Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-_L7VcH8v4EL6VLBDHCOZe1cWWo.roa
File: 1-_L7VcH8v4EL6VLBDHCOZe1cWWo.roa (raw, json)
Hash identifier: DbE/S6Qcb1Bdgq5uuPduuRUr4JO4ucUEfEoTdm4/vlA=
Subject key identifier: FB:F2:FB:55:C1:FC:BF:81:0B:E9:52:C1:0C:70:8E:65:ED:5C:59:6A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01971E3EB336CFF5060E61C638DEB4479B29
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-_L7VcH8v4EL6VLBDHCOZe1cWWo.roa
Signing time: Thu 29 May 2025 22:51:54 +0000
ROA not before: Thu 29 May 2025 22:51:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52116
IP address blocks: 77.105.11.0/24 maxlen: 24
77.105.31.0/24 maxlen: 24
77.105.61.0/24 maxlen: 24
79.175.93.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.55.0/24 maxlen: 24
81.18.61.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
109.121.60.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
185.47.88.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
188.255.130.0/24 maxlen: 24
188.255.140.0/24 maxlen: 24
188.255.185.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.208.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.226.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.246.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 14:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1e:3e:b3:36:cf:f5:06:0e:61:c6:38:de:b4:47:9b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 29 22:51:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbf2fb55c1fcbf810be952c10c708e65ed5c596a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:a9:f3:4f:28:c0:c2:fb:1e:40:1d:7a:b2:
3e:a7:d5:a4:91:3b:86:fb:f5:4b:71:a6:f1:c0:c4:
b4:3f:6c:81:df:ca:58:63:46:2d:3f:94:f7:d9:cf:
a7:83:f9:6e:58:16:1d:41:05:77:44:16:34:2c:70:
38:b1:4c:d2:c5:3f:4d:24:4f:30:00:1d:15:a9:c9:
dc:88:d7:c5:be:03:f1:67:9f:0c:44:b2:80:c9:a7:
e4:5f:42:54:42:ed:24:7b:90:3e:30:17:ec:ef:28:
2f:d4:ed:84:38:0b:1c:09:69:73:51:9b:41:24:12:
37:3f:01:1f:23:9c:ee:3f:a4:c9:0b:77:dd:ef:1b:
6e:09:63:b2:4c:41:23:73:94:8e:cc:8f:e1:0a:5c:
46:20:ca:e1:84:37:b3:04:c6:cd:6c:bc:cf:04:93:
ab:03:0f:52:64:71:a1:53:66:82:09:b2:53:a3:62:
04:94:9a:4a:49:81:e9:13:d4:74:e8:2e:ec:c8:5f:
13:b5:57:a1:d9:e1:78:89:45:40:5e:48:de:52:8d:
1f:e3:0d:57:14:28:ee:b2:40:59:96:e9:39:d7:c3:
13:90:0c:81:77:f4:0e:bb:54:45:8a:fb:cf:b1:a8:
ff:68:72:2a:4c:fc:cd:0b:c4:4e:32:60:5a:5c:99:
16:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F2:FB:55:C1:FC:BF:81:0B:E9:52:C1:0C:70:8E:65:ED:5C:59:6A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-_L7VcH8v4EL6VLBDHCOZe1cWWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.11.0/24
77.105.31.0/24
77.105.61.0/24
79.175.93.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.121.60.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0/24
185.47.90.0/24
188.255.130.0/24
188.255.140.0/24
188.255.185.0/24
188.255.190.0/24
188.255.208.0/24
188.255.213.0/24
188.255.219.0/24
188.255.226.0/24
188.255.244.0/22
188.255.252.0/24
188.255.254.0/23
212.69.6.0/23
212.69.12.0/24
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
00:04:a6:e8:67:ea:cf:e6:90:c2:60:b1:be:3c:48:f2:cb:bf:
2f:fa:28:6c:aa:f6:41:29:7e:dd:c6:02:bd:55:0b:85:1c:f5:
85:b0:3b:77:23:cc:9a:28:a3:e5:77:f5:5e:41:26:35:a7:e4:
86:e3:31:32:d9:68:d5:e6:26:27:ac:25:39:d2:13:9e:f4:ac:
c5:d9:e4:60:ff:c7:d7:6d:1f:59:a0:da:13:d1:41:e1:57:97:
92:1b:76:31:77:c1:93:eb:9e:db:2c:e4:2e:0e:ba:cc:68:d1:
92:55:20:1a:1a:70:bf:8e:51:16:7f:a1:b8:28:9e:27:2d:80:
19:9f:c6:31:21:43:d3:57:2d:41:c2:1b:28:bf:e1:c8:f4:bd:
d8:78:16:ca:32:0a:51:fc:f3:bb:50:81:f3:34:47:88:ca:20:
ff:b5:4d:a5:de:c3:c4:97:d5:19:18:48:c8:96:86:be:a2:bc:
53:8c:52:a3:3b:01:c4:5b:50:43:7f:a3:80:27:2a:f5:58:cd:
6c:30:cf:eb:be:2c:55:1a:55:2d:e6:e4:1c:35:dc:e3:06:8c:
cf:84:16:03:8b:63:7d:ef:92:9d:d0:91:78:75:07:47:04:da:
65:d4:79:e3:39:e3:1c:51:e0:66:3e:76:b8:fa:b6:2e:0d:d6:
00:e7:37:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:57 2025 by rpki-client