea683011949c72ce42141e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:cc:2d:a8:ee:ad:e8:20:08:58:9f:8c:cb:
d1:c7:fe:c4:b4:8b:41:e5:01:fa:23:6c:92:26:8b:
05:e1:66:30:a6:85:61:c4:2d:e5:ec:62:b2:a5:b7:
c7:77:10:51:1c:51:36:34:37:0e:2a:99:26:d3:c4:
29:04:99:97:7d:7a:e2:04:a8:fd:8d:84:92:3b:01:
a0:52:4f:10:de:21:01:00:ae:28:c9:e4:de:43:e1:
7e:ca:2e:4a:0c:99:4f:46:af:f3:05:2a:37:a0:29:
09:75:d5:a4:f8:df:67:d6:67:13:fa:45:d1:8e:3d:
fc:5b:13:96:7f:03:fa:d1:b5:d5:f8:bc:26:d4:d8:
a7:80:54:fc:d0:32:be:16:32:d3:3a:73:1c:44:94:
70:e9:1e:6c:75:31:ef:cd:5e:19:11:f4:d2:29:75:
96:70:27:00:d0:ed:11:0d:ef:cd:4a:c1:a3:9a:d6:
5d:26:1d:e0:2a:d3:5f:3b:a2:44:4a:08:9d:70:48:
49:ae:eb:b6:02:94:0d:12:8c:36:fc:3a:a5:05:85:
86:24:2d:ac:1e:7b:65:3f:47:0d:30:98:66:1e:e5:
95:fe:0d:ee:69:70:be:9d:c5:82:a1:f1:c1:cd:6c:
21:73:9a:21:38:9c:53:35:f7:db:19:f2:88:e3:c2:
56:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BA:7F:EB:64:49:98:EA:62:EA:68:30:11:94:9C:72:CE:42:14:1E
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/77p_62RJmOpi6mgwEZSccs5CFB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.64.0/19
62.80.96.0/19
62.93.192.0/18
80.86.160.0/19
81.209.128.0/17
82.98.200.0-82.98.231.255
82.197.128.0/19
83.124.0.0/14
83.133.0.0/16
83.137.80.0/21
84.207.0.0/16
185.250.87.0/24
217.71.96.0/20
217.112.144.0/20
IPv6:
2001:7f0::/29
2001:1618::/29
2001:4d40::/29
2a00:cc0::/29
2a00:fa0::/32
Signature Algorithm: sha256WithRSAEncryption
10:40:49:2f:1e:64:c7:5d:59:b0:78:af:88:1a:61:de:bb:4d:
ba:d0:99:fe:14:73:41:8c:80:cd:03:46:9a:fa:bc:6b:6e:04:
c0:8e:0e:7a:03:c1:aa:57:a2:f7:aa:41:93:58:4d:5b:1f:80:
b6:f6:b1:78:60:00:4a:f5:cc:56:26:71:53:37:61:68:af:eb:
25:f2:20:53:7f:86:5d:fb:94:92:43:9d:12:2f:f2:3f:05:12:
d5:f3:db:93:ce:d1:ad:59:f5:21:be:b6:83:b6:2d:1c:f9:1a:
66:df:71:d9:74:57:bd:4f:1c:b7:72:4e:8a:ce:5a:a4:1d:55:
fd:b4:db:33:fe:4a:41:6a:ac:25:5b:ff:99:60:f4:97:8e:99:
0b:bc:92:5f:17:76:db:00:7d:aa:21:af:10:74:f1:6d:50:f2:
a9:f4:88:92:8b:e7:04:34:bf:db:57:84:da:b0:03:93:5e:27:
a8:98:f9:70:c6:c3:50:2b:5d:01:b1:b2:50:44:e8:a9:a2:e5:
de:cb:ca:a8:ca:54:6e:f7:dd:c5:d2:b7:57:d6:e6:20:75:7f:
5b:c4:c7:b1:cc:29:82:46:9c:5d:3c:15:a4:98:0d:06:93:ec:
54:c3:58:77:c6:5e:5e:1c:3b:d6:0b:0d:83:cb:35:0c:b3:67:
8d:15:ae:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:48:33 2025 by rpki-client