Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/jENJPfpUls9wUWOI7LKXyOcyCmc.roa
File: jENJPfpUls9wUWOI7LKXyOcyCmc.roa (raw, json)
Hash identifier: pHUDpaC+iCzX1fqEU+9iKwJluZFzrbfxPG2K+M/S2g4=
Subject key identifier: 8C:43:49:3D:FA:54:96:CF:70:51:63:88:EC:B2:97:C8:E7:32:0A:67
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 018CF8CF8CF10CA287D4E31878AA3B0290EA
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/jENJPfpUls9wUWOI7LKXyOcyCmc.roa
Signing time: Thu 11 Jan 2024 13:56:40 +0000
ROA not before: Thu 11 Jan 2024 13:56:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.192.0/21 maxlen: 22
77.120.200.0/21 maxlen: 22
77.120.208.0/21 maxlen: 22
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
109.201.232.0/22 maxlen: 23
77.121.17.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
109.201.228.0/22 maxlen: 23
77.121.13.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
77.121.12.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
109.201.238.0/23 maxlen: 24
77.121.21.0/24 maxlen: 24
109.201.236.0/23 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
109.201.240.0/20 maxlen: 21
77.121.26.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
77.121.64.0/21 maxlen: 22
77.120.216.0/22 maxlen: 23
77.120.224.0/20 maxlen: 21
77.120.220.0/22 maxlen: 23
77.120.240.0/20 maxlen: 21
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
109.201.226.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.224.0/24 maxlen: 24
77.121.8.0/22 maxlen: 23
77.120.52.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.60.0/22 maxlen: 23
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.4.0/24 maxlen: 24
77.120.0.0/20 maxlen: 21
77.120.6.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
95.69.232.0/24 maxlen: 24
141.170.244.0/22 maxlen: 23
141.170.250.0/23 maxlen: 24
141.170.248.0/23 maxlen: 24
141.170.248.0/21 maxlen: 22
95.69.240.0/21 maxlen: 22
95.69.253.0/24 maxlen: 24
95.69.252.0/24 maxlen: 24
95.69.255.0/24 maxlen: 24
95.69.254.0/24 maxlen: 24
82.144.192.0/19 maxlen: 20
77.123.64.0/19 maxlen: 20
77.123.0.0/18 maxlen: 19
77.123.32.0/19 maxlen: 20
77.123.160.0/19 maxlen: 20
95.69.192.0/20 maxlen: 21
141.170.226.0/23 maxlen: 24
141.170.226.0/24 maxlen: 24
141.170.224.0/23 maxlen: 24
95.69.208.0/20 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.228.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.236.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.240.0/22 maxlen: 23
141.170.239.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
141.170.237.0/24 maxlen: 24
95.69.224.0/21 maxlen: 22
77.123.96.0/21 maxlen: 22
77.123.104.0/21 maxlen: 22
95.69.128.0/20 maxlen: 21
95.69.144.0/21 maxlen: 22
77.123.112.0/21 maxlen: 22
95.69.152.0/22 maxlen: 23
77.123.120.0/21 maxlen: 22
77.123.128.0/19 maxlen: 20
95.69.156.0/22 maxlen: 23
95.69.160.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
188.230.28.0/22 maxlen: 23
188.230.26.0/23 maxlen: 24
188.230.32.0/21 maxlen: 22
188.230.40.0/21 maxlen: 22
188.230.48.0/21 maxlen: 22
188.230.56.0/21 maxlen: 22
188.230.64.0/21 maxlen: 22
188.230.71.0/24 maxlen: 24
188.230.78.0/23 maxlen: 24
188.230.77.0/24 maxlen: 24
77.122.128.0/17 maxlen: 18
188.230.76.0/24 maxlen: 24
188.230.74.0/23 maxlen: 24
188.230.73.0/24 maxlen: 24
188.230.72.0/24 maxlen: 24
188.230.0.0/21 maxlen: 22
188.230.0.0/22 maxlen: 23
188.230.4.0/23 maxlen: 24
188.230.8.0/21 maxlen: 22
188.230.7.0/24 maxlen: 24
188.230.16.0/21 maxlen: 22
188.230.24.0/23 maxlen: 24
77.244.32.0/20 maxlen: 21
188.230.80.0/21 maxlen: 22
188.230.88.0/22 maxlen: 23
188.230.98.0/24 maxlen: 24
188.230.96.0/23 maxlen: 24
188.230.95.0/24 maxlen: 24
188.230.94.0/24 maxlen: 24
188.230.92.0/23 maxlen: 24
188.230.105.0/24 maxlen: 24
188.230.104.0/24 maxlen: 24
188.230.103.0/24 maxlen: 24
188.230.102.0/24 maxlen: 24
188.230.100.0/24 maxlen: 24
188.230.99.0/24 maxlen: 24
188.230.112.0/24 maxlen: 24
188.230.111.0/24 maxlen: 24
188.230.109.0/24 maxlen: 24
188.230.108.0/24 maxlen: 24
188.230.107.0/24 maxlen: 24
188.230.106.0/24 maxlen: 24
188.230.116.0/23 maxlen: 24
188.230.115.0/24 maxlen: 24
188.230.113.0/24 maxlen: 24
77.121.128.0/20 maxlen: 21
77.121.144.0/20 maxlen: 21
77.121.160.0/19 maxlen: 20
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.112.0/20 maxlen: 21
77.122.0.0/17 maxlen: 18
77.122.0.0/16 maxlen: 17
77.121.192.0/20 maxlen: 21
77.121.192.0/19 maxlen: 20
77.121.208.0/21 maxlen: 22
77.121.216.0/21 maxlen: 22
77.121.224.0/19 maxlen: 20
Validation: Failed, certificate revoked on Wed 13 Mar 2024 17:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:cf:8c:f1:0c:a2:87:d4:e3:18:78:aa:3b:02:90:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Jan 11 13:56:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c43493dfa5496cf70516388ecb297c8e7320a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:90:94:a3:c8:99:7b:57:ba:ee:4f:a5:f9:a5:
ec:55:de:b9:34:72:65:39:18:8a:58:ab:d4:8d:19:
21:60:9e:88:46:a7:f8:07:92:ea:e7:9d:be:04:08:
51:6b:27:6f:0f:5c:c3:40:12:2a:c5:67:fd:1f:51:
1f:2e:29:fd:dd:1b:a6:c2:00:5f:a9:71:7a:16:2e:
cd:05:84:08:12:98:1a:cc:f9:c0:e4:28:e4:db:5d:
e9:21:35:b0:c3:22:53:8f:d8:9d:60:d9:a4:f8:40:
39:2f:4f:55:77:8d:d0:33:c7:da:0e:d2:d5:10:6e:
74:6c:28:67:63:2f:36:59:91:10:a2:8c:c6:25:02:
70:28:7c:5d:b9:c3:e5:d5:95:01:89:c5:c4:7c:75:
80:83:3c:ab:0a:f8:d9:38:bf:6d:ba:34:5d:68:b2:
e7:eb:09:37:f4:a8:f9:34:d4:b8:60:78:7b:34:78:
78:61:86:07:bf:eb:46:f0:e8:29:83:bd:74:e0:e4:
3e:84:ac:ee:ab:14:74:f4:89:47:60:a5:c0:9c:1d:
41:af:17:6e:be:d5:1b:7c:90:93:c1:86:64:3d:fc:
8c:c1:c9:91:f1:45:a2:3d:5f:3e:b8:a6:43:66:11:
0d:a2:0e:14:aa:67:09:6e:37:eb:3b:6b:33:01:fa:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:43:49:3D:FA:54:96:CF:70:51:63:88:EC:B2:97:C8:E7:32:0A:67
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/jENJPfpUls9wUWOI7LKXyOcyCmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.121.13.255
77.121.15.0-77.121.26.255
77.121.28.0-77.121.30.255
77.121.64.0-77.123.191.255
77.244.32.0/20
82.144.192.0/19
95.69.128.0-95.69.232.255
95.69.240.0/21
95.69.252.0/22
109.201.224.0/19
141.170.224.0/19
188.230.0.0-188.230.100.255
188.230.102.0-188.230.109.255
188.230.111.0-188.230.113.255
188.230.115.0-188.230.117.255
Signature Algorithm: sha256WithRSAEncryption
79:a7:f5:51:fa:e9:69:75:87:9e:94:38:09:e6:95:2d:42:f6:
90:89:c3:08:4c:24:a8:16:c9:15:c4:ac:0b:c4:60:22:8e:97:
82:b3:6b:85:c0:43:93:6c:87:48:cb:ea:d1:72:ca:8a:33:f0:
2f:55:8f:a8:a6:b8:94:ae:f9:52:61:f6:9a:4e:05:b0:c9:d0:
a9:d6:c5:dd:23:ae:ec:6e:6f:22:d1:95:06:f6:72:e8:56:ba:
d7:7b:bc:3a:05:d3:99:f3:5b:c1:8b:50:50:76:c0:c5:e4:25:
22:31:e4:f2:38:1b:e7:f8:a9:8f:f8:0a:63:50:d4:3f:4d:e2:
93:18:0a:fd:37:57:09:bc:9d:49:ae:7d:4c:ea:f6:f7:98:6f:
32:13:19:56:25:d8:a8:c8:d5:3c:f5:9a:f1:54:c1:db:21:bc:
f3:0a:a2:f6:57:b6:a2:96:9b:36:00:33:dc:b9:d1:79:c2:8c:
50:c0:74:c4:ea:a2:3a:68:fe:6f:1b:14:5e:ab:a1:fe:5c:ce:
c0:d8:d0:12:64:39:03:6a:54:e5:f5:c1:e5:75:87:36:45:d1:
79:4c:a9:ba:ab:0c:dc:c6:b0:f7:c5:80:6f:a5:fa:56:92:f7:
a0:8f:81:c5:7e:d3:b6:f1:91:a7:25:3b:4f:26:0c:af:1a:fd:
29:6a:44:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 22:33:06 2024 by rpki-client on console-ams.rpki-client.org