Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/faeWoSf8lj_K75YywwsyC2e5zOk.roa
File: faeWoSf8lj_K75YywwsyC2e5zOk.roa (raw, json)
Hash identifier: AH+yq3GB0SA9PNSBUaqFbBKx3cgmBiLoJucJNZBDX1w=
Subject key identifier: 7D:A7:96:A1:27:FC:96:3F:CA:EF:96:32:C3:0B:32:0B:67:B9:CC:E9
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 0194252163666FAFEEC5CAD27BCBD373E77D
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/faeWoSf8lj_K75YywwsyC2e5zOk.roa
Signing time: Thu 02 Jan 2025 03:48:52 +0000
ROA not before: Thu 02 Jan 2025 03:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.0.0/20 maxlen: 24
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
77.120.52.0/22 maxlen: 23
77.120.60.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
77.120.192.0/21 maxlen: 24
77.120.208.0/21 maxlen: 24
77.120.211.0/24 maxlen: 24
77.120.212.0/23 maxlen: 24
77.120.214.0/23 maxlen: 24
77.120.216.0/22 maxlen: 23
77.120.220.0/22 maxlen: 24
77.120.224.0/20 maxlen: 21
77.120.240.0/20 maxlen: 21
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
77.121.8.0/22 maxlen: 23
77.121.12.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.17.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.27.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.64.0/21 maxlen: 24
77.121.70.0/23 maxlen: 24
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.96.0/20 maxlen: 21
77.121.112.0/20 maxlen: 21
77.123.128.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
77.244.32.0/20 maxlen: 21
82.144.192.0/19 maxlen: 20
109.201.224.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.226.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
109.201.228.0/22 maxlen: 23
109.201.232.0/22 maxlen: 23
109.201.236.0/23 maxlen: 24
109.201.238.0/23 maxlen: 24
109.201.240.0/20 maxlen: 21
141.170.224.0/23 maxlen: 24
141.170.226.0/23 maxlen: 24
141.170.226.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.236.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
141.170.240.0/22 maxlen: 23
141.170.244.0/22 maxlen: 23
141.170.248.0/21 maxlen: 22
141.170.248.0/23 maxlen: 24
141.170.250.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 10:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:63:66:6f:af:ee:c5:ca:d2:7b:cb:d3:73:e7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Jan 2 03:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7da796a127fc963fcaef9632c30b320b67b9cce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:da:9d:3e:ef:c1:e6:f1:ee:e0:51:eb:da:
15:7e:1f:7c:69:23:ea:48:04:50:fd:fd:e7:39:85:
70:96:29:0e:a4:3a:fb:52:4e:94:e1:23:08:71:99:
ce:0c:6c:ca:66:10:f5:2a:80:71:35:0d:3d:ee:5d:
51:b8:bd:1a:b0:88:fc:8d:eb:4a:9a:0b:ad:5e:34:
be:28:e6:d7:08:73:79:04:46:69:84:4b:fe:59:2f:
d6:3b:d2:c6:58:82:f8:a8:d0:5e:57:52:53:bf:c5:
b9:fe:e8:a4:c4:2c:92:de:1a:4b:5c:df:6c:38:ef:
d0:38:9e:8b:61:2e:df:9f:0e:5b:e1:0e:b0:7d:3a:
64:79:fc:55:e9:fc:07:4e:bc:83:5d:40:17:b0:5f:
54:c8:ad:ae:e2:3c:dc:bf:9a:1c:24:22:4c:cf:6b:
ac:2f:58:93:81:e4:f1:36:91:82:1a:df:28:1b:0b:
f5:45:0f:e4:37:98:f5:a4:56:1b:75:8c:00:53:3c:
48:cb:51:d4:b7:4f:11:6b:49:e1:86:a1:cb:9d:5b:
c3:b0:88:12:49:eb:aa:91:ac:80:49:47:16:92:7e:
3e:90:4b:84:2e:32:f0:b8:74:2f:e9:5e:2f:76:a0:
56:7f:ba:c1:a5:d4:dd:79:78:cd:7e:cf:4b:3e:a7:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A7:96:A1:27:FC:96:3F:CA:EF:96:32:C3:0B:32:0B:67:B9:CC:E9
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/faeWoSf8lj_K75YywwsyC2e5zOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.120.199.255
77.120.208.0-77.121.13.255
77.121.15.0-77.121.30.255
77.121.64.0/18
77.123.128.0/19
77.244.32.0/20
82.144.192.0/19
109.201.224.0/19
141.170.224.0/22
141.170.229.0-141.170.236.255
141.170.238.0/24
141.170.240.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:30:03:25:2b:ed:06:9f:29:66:bb:1a:fc:05:25:78:70:52:
a1:22:b2:37:72:51:d4:d9:23:50:24:dc:71:98:41:a2:41:02:
0b:f4:2c:f2:cc:8d:30:0b:af:42:ae:c5:a1:c9:02:2a:ef:9f:
af:21:54:2a:f9:c1:f5:b4:c1:1e:ae:f5:5f:9b:e0:d1:31:ee:
4d:69:c7:62:a0:01:1e:b3:18:0d:4e:c8:97:73:2e:f1:34:f0:
9c:e8:34:99:38:ea:55:df:43:c3:0b:fc:f8:a1:90:d8:f4:8e:
f6:be:0d:23:d7:9c:9a:a5:69:15:44:66:d6:14:06:da:2a:a1:
90:2d:40:8d:64:78:93:e9:8b:be:fa:ad:b8:e8:a8:b8:c2:02:
08:60:d4:c4:4c:3b:a4:8f:f0:5e:e3:b7:60:27:2f:c2:d5:7e:
3b:fb:55:88:c6:d6:eb:5b:2b:34:8f:44:14:66:82:83:4f:99:
56:96:5a:04:f1:71:71:d6:2d:04:c1:a9:46:1d:e9:6b:44:c8:
4b:45:07:85:45:ff:a3:48:92:6c:f5:40:5a:83:60:af:d6:85:
7d:1c:d3:55:9d:61:fc:02:63:c1:40:27:70:0c:cc:b2:1e:75:
4c:e5:ce:92:9d:6b:c8:65:ec:bd:41:86:60:b9:be:b6:a5:19:
74:b7:40:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:45:33 2025 by rpki-client