Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/EJN7FLqcUk0frJVJIDU140ZUW4E.roa
File: EJN7FLqcUk0frJVJIDU140ZUW4E.roa (raw, json)
Hash identifier: A48t8q+txKYT9HAZhLf+ETIXTc4Oub9pIYC51LEySsY=
Subject key identifier: 10:93:7B:14:BA:9C:52:4D:1F:AC:95:49:20:35:35:E3:46:54:5B:81
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 018809904498648B805A3B02C7B04A4BC5EA
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/EJN7FLqcUk0frJVJIDU140ZUW4E.roa
Signing time: Thu 11 May 2023 06:47:09 +0000
ROA not before: Thu 11 May 2023 06:47:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15967
IP address blocks: 77.55.208.0/20 maxlen: 20
77.55.224.0/20 maxlen: 20
77.55.240.0/22 maxlen: 22
77.55.246.0/24 maxlen: 24
77.55.248.0/22 maxlen: 22
77.55.252.0/23 maxlen: 23
77.55.247.0/24 maxlen: 24
77.55.152.0/22 maxlen: 22
77.55.159.0/24 maxlen: 24
77.55.158.0/24 maxlen: 24
77.55.156.0/23 maxlen: 23
77.55.155.0/24 maxlen: 24
77.55.166.0/24 maxlen: 24
77.55.160.0/23 maxlen: 23
77.55.160.0/20 maxlen: 20
77.55.164.0/23 maxlen: 23
77.55.162.0/23 maxlen: 23
77.55.172.0/23 maxlen: 23
77.55.167.0/24 maxlen: 24
77.55.170.0/23 maxlen: 23
77.55.168.0/23 maxlen: 23
77.55.174.0/23 maxlen: 23
77.55.178.0/24 maxlen: 24
77.55.177.0/24 maxlen: 24
77.55.176.0/23 maxlen: 23
77.55.176.0/24 maxlen: 24
77.55.176.0/21 maxlen: 21
77.55.179.0/24 maxlen: 24
77.55.186.0/23 maxlen: 23
77.55.181.0/24 maxlen: 24
77.55.180.0/23 maxlen: 23
77.55.184.0/23 maxlen: 23
77.55.182.0/23 maxlen: 23
77.55.192.0/20 maxlen: 20
77.55.188.0/23 maxlen: 23
77.55.190.0/23 maxlen: 23
77.55.0.0/18 maxlen: 18
77.55.0.0/16 maxlen: 16
31.172.170.0/23 maxlen: 23
31.172.169.0/24 maxlen: 24
31.172.168.0/24 maxlen: 24
31.172.168.0/22 maxlen: 22
77.55.96.0/22 maxlen: 22
77.55.104.0/23 maxlen: 23
77.55.100.0/22 maxlen: 22
77.55.112.0/23 maxlen: 23
77.55.108.0/22 maxlen: 22
77.55.106.0/23 maxlen: 23
77.55.118.0/23 maxlen: 23
77.55.116.0/23 maxlen: 23
77.55.114.0/23 maxlen: 23
77.55.122.0/23 maxlen: 23
77.55.121.0/24 maxlen: 24
77.55.120.0/24 maxlen: 24
77.55.125.0/24 maxlen: 24
77.55.124.0/24 maxlen: 24
77.55.126.0/24 maxlen: 24
77.55.128.0/20 maxlen: 20
77.55.127.0/24 maxlen: 24
77.55.144.0/21 maxlen: 21
77.55.64.0/22 maxlen: 22
77.55.68.0/22 maxlen: 22
77.55.76.0/23 maxlen: 23
77.55.78.0/23 maxlen: 23
77.55.72.0/22 maxlen: 22
77.55.84.0/22 maxlen: 22
77.55.88.0/22 maxlen: 22
85.128.160.0/19 maxlen: 19
85.128.192.0/18 maxlen: 18
85.128.130.0/24 maxlen: 24
85.128.129.0/24 maxlen: 24
85.128.128.0/24 maxlen: 24
85.128.128.0/17 maxlen: 17
85.128.132.0/23 maxlen: 23
85.128.131.0/24 maxlen: 24
85.128.136.0/22 maxlen: 22
85.128.135.0/24 maxlen: 24
85.128.134.0/24 maxlen: 24
85.128.144.0/20 maxlen: 20
85.128.143.0/24 maxlen: 24
85.128.142.0/24 maxlen: 24
85.128.140.0/23 maxlen: 23
2a01:6100::/32 maxlen: 32
2a01:6100::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 Jun 2023 11:57:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:09:90:44:98:64:8b:80:5a:3b:02:c7:b0:4a:4b:c5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: May 11 06:47:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10937b14ba9c524d1fac9549203535e346545b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a7:46:da:b6:0f:c4:b4:12:8e:4b:97:9e:44:
f9:ea:85:1f:c9:90:cb:9e:11:d9:d2:e5:fc:38:82:
71:da:71:e6:bc:59:dd:10:1c:c5:a0:10:c7:00:57:
7f:6f:2d:e6:e0:b4:47:6f:f1:4c:41:27:3b:a7:1a:
43:0c:a2:e3:0b:e0:ab:f2:b8:a4:eb:b4:ae:8c:0d:
54:be:dd:82:93:9f:0c:fb:c5:e7:a5:9d:ef:46:ca:
88:e7:d8:4f:3a:fb:a5:9e:7f:cd:83:4a:4a:77:d9:
3f:01:7d:6c:17:d9:57:ab:e6:00:02:3d:6d:e4:8d:
8e:62:cf:bf:17:4c:28:7e:f4:3c:8b:3d:c2:59:e7:
35:3f:d5:38:cd:19:12:6a:2b:c1:83:22:fe:f5:bb:
a9:a7:8a:48:c0:65:e8:cd:82:f4:96:95:60:a8:54:
65:2f:6b:ce:22:74:c4:98:32:c1:c8:3e:b3:75:55:
09:57:de:ff:9c:7e:a1:91:ba:34:49:e1:a0:1d:97:
6b:c9:df:2a:40:19:47:e8:bc:05:21:52:1e:be:c0:
7b:a4:28:0f:6f:11:f1:a7:30:4f:60:5a:65:45:c1:
b4:a1:06:4a:c4:b6:21:8d:ae:83:e7:f6:7f:1a:c0:
d6:46:99:e6:81:fc:fe:47:c6:ce:2a:e5:f6:11:79:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:93:7B:14:BA:9C:52:4D:1F:AC:95:49:20:35:35:E3:46:54:5B:81
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/EJN7FLqcUk0frJVJIDU140ZUW4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.168.0/22
77.55.0.0/16
85.128.128.0/17
IPv6:
2a01:6100::/32
Signature Algorithm: sha256WithRSAEncryption
2d:10:3d:fd:3b:d0:25:07:19:30:eb:07:ac:61:3a:1b:3f:85:
12:d6:00:b6:0b:89:2d:c4:a2:fd:7e:56:73:1d:94:b1:24:7f:
69:e3:d8:98:c1:3a:6d:20:2c:4a:01:d2:5b:05:b0:2a:81:b7:
44:68:80:1a:ef:ce:31:69:c2:e5:c4:66:ca:6e:55:69:33:08:
26:a1:8b:fc:8c:bd:97:bc:22:65:20:d6:82:82:62:67:a6:19:
52:d0:8b:d8:89:3d:ad:51:94:c8:d5:15:97:7b:09:ee:d8:e0:
2d:2c:96:09:59:b3:99:d7:42:12:3a:20:d7:ba:a8:2f:6a:af:
be:a3:63:be:44:88:4c:ec:af:ae:52:0b:15:f5:bd:a4:74:5b:
83:05:7e:c0:49:67:a8:11:7e:70:80:6d:52:53:49:9d:6b:16:
0a:8c:1e:73:57:07:3a:79:7c:5e:61:c4:e5:2e:68:56:8b:d7:
9d:e1:16:29:ca:46:c7:11:30:54:f0:af:62:08:2d:9b:86:b1:
58:3a:5c:22:69:03:f5:96:8d:de:fb:c8:76:37:a5:f7:09:14:
b5:0c:1d:96:8b:3b:db:5b:08:67:43:e2:3e:8a:32:6e:27:ed:
8a:4c:1f:60:df:ac:45:18:d9:d2:19:4d:a9:31:71:e9:6e:cd:
93:2b:df:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:10 2024 by rpki-client on console-ams.rpki-client.org