Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/TbDEBL3nAiY4h4s4AjW3i7oSn9g.roa
File: TbDEBL3nAiY4h4s4AjW3i7oSn9g.roa (raw, json)
Hash identifier: s6pAQbTQorpV/kKRnvCCBehPyfwmAh7CkwDVUH6zMiI=
Subject key identifier: 4D:B0:C4:04:BD:E7:02:26:38:87:8B:38:02:35:B7:8B:BA:12:9F:D8
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018CC56E0F9701E9FB60817DE83E0FBE7F88
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/TbDEBL3nAiY4h4s4AjW3i7oSn9g.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52116
IP address blocks: 188.255.130.0/24 maxlen: 24
188.255.140.0/24 maxlen: 24
188.255.208.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.246.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.248.0/24 maxlen: 24
188.255.252.0/24 maxlen: 24
109.121.60.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.185.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.55.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.61.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
178.219.11.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
185.47.89.0/24 maxlen: 24
185.47.88.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
77.105.31.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
77.105.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 12:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0f:97:01:e9:fb:60:81:7d:e8:3e:0f:be:7f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4db0c404bde7022638878b380235b78bba129fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:24:0f:2b:45:57:26:ef:58:12:87:6b:f4:
e8:fd:be:ba:ac:72:51:55:5f:fe:1d:1c:47:5f:92:
d7:a7:44:eb:00:27:cb:3d:28:af:b6:e7:11:e6:10:
c0:f7:fa:7b:75:a0:f8:3e:ea:b6:df:f9:92:3c:b7:
3a:bb:9f:d7:81:29:7c:67:ab:b7:14:ca:3c:42:27:
75:d0:0b:03:64:d3:88:c7:9b:79:99:81:a1:97:69:
87:06:72:53:c5:c5:ea:43:28:f6:eb:98:e7:0a:6b:
09:ac:c0:a8:a8:18:58:30:00:c2:0d:84:fb:4b:86:
9e:fb:c4:af:bc:61:5a:63:2f:89:a6:30:43:de:46:
01:ce:e2:df:16:53:21:79:63:26:0a:d5:98:d6:77:
44:f5:54:04:69:da:45:8e:eb:3a:98:a5:df:8f:23:
60:01:75:31:9b:23:bf:4d:d9:43:8a:d5:33:76:6d:
d1:3b:bd:2c:3b:34:09:db:b7:6a:b8:18:92:9e:ba:
98:89:a5:31:fa:0d:f5:96:c3:97:c5:2d:c5:ca:66:
49:14:61:2f:46:08:e4:aa:e5:44:10:4f:db:db:86:
77:4e:a9:60:1a:c5:14:4c:51:22:ba:7a:db:e4:33:
04:ed:96:1d:64:ff:b9:2b:99:1a:76:c1:df:cf:0e:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B0:C4:04:BD:E7:02:26:38:87:8B:38:02:35:B7:8B:BA:12:9F:D8
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/TbDEBL3nAiY4h4s4AjW3i7oSn9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.11.0/24
77.105.31.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.121.60.0/24
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.255.130.0/24
188.255.140.0/24
188.255.185.0/24
188.255.190.0/24
188.255.208.0/24
188.255.213.0/24
188.255.219.0/24
188.255.238.0/24
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c8:b7:94:c9:db:f0:94:9c:e3:42:90:91:47:ab:54:2f:5c:
e2:a2:33:37:79:76:6a:0f:fd:17:8d:45:96:13:36:8c:10:d1:
3a:de:62:77:2a:2f:ed:b6:f7:b5:a9:61:bb:da:31:0c:9b:45:
4a:5b:ff:75:a9:e2:d7:2b:90:97:d9:b5:ad:07:ab:c6:de:37:
6f:dd:01:c8:e8:c0:43:a4:ec:b9:b0:2d:04:97:dd:0d:b9:e7:
4c:d0:24:b5:ea:c0:3f:e9:44:2f:b0:45:a3:7b:40:4e:d1:7b:
74:e7:1b:85:c9:8b:d5:a7:0b:72:9e:40:e2:4a:14:de:a5:82:
fc:40:c3:b5:d2:d2:43:b2:af:0e:57:21:62:07:53:6c:d1:77:
2f:28:63:36:6f:ff:25:43:e8:f6:3d:88:6a:5b:42:fc:53:c6:
43:ad:84:e9:3b:61:90:09:b0:6b:a2:29:81:ce:92:30:7c:3b:
e9:57:1f:f5:f6:9e:50:37:c4:76:d6:e1:0d:c1:59:d9:46:07:
17:31:16:b7:3d:36:2c:af:4c:bd:e2:50:a7:1a:9e:dd:91:73:
82:c7:89:a4:60:20:5e:b5:95:ea:ec:9e:23:d5:e7:b7:bd:44:
95:c1:06:7d:1c:10:a1:b7:ac:43:14:4c:7c:5e:10:9e:60:59:
d2:e8:73:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 16:58:49 2024 by rpki-client on console-fra.rpki-client.org