Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/cGb5CzoqlI1pVScgeKtoAUAFFao.roa
File: cGb5CzoqlI1pVScgeKtoAUAFFao.roa (raw, json)
Hash identifier: 6MCRrjogctPUa7KE2gVkxfuwn/JRSZY/EfZTTb0QBKw=
Subject key identifier: 70:66:F9:0B:3A:2A:94:8D:69:55:27:20:78:AB:68:01:40:05:15:AA
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 019504129A5CE4F6EF58AC594D1001AF5C33
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/cGb5CzoqlI1pVScgeKtoAUAFFao.roa
Signing time: Fri 14 Feb 2025 10:48:02 +0000
ROA not before: Fri 14 Feb 2025 10:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.0.0/20 maxlen: 24
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
77.120.8.0/24 maxlen: 24
77.120.9.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
77.120.52.0/22 maxlen: 23
77.120.60.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
77.120.192.0/21 maxlen: 24
77.120.208.0/21 maxlen: 24
77.120.211.0/24 maxlen: 24
77.120.212.0/23 maxlen: 24
77.120.214.0/23 maxlen: 24
77.120.216.0/22 maxlen: 23
77.120.220.0/22 maxlen: 24
77.120.224.0/20 maxlen: 21
77.120.240.0/20 maxlen: 21
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
77.121.8.0/22 maxlen: 23
77.121.12.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.17.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.27.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.64.0/21 maxlen: 24
77.121.70.0/23 maxlen: 24
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.96.0/20 maxlen: 21
77.121.112.0/20 maxlen: 21
77.123.128.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
77.244.32.0/20 maxlen: 21
82.144.192.0/19 maxlen: 20
109.201.224.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.226.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
109.201.228.0/22 maxlen: 23
109.201.232.0/22 maxlen: 23
109.201.236.0/23 maxlen: 24
109.201.238.0/23 maxlen: 24
109.201.240.0/20 maxlen: 21
141.170.224.0/23 maxlen: 24
141.170.226.0/23 maxlen: 24
141.170.226.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.236.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
141.170.240.0/22 maxlen: 23
141.170.244.0/22 maxlen: 23
141.170.248.0/21 maxlen: 22
141.170.248.0/23 maxlen: 24
141.170.250.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 08:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:12:9a:5c:e4:f6:ef:58:ac:59:4d:10:01:af:5c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Feb 14 10:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7066f90b3a2a948d6955272078ab6801400515aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:a5:6a:8a:26:93:3b:d4:1f:26:de:b9:93:
16:fe:21:82:de:55:fa:e0:7c:a7:26:8f:e8:99:29:
1c:e4:0f:fd:4a:c5:c9:1b:3e:37:a3:82:d8:ed:4f:
c0:0d:3b:be:37:cb:62:7f:f1:5b:09:fc:14:e8:06:
0d:44:15:1e:43:43:64:b4:08:58:97:de:48:e4:d2:
38:9e:c1:4b:95:73:91:7f:6b:d0:af:a3:9e:f7:39:
8b:d7:c6:73:ee:56:74:bc:a1:9b:48:d1:d0:a3:76:
78:7e:58:21:8a:b0:f5:3e:36:13:86:37:df:5d:d8:
d7:6f:93:aa:e0:9f:44:32:f3:66:f3:ec:00:6d:72:
69:97:ff:9a:25:d7:cd:03:38:f2:78:56:98:39:41:
63:97:bb:c9:8c:93:41:d2:1c:15:ab:7b:02:b1:4b:
b2:10:d5:50:8f:82:bb:2a:50:d6:19:dd:18:ed:70:
da:79:b4:43:d6:4d:f3:5d:9f:af:8b:45:05:0e:ed:
ac:6b:c9:c1:eb:ea:b7:06:d1:c0:d7:b6:e4:3d:7a:
e0:f8:4a:c7:1a:31:9b:36:e4:6d:42:22:7d:e9:e2:
59:44:c7:88:9f:56:5e:43:eb:59:13:85:35:2e:14:
5d:fe:d3:c1:83:63:e4:a5:94:b7:d3:e4:34:c2:81:
f6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:F9:0B:3A:2A:94:8D:69:55:27:20:78:AB:68:01:40:05:15:AA
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/cGb5CzoqlI1pVScgeKtoAUAFFao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.120.199.255
77.120.208.0-77.121.13.255
77.121.15.0-77.121.30.255
77.121.64.0/18
77.123.128.0/19
77.244.32.0/20
82.144.192.0/19
109.201.224.0/19
141.170.224.0/22
141.170.229.0-141.170.236.255
141.170.238.0/24
141.170.240.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:ac:26:da:b4:95:88:16:3a:10:07:e6:08:a3:21:57:9f:87:
4e:6e:6d:c4:ec:b1:62:a5:e7:80:bc:cf:e5:26:fd:b7:e0:36:
3d:33:56:f5:79:38:c6:da:c6:b1:80:2a:66:6a:74:5f:79:3f:
dd:ee:15:9d:b9:19:06:e6:91:d2:fb:3c:a8:a3:07:8d:cc:d3:
62:2b:4a:1a:c7:1c:9c:94:85:ee:5a:84:6c:ae:d0:4f:bd:93:
3b:28:48:26:cf:f6:40:18:98:e3:ae:63:11:63:38:34:ae:36:
5a:12:d2:39:de:46:77:32:14:aa:77:8f:c9:b0:62:6f:a3:14:
67:c8:6f:f9:a9:b1:b0:e8:09:21:fb:49:07:02:b1:b2:1b:ae:
49:20:9a:1f:9c:b8:f2:7b:79:8f:d9:65:a6:44:95:ad:ab:06:
98:2c:28:81:3f:7f:4c:c9:1a:dc:71:90:bc:a5:e1:dd:36:40:
d6:b8:6a:16:59:60:fc:e3:62:25:ff:ac:2a:95:88:f7:80:0b:
2a:af:58:ff:5c:c0:e8:3b:bd:22:23:dd:d6:7c:df:84:2d:13:
b2:34:65:b5:8d:98:fd:63:ad:3f:46:af:01:d0:49:5f:a2:cc:
26:5a:3f:a5:18:cd:a5:ee:51:85:ee:93:ad:8b:09:cf:c7:1f:
7e:75:d4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:47:03 2025 by rpki-client