Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kKFgTFhIti6MTswvM88Da6P_Zyk.roa
File: kKFgTFhIti6MTswvM88Da6P_Zyk.roa (raw, json)
Hash identifier: 0+uoA5v4GUAbZASBcwF3iQmHWyW+Xe6LwhleU0xwwa8=
Subject key identifier: 90:A1:60:4C:58:48:B6:2E:8C:4E:CC:2F:33:CF:03:6B:A3:FF:67:29
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018CC56E0E44FA51DB61D0F60737C8A791EC
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kKFgTFhIti6MTswvM88Da6P_Zyk.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28964
IP address blocks: 178.253.212.0/24 maxlen: 24
178.253.218.0/24 maxlen: 24
178.253.216.0/24 maxlen: 24
178.253.217.0/24 maxlen: 24
178.253.220.0/23 maxlen: 23
93.186.65.0/24 maxlen: 24
93.186.77.0/24 maxlen: 24
188.255.207.0/24 maxlen: 24
188.255.217.0/24 maxlen: 24
188.255.228.0/24 maxlen: 24
188.255.230.0/23 maxlen: 23
109.121.48.0/24 maxlen: 24
109.121.49.0/24 maxlen: 24
212.69.3.0/24 maxlen: 24
212.69.2.0/24 maxlen: 24
109.121.53.0/24 maxlen: 24
109.121.55.0/24 maxlen: 24
212.69.4.0/24 maxlen: 24
188.255.253.0/24 maxlen: 24
212.69.5.0/24 maxlen: 24
178.253.232.0/24 maxlen: 24
178.253.238.0/24 maxlen: 24
178.253.245.0/24 maxlen: 24
109.233.188.0/24 maxlen: 24
178.253.246.0/24 maxlen: 24
178.253.244.0/24 maxlen: 24
81.18.51.0/24 maxlen: 24
81.18.57.0/24 maxlen: 24
188.255.179.0/24 maxlen: 24
81.18.58.0/24 maxlen: 24
81.18.56.0/24 maxlen: 24
81.18.63.0/24 maxlen: 24
188.255.192.0/23 maxlen: 23
188.255.190.0/24 maxlen: 24
188.255.196.0/22 maxlen: 22
188.255.195.0/24 maxlen: 24
79.175.120.0/24 maxlen: 24
212.69.21.0/24 maxlen: 24
212.69.19.0/24 maxlen: 24
178.219.2.0/24 maxlen: 24
212.69.30.0/24 maxlen: 24
178.219.15.0/24 maxlen: 24
79.175.66.0/24 maxlen: 24
79.175.85.0/24 maxlen: 24
77.105.39.0/24 maxlen: 24
77.105.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 20:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0e:44:fa:51:db:61:d0:f6:07:37:c8:a7:91:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90a1604c5848b62e8c4ecc2f33cf036ba3ff6729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:39:19:af:4b:b6:69:1a:04:51:5c:59:98:ed:
3e:15:e5:67:33:94:8a:fd:d5:66:23:96:84:17:2f:
2c:4d:c2:de:f7:dc:00:e9:55:81:1b:48:3e:f3:68:
18:d8:50:7e:fe:1e:9f:74:97:23:4d:d8:03:32:8e:
09:91:3d:df:ec:0c:b8:af:5e:15:c0:33:89:a3:55:
02:88:e4:18:5a:73:fe:3d:cd:1b:d0:7e:34:64:b9:
b1:b3:b1:78:38:5c:21:80:53:2c:66:95:5f:ba:7e:
e7:65:99:32:eb:48:a6:53:79:7e:2b:71:58:98:56:
cc:db:c8:dc:24:5c:f9:f2:b6:5c:be:f6:1e:2e:6c:
fc:0e:5b:d1:9e:0f:31:32:98:28:3e:3f:a7:3b:19:
7b:6b:9e:cf:22:93:99:74:63:b2:33:c1:b0:04:b6:
3f:78:84:3f:31:40:36:a7:1b:1e:74:a5:3f:bc:b5:
b2:8b:43:59:84:28:d8:33:a1:01:8f:8c:d6:7d:2c:
23:4b:1f:49:3c:9e:f4:85:a7:7e:f4:ad:22:43:ba:
e6:00:43:56:0a:4e:de:6a:1f:2d:ce:29:fb:cf:63:
3c:88:8e:7f:cd:63:8b:5e:5b:d6:43:d8:6b:2d:be:
65:bd:2f:de:0d:99:cb:97:6a:54:a9:95:e1:ce:e0:
4b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A1:60:4C:58:48:B6:2E:8C:4E:CC:2F:33:CF:03:6B:A3:FF:67:29
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/kKFgTFhIti6MTswvM88Da6P_Zyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
77.105.39.0/24
79.175.66.0/24
79.175.85.0/24
79.175.120.0/24
81.18.51.0/24
81.18.56.0-81.18.58.255
81.18.63.0/24
93.186.65.0/24
93.186.77.0/24
109.121.48.0/23
109.121.53.0/24
109.121.55.0/24
109.233.188.0/24
178.219.2.0/24
178.219.15.0/24
178.253.212.0/24
178.253.216.0-178.253.218.255
178.253.220.0/23
178.253.232.0/24
178.253.238.0/24
178.253.244.0-178.253.246.255
188.255.179.0/24
188.255.190.0/24
188.255.192.0/23
188.255.195.0-188.255.199.255
188.255.207.0/24
188.255.217.0/24
188.255.228.0/24
188.255.230.0/23
188.255.253.0/24
212.69.2.0-212.69.5.255
212.69.19.0/24
212.69.21.0/24
212.69.30.0/24
Signature Algorithm: sha256WithRSAEncryption
59:87:6c:e9:30:8c:47:f8:c7:87:ea:06:3d:40:c1:1c:e0:3d:
60:d0:7a:4a:f9:f5:d7:f6:21:2d:ec:7b:a2:d8:4e:4e:59:77:
c8:80:fd:f0:82:e3:ee:9c:f3:f9:42:94:fe:54:db:33:7d:25:
7b:d4:9f:4c:13:6e:16:4e:50:fd:4a:dc:6c:28:c2:8e:11:0c:
9e:f7:58:ca:39:71:ff:68:6b:f2:0b:ee:6e:f3:92:65:0a:88:
78:2e:b5:c0:dd:da:64:75:9a:a9:c5:fe:57:f1:d9:96:6c:88:
94:1c:7d:4d:dc:dd:73:14:03:8c:95:75:20:02:d6:8c:fe:6f:
d8:5c:b7:8a:aa:3e:cc:d4:68:f5:fb:a0:9e:85:4f:23:42:af:
92:2b:de:cf:cc:59:70:52:bb:9a:7e:6c:9a:a7:0c:67:e1:45:
fc:52:4b:74:3b:49:e4:6a:85:8a:ee:f2:83:2d:2f:6f:2b:74:
b5:2c:db:f8:d1:aa:cf:da:9e:ef:58:86:72:dc:43:bc:19:3e:
93:21:45:77:75:69:eb:1a:3d:45:b8:ff:7a:1b:ad:e2:5b:8b:
24:00:f4:ec:e1:df:5d:15:c4:65:17:b7:37:c8:ad:7b:71:27:
85:77:57:6a:3e:56:f1:9f:2d:f1:7f:31:be:30:9e:9d:41:6b:
85:25:04:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org