Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jdLK-x3kgW44n_R-fO-GpodycLs.roa
File: jdLK-x3kgW44n_R-fO-GpodycLs.roa (raw, json)
Hash identifier: TwZhK+EHFDu+NdvLDcvdVV2YkvRkm8G1zQCJatslV1U=
Subject key identifier: 8D:D2:CA:FB:1D:E4:81:6E:38:9F:F4:7E:7C:EF:86:A6:87:72:70:BB
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0194B252E67EA97FDFC7C01C8D9EAF959E49
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jdLK-x3kgW44n_R-fO-GpodycLs.roa
Signing time: Wed 29 Jan 2025 13:49:24 +0000
ROA not before: Wed 29 Jan 2025 13:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52116
IP address blocks: 77.105.6.0/24 maxlen: 24
77.105.11.0/24 maxlen: 24
77.105.31.0/24 maxlen: 24
77.105.61.0/24 maxlen: 24
79.175.91.0/24 maxlen: 24
79.175.93.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.55.0/24 maxlen: 24
81.18.61.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
109.121.60.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
178.219.11.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
188.255.130.0/24 maxlen: 24
188.255.140.0/24 maxlen: 24
188.255.185.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.208.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.226.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.246.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.248.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.252.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 08:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:52:e6:7e:a9:7f:df:c7:c0:1c:8d:9e:af:95:9e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 29 13:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dd2cafb1de4816e389ff47e7cef86a6877270bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:0c:6a:f0:e2:e5:b4:ac:5f:23:4a:ec:a5:
b6:39:51:3f:7d:44:6f:43:8f:6f:04:60:1e:55:9f:
27:4a:aa:a1:5b:61:0e:87:c1:61:7b:1a:44:3d:54:
4f:08:62:4f:55:87:84:cd:df:45:a8:a1:07:0c:9c:
d0:28:94:02:63:ef:46:c1:29:d1:8d:90:94:38:60:
69:41:08:31:51:b1:b4:15:94:cc:e8:90:6d:ae:7e:
44:06:12:18:4d:33:8b:9b:ed:33:9a:c5:67:8d:e0:
92:8a:12:54:8f:ed:c4:67:38:37:26:a0:17:fa:3f:
5d:65:4a:4e:5c:be:a7:cd:0f:80:70:08:e5:c3:40:
e5:86:1b:3a:81:27:bd:05:ea:73:75:5d:e9:08:b7:
77:c0:46:e3:3b:39:6c:d9:f8:4d:01:07:e8:f3:fe:
26:b3:bc:0d:a3:76:e1:3f:6c:1c:da:cd:db:b0:a9:
44:2c:1a:d0:0d:f5:77:16:0b:69:33:c5:2c:b0:4a:
e8:0f:7b:f7:85:0b:cf:78:09:d3:73:5f:de:52:bc:
bf:9f:a8:1d:8e:92:57:33:4a:17:c3:c9:c1:8b:86:
e6:76:4f:c4:9c:4f:5a:f1:6a:f1:fe:b1:a9:93:d8:
07:ef:68:4d:8f:72:aa:58:b2:c3:e5:d6:09:28:a2:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D2:CA:FB:1D:E4:81:6E:38:9F:F4:7E:7C:EF:86:A6:87:72:70:BB
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jdLK-x3kgW44n_R-fO-GpodycLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.6.0/24
77.105.11.0/24
77.105.31.0/24
77.105.61.0/24
79.175.91.0/24
79.175.93.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.121.60.0/24
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.255.130.0/24
188.255.140.0/24
188.255.185.0/24
188.255.190.0/24
188.255.208.0/24
188.255.213.0/24
188.255.219.0/24
188.255.226.0/24
188.255.238.0/24
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/24
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c7:be:8e:b4:63:ea:9c:fa:8c:48:b4:ae:b8:3b:51:4c:c5:
bc:79:42:54:2b:c8:c7:f0:8e:7b:27:a1:3f:4c:03:82:47:71:
b7:a7:48:0e:d3:e8:93:3b:02:65:b4:7b:64:29:97:de:42:1a:
ac:16:36:ee:a2:a2:12:bc:be:85:38:f5:04:1f:52:84:9f:60:
99:07:f8:b8:73:a0:05:43:3e:ef:b9:ac:31:01:e7:a0:cd:b4:
fe:9b:4e:d0:c5:a7:c2:34:c3:dc:10:c6:ed:2d:63:86:c4:45:
dc:d4:eb:d6:05:c7:03:4a:9a:11:dc:08:8b:9b:62:44:1b:ba:
a4:a9:8b:57:ec:db:63:de:52:de:7d:49:6c:3d:38:df:04:0b:
c9:2a:0e:dd:db:ab:c3:81:24:41:da:9b:ca:06:3c:5d:3e:c2:
d7:cf:f4:6f:15:a2:e6:4f:6e:05:24:16:2a:a8:bd:f2:6e:e4:
4b:4a:88:ce:fd:a5:48:ae:7f:04:fb:ec:eb:f5:39:93:e2:6e:
b5:26:57:e9:d8:c3:fd:7f:a1:5e:57:1b:71:e0:ff:f3:27:08:
eb:6e:42:26:21:0f:4c:4e:75:eb:a3:96:14:15:7e:11:28:72:
5d:d0:74:75:ee:a4:12:2d:72:0c:11:16:b0:14:87:18:38:b5:
03:9e:02:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:57:18 2025 by rpki-client