Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/SV5OoANGENisRi9no9r7YDQPhNI.roa
File: SV5OoANGENisRi9no9r7YDQPhNI.roa (raw, json)
Hash identifier: 8ABaDec/drsE6oFkLKAMUUk02n8+YN0oqbTWP2Jg3LA=
Subject key identifier: 49:5E:4E:A0:03:46:10:D8:AC:46:2F:67:A3:DA:FB:60:34:0F:84:D2
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01903745B98A815BAB2C1705C940308E1C65
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/SV5OoANGENisRi9no9r7YDQPhNI.roa
Signing time: Thu 20 Jun 2024 20:10:34 +0000
ROA not before: Thu 20 Jun 2024 20:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28964
IP address blocks: 77.105.8.0/24 maxlen: 24
77.105.39.0/24 maxlen: 24
79.175.66.0/24 maxlen: 24
79.175.85.0/24 maxlen: 24
79.175.120.0/24 maxlen: 24
81.18.51.0/24 maxlen: 24
81.18.56.0/24 maxlen: 24
81.18.57.0/24 maxlen: 24
81.18.58.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
93.186.65.0/24 maxlen: 24
93.186.77.0/24 maxlen: 24
109.121.48.0/24 maxlen: 24
109.121.49.0/24 maxlen: 24
109.121.53.0/24 maxlen: 24
178.219.2.0/24 maxlen: 24
178.253.212.0/24 maxlen: 24
178.253.216.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.218.0/24 maxlen: 24
178.253.220.0/23 maxlen: 23
178.253.235.0/24 maxlen: 24
178.253.238.0/24 maxlen: 24
178.253.245.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
188.255.179.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.192.0/23 maxlen: 23
188.255.195.0/24 maxlen: 24
188.255.196.0/22 maxlen: 22
188.255.207.0/24 maxlen: 24
188.255.217.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.230.0/23 maxlen: 23
188.255.253.0/24 maxlen: 24
212.69.2.0/24 maxlen: 24
212.69.3.0/24 maxlen: 24
212.69.4.0/24 maxlen: 24
212.69.5.0/24 maxlen: 24
212.69.19.0/24 maxlen: 24
212.69.21.0/24 maxlen: 24
212.69.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 14:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:37:45:b9:8a:81:5b:ab:2c:17:05:c9:40:30:8e:1c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 20 20:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=495e4ea0034610d8ac462f67a3dafb60340f84d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:d2:90:a1:1d:9a:99:20:ab:87:5e:80:e4:
10:b0:62:92:8d:81:37:6e:5a:cc:08:7d:70:d4:e3:
4b:06:b5:21:81:27:66:ed:21:6d:ea:6b:9b:4a:89:
5c:5f:16:81:ad:29:49:05:6d:69:73:06:1f:3f:d9:
66:23:1c:6f:b8:08:f0:cb:7b:6f:8d:d0:ce:d2:33:
38:c2:d0:85:80:19:c8:ea:3e:32:84:4e:99:66:5a:
c6:48:69:ac:b2:1e:ad:15:15:54:60:3d:50:00:1d:
3d:b3:db:81:44:6f:40:3c:f0:8e:a1:b4:f2:41:95:
84:63:27:b4:a5:49:fb:92:ae:4e:ca:b2:96:b9:9b:
6f:f5:06:da:e6:fc:5a:08:b8:13:6c:77:0e:6e:19:
fe:ef:17:3d:de:c8:9b:e1:3b:4f:18:e1:67:84:c9:
a6:b9:53:56:21:04:5e:85:7b:65:6b:04:3b:fb:11:
c2:90:4e:95:8c:32:e8:5f:30:9e:c5:bc:17:15:d9:
34:aa:0e:31:8d:f9:16:fd:ff:31:75:d7:b0:29:98:
fa:9e:da:f5:98:b3:da:3f:ae:c9:47:d7:f6:90:72:
17:16:1d:a3:d8:1d:f6:e5:df:e3:bb:a3:25:f3:e1:
11:c3:81:4f:a2:c6:ba:6a:29:04:df:4f:38:4f:a8:
29:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5E:4E:A0:03:46:10:D8:AC:46:2F:67:A3:DA:FB:60:34:0F:84:D2
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/SV5OoANGENisRi9no9r7YDQPhNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
77.105.39.0/24
79.175.66.0/24
79.175.85.0/24
79.175.120.0/24
81.18.51.0/24
81.18.56.0-81.18.58.255
81.18.63.0/24
93.186.65.0/24
93.186.77.0/24
109.121.48.0/23
109.121.53.0/24
178.219.2.0/24
178.253.212.0/24
178.253.216.0-178.253.218.255
178.253.220.0/23
178.253.235.0/24
178.253.238.0/24
178.253.245.0-178.253.246.255
188.255.179.0/24
188.255.190.0/24
188.255.192.0/23
188.255.195.0-188.255.199.255
188.255.207.0/24
188.255.217.0/24
188.255.228.0/24
188.255.230.0/23
188.255.253.0/24
212.69.2.0-212.69.5.255
212.69.19.0/24
212.69.21.0/24
212.69.30.0/24
Signature Algorithm: sha256WithRSAEncryption
94:69:4d:fb:c3:5d:bc:9a:6d:f4:75:db:3c:a4:61:5a:0d:d4:
67:59:b1:b5:c0:dd:40:ed:d3:b7:fe:5f:f9:19:64:5b:5f:7b:
2b:47:94:b8:df:5c:47:d5:98:17:cd:36:9b:92:a2:a4:11:4a:
34:f9:b6:1b:66:ef:f6:f3:c3:00:66:07:7d:bc:04:49:1a:24:
d8:c6:18:2c:f0:c8:35:d2:8a:f2:10:e0:05:8b:00:16:86:76:
55:69:3e:5e:0d:56:24:8b:05:94:b0:69:b3:a2:95:0f:ce:7e:
fa:36:42:af:69:54:d4:2b:b8:25:47:65:44:af:b6:90:df:ad:
3f:06:17:12:9e:bc:b2:94:b4:02:33:c8:aa:6b:b8:d1:ae:b5:
e4:1e:a4:38:92:1f:23:e7:fd:9c:dd:e6:91:2c:ca:8b:f6:0f:
d5:72:73:b0:22:d0:28:b8:c7:36:4f:70:a1:bf:2d:11:4d:55:
1a:47:1d:76:0f:75:57:4d:bd:c7:06:8a:60:41:3b:55:49:15:
44:85:07:59:04:c7:52:5d:1e:f6:6b:80:ac:73:b6:1d:4c:b2:
b5:76:69:cc:5d:0d:36:14:bc:a0:80:78:8b:a0:5d:25:3e:10:
6a:9a:01:0c:87:37:56:f7:1c:a8:69:21:3c:47:8f:c4:75:ae:
b9:00:4e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 18:00:47 2024 by rpki-client on console-fra.rpki-client.org