Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pbyl6ua6jLOzy3VRqax_eETAmdk.roa
File: Pbyl6ua6jLOzy3VRqax_eETAmdk.roa (raw, json)
Hash identifier: MJ2so18RzgTDTXhOJW+uaZUWTy+sgf58MA/6l0ae9DQ=
Subject key identifier: 3D:BC:A5:EA:E6:BA:8C:B3:B3:CB:75:51:A9:AC:7F:78:44:C0:99:D9
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01867AC5EE3E594E34145DBFC98CE1BCB356
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pbyl6ua6jLOzy3VRqax_eETAmdk.roa
Signing time: Wed 22 Feb 2023 20:17:17 +0000
ROA not before: Wed 22 Feb 2023 20:17:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52116
IP address blocks: 178.253.207.0/24 maxlen: 24
188.255.130.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
188.255.208.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.246.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
188.255.248.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.55.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.61.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
178.219.11.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
77.105.31.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
77.105.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 09:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:c5:ee:3e:59:4e:34:14:5d:bf:c9:8c:e1:bc:b3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 22 20:17:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dbca5eae6ba8cb3b3cb7551a9ac7f7844c099d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:40:b0:d2:04:8a:9b:70:96:eb:85:8b:89:a0:
57:99:f5:af:36:1a:5e:a3:31:6f:5f:2a:cc:2b:a9:
86:6c:5e:37:60:d1:5b:33:7d:7f:47:1f:12:f5:95:
03:47:f6:41:1a:8e:07:7e:2e:7c:2e:ab:31:c1:ff:
b4:d3:4c:91:e1:a1:ef:90:ea:d3:95:dd:44:98:6a:
e1:4e:05:8a:e7:41:36:05:af:ea:b7:0e:30:ef:31:
52:ca:40:34:b9:cf:11:d1:cc:80:56:84:46:32:bc:
cd:9d:a7:42:c7:fc:ba:9c:d4:b6:ce:3d:16:0a:3d:
ff:99:c8:30:fd:27:ef:f9:6d:72:eb:87:f3:28:2e:
97:ef:21:53:89:ba:21:45:68:a9:d5:04:58:e4:85:
78:e3:46:b4:27:1f:27:b9:ce:34:5d:1c:2b:7f:c3:
99:da:ec:c7:20:41:fd:f0:c7:1c:fe:e1:de:47:fd:
2e:00:47:ec:13:b8:d4:83:94:86:89:c2:99:da:09:
02:5c:78:25:3c:7a:e0:0d:5b:ef:4e:73:38:a4:54:
18:49:df:34:15:75:b5:93:0d:48:3e:7e:6d:55:c5:
ca:9d:07:52:50:6c:4d:93:19:fc:28:7e:09:ba:99:
fc:c2:1e:a9:e4:55:88:eb:c4:d0:e3:b8:fc:c1:af:
96:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BC:A5:EA:E6:BA:8C:B3:B3:CB:75:51:A9:AC:7F:78:44:C0:99:D9
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Pbyl6ua6jLOzy3VRqax_eETAmdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.11.0/24
77.105.31.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.255.130.0/24
188.255.190.0/24
188.255.208.0/24
188.255.213.0/24
188.255.219.0/24
188.255.238.0/24
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:39:93:f2:f9:a3:ac:9b:c0:b1:ec:74:04:d5:ce:68:89:06:
d6:99:bd:cb:46:b3:ae:05:44:41:cc:27:72:40:11:b5:64:18:
a1:cc:71:8a:75:80:ae:e3:fe:8c:90:7f:63:a3:91:26:ab:58:
e5:f2:37:93:22:56:92:67:97:ae:46:dc:7e:19:99:4b:47:fc:
de:21:66:c9:65:33:89:9e:cc:86:1e:0a:64:aa:7a:3e:43:e3:
4f:ce:32:05:82:32:49:92:65:ab:6f:b6:b4:7a:a8:43:c6:7e:
8d:a1:86:b8:32:bb:4a:4f:78:a1:ab:a8:2f:cc:90:87:43:f4:
4e:cc:fd:74:90:d5:c5:77:bb:3f:39:39:f9:51:e7:03:1e:31:
d4:78:aa:6b:16:3b:a2:b1:aa:74:f9:16:3c:77:90:ba:45:9d:
95:19:b3:22:ad:5a:f0:f3:59:3a:56:c3:c4:ae:94:12:07:3d:
dd:83:5a:b1:33:8a:87:8d:4a:6f:1f:9d:a8:36:a4:ff:71:cb:
43:9a:b9:03:29:f5:07:4a:f1:89:f1:fd:12:e5:e0:01:88:7a:
a0:2d:49:72:70:c5:61:54:da:f8:1a:9a:1d:57:75:fc:8e:d2:
8b:00:c3:e0:df:00:8c:02:d4:ab:15:06:77:68:ce:44:f0:ff:
e4:05:f9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org