Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XUeC_RET_7ZqXHo7vQrkGQKbm0U.roa
File: XUeC_RET_7ZqXHo7vQrkGQKbm0U.roa (raw, json)
Hash identifier: gcEKypQrEP3KdXCoJFfqhttao0+rb7cvlLCXv6UdxnM=
Subject key identifier: 5D:47:82:FD:11:13:FF:B6:6A:5C:7A:3B:BD:0A:E4:19:02:9B:9B:45
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01953709C986A017F69055C1A4F24D328E7B
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XUeC_RET_7ZqXHo7vQrkGQKbm0U.roa
Signing time: Mon 24 Feb 2025 08:19:02 +0000
ROA not before: Mon 24 Feb 2025 08:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52116
IP address blocks: 77.105.6.0/24 maxlen: 24
77.105.11.0/24 maxlen: 24
77.105.31.0/24 maxlen: 24
77.105.51.0/24 maxlen: 24
77.105.61.0/24 maxlen: 24
79.175.91.0/24 maxlen: 24
79.175.93.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.55.0/24 maxlen: 24
81.18.61.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
109.121.60.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
178.219.11.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
188.255.130.0/24 maxlen: 24
188.255.140.0/24 maxlen: 24
188.255.185.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.208.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.226.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.246.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.248.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.252.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 16:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:09:c9:86:a0:17:f6:90:55:c1:a4:f2:4d:32:8e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 24 08:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d4782fd1113ffb66a5c7a3bbd0ae419029b9b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c9:cb:27:f8:4c:0d:eb:2d:6e:ef:75:4c:48:
8a:83:c0:51:4b:94:90:b4:39:68:c5:46:83:f5:ee:
c8:cc:4b:ac:eb:bd:6a:23:d1:f9:a9:c9:7c:cc:25:
b1:2e:fb:90:1d:bd:f3:f8:36:14:81:da:50:4f:75:
49:51:50:06:0a:66:52:e0:64:a5:6c:cc:23:b3:47:
3c:2a:97:11:b9:f7:5a:5c:34:de:24:fd:4d:2b:b5:
a1:7c:fd:0a:34:ca:93:f4:7d:be:9d:55:11:ce:c5:
f9:0a:d1:36:30:1d:70:d3:af:be:22:ab:4f:61:23:
06:0a:8e:5e:a2:ab:03:11:f3:8a:2a:02:52:6d:6e:
ae:82:ed:e5:d1:9c:2c:5b:1b:7c:80:f3:78:68:ef:
73:54:c6:29:7e:7e:2e:c7:b4:d8:01:8a:48:9e:11:
de:77:1e:c0:9d:07:10:9e:62:cf:10:cb:81:30:03:
44:8f:ba:a2:96:cf:26:4e:f2:94:9e:bc:f5:0f:0e:
3d:68:d9:d1:bd:b0:57:f0:d9:49:38:05:06:6d:a9:
b4:3f:4c:da:3e:6d:ce:0b:6b:61:ab:a7:ea:71:c1:
a3:3e:12:d3:82:4c:c1:1e:03:5f:bb:a1:d3:0e:ec:
a6:8c:db:85:ee:bc:88:2d:c1:46:ca:0c:43:86:fb:
70:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:47:82:FD:11:13:FF:B6:6A:5C:7A:3B:BD:0A:E4:19:02:9B:9B:45
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XUeC_RET_7ZqXHo7vQrkGQKbm0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.6.0/24
77.105.11.0/24
77.105.31.0/24
77.105.51.0/24
77.105.61.0/24
79.175.91.0/24
79.175.93.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.121.60.0/24
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.255.130.0/24
188.255.140.0/24
188.255.185.0/24
188.255.190.0/24
188.255.208.0/24
188.255.213.0/24
188.255.219.0/24
188.255.226.0/24
188.255.238.0/24
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/24
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
22:fc:39:99:0d:9d:a6:21:0d:0d:2a:b4:5e:b0:13:00:0a:2b:
c2:51:5f:b3:7f:6a:e2:4d:f8:2a:22:bc:a9:38:03:21:9c:5e:
70:8d:2d:b1:bd:48:84:eb:36:59:27:e4:2f:d6:01:54:26:ca:
e3:fc:be:cf:f9:a5:ee:7a:c0:e3:26:c5:d7:58:20:58:4b:a8:
b6:4d:2a:ae:76:a5:a3:1a:9e:a6:e5:84:cc:53:18:e0:52:aa:
df:9b:1a:d2:eb:97:69:1b:20:55:d8:c6:a1:51:3b:86:b7:f5:
2e:d8:64:02:70:51:da:f9:ab:57:21:09:60:79:25:42:3c:87:
76:17:9f:71:33:7d:9a:03:01:e9:23:0e:fe:c9:1e:ad:43:64:
06:26:11:77:87:38:b2:a3:7b:45:08:38:27:01:96:47:bd:e9:
14:07:f5:0a:8f:d3:dc:ed:0d:f6:76:df:e2:8b:7b:7a:82:a9:
e5:f3:92:e5:16:8e:16:f6:92:2b:41:f6:03:0f:3a:55:95:8a:
48:f5:e7:25:ca:ef:d0:b9:9a:0f:0a:46:9d:cd:a6:f7:20:9c:
17:f7:02:92:da:1c:8e:70:0d:55:b6:32:c6:07:48:51:55:73:
ce:13:6e:d1:dd:00:cd:36:46:4b:18:e8:b5:3c:c2:dc:e6:ce:
c7:82:f2:df
-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgISAZU3CcmGoBf2kFXBpPJNMo57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjUwMjI0MDgxOTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDQ3ODJmZDExMTNmZmI2NmE1YzdhM2JiZDBhZTQxOTAyOWI5YjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8nLJ/hMDestbu91TEiKg8BRS5SQ
tDloxUaD9e7IzEus671qI9H5qcl8zCWxLvuQHb3z+DYUgdpQT3VJUVAGCmZS4GSl
bMwjs0c8KpcRufdaXDTeJP1NK7WhfP0KNMqT9H2+nVURzsX5CtE2MB1w06++IqtP
YSMGCo5eoqsDEfOKKgJSbW6ugu3l0ZwsWxt8gPN4aO9zVMYpfn4ux7TYAYpInhHe
dx7AnQcQnmLPEMuBMANEj7qils8mTvKUnrz1Dw49aNnRvbBX8NlJOAUGbam0P0za
Pm3OC2thq6fqccGjPhLTgkzBHgNfu6HTDuymjNuF7ryILcFGygxDhvtwrQIDAQAB
o4IDTTCCA0kwHQYDVR0OBBYEFF1Hgv0RE/+2alx6O70K5BkCm5tFMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvWFVlQ19SRVRfN1pxWEhvN3ZRcmtHUUtibTBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBYQYIKwYBBQUHAQcBAf8EggFQMIIBTDCCAUgEAgABMIIB
QAMEAE1pBgMEAE1pCwMEAE1pHwMEAE1pMwMEAE1pPQMEAE+vWwMEAE+vXQMEAE+v
ZzAMAwQAT69zAwQAT690AwQAT692AwQAUEqtMAwDBABREjEDBABREjIDBAFREjQD
BABREjcDBABREj0DBABdukADBABdukMwDAMEAF26RwMEAF26SAMEAG15PAMEAbLb
CAMEALLbCwMEALL9zwMEALL90jAMAwQAsv3VAwQAsv3WAwQAsv3bAwQAsv3eAwQA
sv3sAwQAsv3wMAwDBAO5L1gDBAC5L1oDBAC8/4IDBAC8/4wDBAC8/7kDBAC8/74D
BAC8/9ADBAC8/9UDBAC8/9sDBAC8/+IDBAC8/+4wDAMEArz/9AMEALz/+DAMAwQB
vP/6AwQAvP/8AwQBvP/+AwQB1EUGAwQA1EUMAwQA1EUSMA0GCSqGSIb3DQEBCwUA
A4IBAQAi/DmZDZ2mIQ0NKrResBMACivCUV+zf2riTfgqIrypOAMhnF5wjS2xvUiE
6zZZJ+Qv1gFUJsrj/L7P+aXuesDjJsXXWCBYS6i2TSqudqWjGp6m5YTMUxjgUqrf
mxrS65dpGyBV2MahUTuGt/Uu2GQCcFHa+atXIQlgeSVCPId2F59xM32aAwHpIw7+
yR6tQ2QGJhF3hziyo3tFCDgnAZZHvekUB/UKj9Pc7Q32dt/ii3t6gqnl85LlFo4W
9pIrQfYDDzpVlYpI9eclyu/QuZoPCkadzab3IJwX9wKS2hyOcA1VtjLGB0hRVXPO
E27R3QDNNkZLGOi1PMLc5s7HgvLf
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:58 2025 by rpki-client