Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/1-XUD4Z7xo35grdCtk4pDIVZfcfY.roa
File: 1-XUD4Z7xo35grdCtk4pDIVZfcfY.roa (raw, json)
Hash identifier: 2mHFSbCgaRYspVsB1CcPDw47a2FmddZT5UCEuq+1ZUM=
Subject key identifier: F9:75:03:E1:9E:F1:A3:7E:60:AD:D0:AD:93:8A:43:21:56:5F:71:F6
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 0190C01537AC3A36245251BCA9D90643499E
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/1-XUD4Z7xo35grdCtk4pDIVZfcfY.roa
Signing time: Wed 17 Jul 2024 09:45:34 +0000
ROA not before: Wed 17 Jul 2024 09:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.0.0/20 maxlen: 24
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
77.120.52.0/22 maxlen: 23
77.120.60.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
77.120.192.0/21 maxlen: 24
77.120.200.0/21 maxlen: 22
77.120.208.0/21 maxlen: 24
77.120.211.0/24 maxlen: 24
77.120.212.0/23 maxlen: 24
77.120.214.0/23 maxlen: 24
77.120.216.0/22 maxlen: 23
77.120.220.0/22 maxlen: 24
77.120.224.0/20 maxlen: 21
77.120.240.0/20 maxlen: 21
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
77.121.8.0/22 maxlen: 23
77.121.12.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.17.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.27.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.64.0/21 maxlen: 24
77.121.70.0/23 maxlen: 24
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.96.0/20 maxlen: 21
77.121.112.0/20 maxlen: 21
77.123.128.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
77.123.160.0/20 maxlen: 24
77.244.32.0/20 maxlen: 21
82.144.192.0/19 maxlen: 20
109.201.224.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.226.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
109.201.228.0/22 maxlen: 23
109.201.232.0/22 maxlen: 23
109.201.236.0/23 maxlen: 24
109.201.238.0/23 maxlen: 24
109.201.240.0/20 maxlen: 21
141.170.224.0/23 maxlen: 24
141.170.226.0/23 maxlen: 24
141.170.226.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.236.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
141.170.240.0/22 maxlen: 23
141.170.244.0/22 maxlen: 23
141.170.248.0/21 maxlen: 22
141.170.248.0/23 maxlen: 24
141.170.250.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 11:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:15:37:ac:3a:36:24:52:51:bc:a9:d9:06:43:49:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Jul 17 09:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f97503e19ef1a37e60add0ad938a4321565f71f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2b:3a:9d:4b:b1:b9:a9:3d:a4:61:79:0a:da:
0d:ba:c2:93:e1:b1:29:ad:61:39:ed:a9:6f:62:8c:
97:a8:9f:d8:9a:04:fd:48:ff:89:df:96:2b:81:14:
45:3e:83:87:f0:7e:ea:49:e6:86:7c:e3:b4:47:29:
2c:77:09:eb:a7:4a:e4:42:1d:46:7e:72:de:7a:87:
17:ff:15:64:25:c3:38:8e:38:16:28:5f:90:34:dd:
ab:db:ab:88:a4:f3:e0:d6:cc:34:be:c1:98:48:ad:
5d:d3:ba:64:d1:30:f9:1c:6f:0c:56:c1:7b:18:c1:
d2:7c:0c:a6:4c:99:af:8a:64:3e:a7:0a:7f:e1:69:
e4:11:3b:b0:5d:b6:fa:22:cd:88:c9:4c:14:f0:00:
bc:d8:f7:da:8b:87:8b:45:2d:2c:82:b7:35:36:7f:
6b:39:f8:25:23:1b:17:e4:14:83:10:1d:cf:0b:fd:
db:41:1a:b3:5a:2b:e7:ca:c6:a5:b2:d4:31:f9:84:
93:8a:55:d0:86:97:49:b4:53:82:96:0e:82:c6:b6:
b6:5f:5a:d6:e9:a3:5b:a9:39:8d:52:56:ca:99:94:
f5:85:7f:a2:26:c8:7e:3e:3e:0f:06:40:96:09:4d:
91:cc:f9:a5:9b:2c:50:b9:e6:52:08:aa:49:fd:03:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:75:03:E1:9E:F1:A3:7E:60:AD:D0:AD:93:8A:43:21:56:5F:71:F6
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/1-XUD4Z7xo35grdCtk4pDIVZfcfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.121.13.255
77.121.15.0-77.121.30.255
77.121.64.0/18
77.123.128.0-77.123.175.255
77.244.32.0/20
82.144.192.0/19
109.201.224.0/19
141.170.224.0/22
141.170.229.0-141.170.236.255
141.170.238.0/24
141.170.240.0/20
Signature Algorithm: sha256WithRSAEncryption
57:32:05:80:1b:0a:38:57:5a:0e:a6:07:b2:25:d2:47:00:04:
7f:b7:00:8f:68:a3:a3:2e:ca:b3:a9:11:b8:e5:89:3f:e5:89:
b0:4f:80:39:6f:24:55:55:73:d6:6e:22:8e:51:8f:63:f3:b2:
ac:bb:8e:fd:0e:aa:83:95:02:0b:a5:f2:d4:83:c9:27:2a:1e:
66:40:a9:1a:60:84:bb:3b:11:30:19:ca:da:fe:3b:cf:39:f0:
13:62:71:ec:e6:2b:3f:65:13:a1:bd:21:9d:67:bd:07:d3:32:
07:dc:97:1b:d3:95:c6:2c:99:b9:ba:77:00:c5:79:a1:e8:fe:
d0:f4:f5:f9:f9:1f:cd:a7:af:e0:bf:88:f9:d9:ea:f8:86:8a:
ef:1d:11:b3:68:de:83:16:f4:ce:85:ff:35:df:b8:2a:b2:ce:
b8:6f:e1:c0:bd:e6:df:47:49:68:4d:b7:92:b5:ad:98:ee:23:
23:20:fe:ae:4e:dd:f7:09:c1:26:e3:f7:68:11:4a:2e:ff:8b:
84:8f:65:83:c3:3a:c5:6c:06:7b:4e:0e:d4:74:89:c7:10:0b:
c3:7a:ee:e8:1b:67:d3:af:24:62:e8:2d:90:3d:b8:cf:ea:ba:
47:27:7e:7a:bf:f9:59:4a:f9:13:20:00:9e:2b:4e:41:bc:27:
a3:87:54:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:45:33 2025 by rpki-client