Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/qPV32T6hBTTJ3QeMDg7-2g07mao.roa
File: qPV32T6hBTTJ3QeMDg7-2g07mao.roa (raw, json)
Hash identifier: pQj73iXgoPgzGXAyYZt9y/hQdCkyNBmyLnRu8/67QFo=
Subject key identifier: A8:F5:77:D9:3E:A1:05:34:C9:DD:07:8C:0E:0E:FE:DA:0D:3B:99:AA
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01903A3774D3B787E6B497901C8E7F0BD851
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/qPV32T6hBTTJ3QeMDg7-2g07mao.roa
Signing time: Fri 21 Jun 2024 09:53:51 +0000
ROA not before: Fri 21 Jun 2024 09:53:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52116
IP address blocks: 77.105.6.0/24 maxlen: 24
77.105.11.0/24 maxlen: 24
77.105.31.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.55.0/24 maxlen: 24
81.18.61.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
109.121.60.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
178.219.11.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
188.255.130.0/24 maxlen: 24
188.255.140.0/24 maxlen: 24
188.255.185.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.208.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.246.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.248.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.252.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 10:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:37:74:d3:b7:87:e6:b4:97:90:1c:8e:7f:0b:d8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 21 09:53:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8f577d93ea10534c9dd078c0e0efeda0d3b99aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:26:85:3b:ea:a4:6b:45:c2:74:98:0f:50:
eb:97:1c:ed:91:13:16:d2:ac:bf:9c:0f:9f:d9:13:
f9:ca:00:87:62:86:6f:d4:78:bd:56:8a:79:60:1c:
cd:17:71:85:79:20:c5:da:07:90:19:e4:37:c3:69:
02:df:1a:14:88:51:f1:13:bf:3f:02:6d:2d:20:50:
43:48:44:fe:11:cb:d2:df:cb:07:e3:c8:33:4d:9a:
ae:61:b8:79:f8:28:10:c0:c6:1c:58:bf:1c:5c:56:
81:ec:30:46:f5:0c:b6:ef:89:d5:e9:e1:bc:3e:02:
c7:78:ca:bd:d9:63:38:b1:c9:b1:fa:c6:21:22:31:
af:ad:b9:0b:71:da:7d:1f:da:fa:70:6f:87:5a:59:
01:07:6c:0c:60:4c:7b:39:e1:2b:58:0f:27:30:7e:
04:87:72:97:12:90:34:20:f0:c3:cc:18:3e:b6:81:
91:a8:5c:36:46:30:11:c0:d5:54:6e:65:d0:ad:b7:
21:68:60:0b:39:1f:9e:f3:2d:b8:e8:f0:ee:6e:3e:
a9:7a:75:dc:9f:c6:b8:b6:eb:94:15:58:2e:dc:bd:
6e:ce:5a:d6:4d:62:8a:71:05:4a:5b:c6:ba:0a:74:
23:3d:39:34:42:c2:64:81:10:80:b2:11:1c:ba:4b:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F5:77:D9:3E:A1:05:34:C9:DD:07:8C:0E:0E:FE:DA:0D:3B:99:AA
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/qPV32T6hBTTJ3QeMDg7-2g07mao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.6.0/24
77.105.11.0/24
77.105.31.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.121.60.0/24
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.255.130.0/24
188.255.140.0/24
188.255.185.0/24
188.255.190.0/24
188.255.208.0/24
188.255.213.0/24
188.255.219.0/24
188.255.238.0/24
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:90:a1:b2:f0:62:ef:c4:0f:9f:e7:03:bf:f0:e5:59:79:18:
6a:9b:9b:ae:f7:36:c5:8b:a8:1a:5d:6d:6d:26:df:39:26:05:
65:72:3b:42:5d:0a:11:6c:46:07:84:00:eb:8f:96:08:c8:4d:
d8:42:8b:58:11:83:a1:e3:33:76:a3:c7:ab:9d:6d:32:13:91:
8d:80:43:d5:cc:91:fc:7c:12:78:c7:a1:f2:5c:d9:07:8c:25:
f4:99:78:01:0d:ab:83:46:cb:62:63:03:9c:97:79:65:ca:1d:
97:2c:9a:2a:d9:7a:57:d3:e3:85:b8:b1:6d:b5:9a:66:20:46:
4d:8c:93:d3:7d:ad:5d:4f:60:3e:36:c2:fc:d3:85:e8:81:a2:
45:91:2c:09:72:08:6a:af:22:dd:17:7f:a5:b9:a4:48:44:90:
96:65:58:92:9e:8c:f2:84:be:c3:9d:2f:b0:27:a7:4d:68:82:
f6:88:ca:c6:40:75:36:59:29:9c:ae:ba:03:6f:54:d0:7f:22:
00:dd:86:32:8e:f7:aa:f0:d8:1e:de:a4:a9:cc:2f:59:9b:b8:
c3:bf:ac:e9:e4:6b:a7:67:19:b3:b0:15:8f:9e:29:5d:34:b7:
46:5a:50:77:c5:d2:6e:1b:12:da:7c:9f:03:ea:33:86:da:5d:
3f:2b:3f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 13:10:43 2024 by rpki-client on console-ams.rpki-client.org