Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/NarX3Y_0fxiygeGyrTtuYvyFP_c.roa
File: NarX3Y_0fxiygeGyrTtuYvyFP_c.roa (raw, json)
Hash identifier: dXELeU7FxTrSBwb30ZdbERJHcS40WEEkOmQKDjgQVuA=
Subject key identifier: 35:AA:D7:DD:8F:F4:7F:18:B2:81:E1:B2:AD:3B:6E:62:FC:85:3F:F7
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 018E38CE41E31C63C1BF42A0F95B77A75CD9
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/NarX3Y_0fxiygeGyrTtuYvyFP_c.roa
Signing time: Wed 13 Mar 2024 17:13:45 +0000
ROA not before: Wed 13 Mar 2024 17:13:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.0.0/20 maxlen: 21
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
77.120.52.0/22 maxlen: 23
77.120.60.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
77.120.192.0/21 maxlen: 22
77.120.200.0/21 maxlen: 22
77.120.208.0/21 maxlen: 22
77.120.211.0/24 maxlen: 24
77.120.216.0/22 maxlen: 23
77.120.220.0/22 maxlen: 23
77.120.224.0/20 maxlen: 21
77.120.240.0/20 maxlen: 21
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
77.121.8.0/22 maxlen: 23
77.121.12.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.17.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.27.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.64.0/21 maxlen: 22
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.96.0/20 maxlen: 21
77.121.112.0/20 maxlen: 21
77.121.128.0/20 maxlen: 21
77.121.144.0/20 maxlen: 21
77.121.160.0/19 maxlen: 20
77.121.192.0/19 maxlen: 20
77.121.192.0/20 maxlen: 21
77.121.208.0/21 maxlen: 22
77.121.216.0/21 maxlen: 22
77.121.224.0/19 maxlen: 20
77.122.0.0/16 maxlen: 17
77.122.0.0/17 maxlen: 18
77.122.128.0/17 maxlen: 18
77.123.0.0/18 maxlen: 19
77.123.32.0/19 maxlen: 20
77.123.64.0/19 maxlen: 20
77.123.96.0/21 maxlen: 22
77.123.104.0/21 maxlen: 22
77.123.112.0/21 maxlen: 22
77.123.120.0/21 maxlen: 22
77.123.128.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
77.123.160.0/19 maxlen: 20
77.244.32.0/20 maxlen: 21
82.144.192.0/19 maxlen: 20
95.69.128.0/20 maxlen: 21
95.69.144.0/21 maxlen: 22
95.69.152.0/22 maxlen: 23
95.69.156.0/22 maxlen: 23
95.69.160.0/19 maxlen: 20
95.69.192.0/20 maxlen: 21
95.69.208.0/20 maxlen: 24
95.69.224.0/21 maxlen: 22
95.69.232.0/24 maxlen: 24
95.69.240.0/21 maxlen: 22
95.69.252.0/24 maxlen: 24
95.69.253.0/24 maxlen: 24
95.69.254.0/24 maxlen: 24
95.69.255.0/24 maxlen: 24
109.201.224.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.226.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
109.201.228.0/22 maxlen: 23
109.201.232.0/22 maxlen: 23
109.201.236.0/23 maxlen: 24
109.201.238.0/23 maxlen: 24
109.201.240.0/20 maxlen: 21
141.170.224.0/23 maxlen: 24
141.170.226.0/23 maxlen: 24
141.170.226.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.228.0/24 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.236.0/24 maxlen: 24
141.170.237.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
141.170.239.0/24 maxlen: 24
141.170.240.0/22 maxlen: 23
141.170.244.0/22 maxlen: 23
141.170.248.0/21 maxlen: 22
141.170.248.0/23 maxlen: 24
141.170.250.0/23 maxlen: 24
188.230.0.0/21 maxlen: 22
188.230.0.0/22 maxlen: 23
188.230.4.0/23 maxlen: 24
188.230.7.0/24 maxlen: 24
188.230.8.0/21 maxlen: 22
188.230.16.0/21 maxlen: 22
188.230.24.0/23 maxlen: 24
188.230.26.0/23 maxlen: 24
188.230.28.0/22 maxlen: 23
188.230.32.0/21 maxlen: 22
188.230.40.0/21 maxlen: 22
188.230.48.0/21 maxlen: 22
188.230.56.0/21 maxlen: 22
188.230.64.0/21 maxlen: 22
188.230.71.0/24 maxlen: 24
188.230.72.0/24 maxlen: 24
188.230.73.0/24 maxlen: 24
188.230.74.0/23 maxlen: 24
188.230.76.0/24 maxlen: 24
188.230.77.0/24 maxlen: 24
188.230.78.0/23 maxlen: 24
188.230.80.0/21 maxlen: 22
188.230.88.0/22 maxlen: 23
188.230.92.0/23 maxlen: 24
188.230.94.0/24 maxlen: 24
188.230.95.0/24 maxlen: 24
188.230.96.0/23 maxlen: 24
188.230.98.0/24 maxlen: 24
188.230.99.0/24 maxlen: 24
188.230.100.0/24 maxlen: 24
188.230.102.0/24 maxlen: 24
188.230.103.0/24 maxlen: 24
188.230.104.0/24 maxlen: 24
188.230.105.0/24 maxlen: 24
188.230.106.0/24 maxlen: 24
188.230.107.0/24 maxlen: 24
188.230.108.0/24 maxlen: 24
188.230.109.0/24 maxlen: 24
188.230.111.0/24 maxlen: 24
188.230.112.0/24 maxlen: 24
188.230.113.0/24 maxlen: 24
188.230.115.0/24 maxlen: 24
188.230.116.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 20:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:ce:41:e3:1c:63:c1:bf:42:a0:f9:5b:77:a7:5c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Mar 13 17:13:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35aad7dd8ff47f18b281e1b2ad3b6e62fc853ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:da:53:52:f4:7c:62:29:0a:37:a5:5d:b0:5a:
6b:a0:e6:a7:05:02:16:e3:f3:d7:9a:78:4c:25:47:
db:8d:14:55:9a:2c:00:88:3f:5a:40:0c:43:f7:3c:
12:2f:be:ac:5c:39:d4:2e:d5:fe:89:f9:4f:04:46:
f1:e4:55:97:e9:92:bc:ac:cc:d3:73:d7:a3:b5:77:
02:2c:b5:10:d7:f0:e8:8a:72:4f:7f:ed:53:d7:83:
3c:0e:09:6b:5e:77:86:68:09:eb:3e:38:8e:0e:0c:
6e:2c:48:25:a1:98:6c:47:08:b4:85:f4:03:c7:41:
14:1e:98:b7:3d:3d:b4:82:4b:27:98:90:ee:27:eb:
eb:df:e3:e8:34:cc:52:3a:03:ae:7b:f0:3c:a6:fe:
24:b9:07:d0:a3:5f:d0:8c:ba:ff:92:32:fd:ac:30:
ac:72:45:ca:5c:cc:6e:31:8e:14:62:78:1a:fb:a1:
dd:b6:b8:ba:1c:42:07:90:c9:b1:f3:3e:c2:e1:91:
46:d9:49:3a:31:0c:aa:73:8c:55:9c:22:95:6d:d5:
d6:c5:a8:1c:2a:de:bf:96:90:25:04:fe:b9:f6:f8:
97:18:5c:ff:78:30:9c:0c:65:8b:1b:6e:de:43:61:
01:03:5f:a8:d9:6b:79:c9:50:71:c9:e8:21:fe:a6:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:D7:DD:8F:F4:7F:18:B2:81:E1:B2:AD:3B:6E:62:FC:85:3F:F7
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/NarX3Y_0fxiygeGyrTtuYvyFP_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.121.13.255
77.121.15.0-77.121.30.255
77.121.64.0-77.123.191.255
77.244.32.0/20
82.144.192.0/19
95.69.128.0-95.69.232.255
95.69.240.0/21
95.69.252.0/22
109.201.224.0/19
141.170.224.0/19
188.230.0.0-188.230.100.255
188.230.102.0-188.230.109.255
188.230.111.0-188.230.113.255
188.230.115.0-188.230.117.255
Signature Algorithm: sha256WithRSAEncryption
08:6f:bb:cc:92:6d:f9:31:20:68:dc:eb:fc:84:78:4b:d3:cd:
a9:e4:cd:01:04:67:5f:68:0b:f0:fd:dd:91:7d:92:56:7b:88:
20:e7:fb:1b:e4:1a:37:16:ca:7f:b8:06:c6:8b:d5:ee:db:96:
32:74:ec:92:c0:33:41:29:5e:2f:a2:cd:cf:11:44:1a:ed:9b:
80:9b:5a:4c:3c:88:01:ba:3a:a4:5f:1c:3e:e3:9a:ab:81:6e:
b2:a5:24:4a:41:a8:86:58:e0:9c:f0:77:bc:ab:2e:9e:9c:b0:
e4:4d:55:0e:b9:30:ea:a5:2b:fb:7e:b1:62:0d:cc:eb:65:95:
c1:80:0b:26:6d:4e:2c:2a:9c:1e:36:3e:1a:d0:4b:fa:ad:fa:
8d:f1:0d:f4:13:42:f9:b7:24:40:69:c9:a0:e4:d1:58:77:bc:
60:c4:62:06:ef:c1:c7:ed:ec:9e:96:ac:6f:62:07:1a:24:49:
3f:e4:bc:7a:b6:ca:51:91:26:0e:e6:68:67:1f:db:ab:d0:a2:
76:77:f5:c8:05:6e:8d:74:c3:dd:b7:2f:74:1b:d3:22:5a:86:
bb:83:e9:fa:1f:ba:dc:8c:b4:23:13:aa:5a:4f:7b:4b:6e:7e:
0e:7c:d8:f9:17:38:8b:bb:72:51:0f:8a:9c:e5:1e:e3:ff:64:
c4:78:da:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 01:47:13 2024 by rpki-client on console-ams.rpki-client.org