Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/yrrcPgK83U-iJ_3TNRuEt3kxtWE.roa
File: yrrcPgK83U-iJ_3TNRuEt3kxtWE.roa (raw, json)
Hash identifier: 0RWf5H4Yz5+fT49DlbAjaJ5kUGRilFasxmXnW/zuiU8=
Subject key identifier: CA:BA:DC:3E:02:BC:DD:4F:A2:27:FD:D3:35:1B:84:B7:79:31:B5:61
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 0190BBE767D479CF6589AA52788D5B8CD040
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/yrrcPgK83U-iJ_3TNRuEt3kxtWE.roa
Signing time: Tue 16 Jul 2024 14:17:03 +0000
ROA not before: Tue 16 Jul 2024 14:17:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25229
IP address blocks: 77.120.0.0/20 maxlen: 24
77.120.4.0/24 maxlen: 24
77.120.6.0/24 maxlen: 24
77.120.16.0/20 maxlen: 21
77.120.32.0/20 maxlen: 21
77.120.52.0/22 maxlen: 23
77.120.60.0/22 maxlen: 23
77.120.64.0/21 maxlen: 22
77.120.72.0/21 maxlen: 22
77.120.80.0/20 maxlen: 21
77.120.96.0/19 maxlen: 20
77.120.112.0/22 maxlen: 22
77.120.128.0/18 maxlen: 24
77.120.192.0/21 maxlen: 24
77.120.200.0/21 maxlen: 22
77.120.208.0/21 maxlen: 24
77.120.211.0/24 maxlen: 24
77.120.212.0/23 maxlen: 24
77.120.214.0/23 maxlen: 24
77.120.216.0/22 maxlen: 23
77.120.220.0/22 maxlen: 24
77.120.224.0/20 maxlen: 21
77.120.240.0/20 maxlen: 21
77.120.248.0/21 maxlen: 22
77.121.0.0/21 maxlen: 22
77.121.8.0/22 maxlen: 23
77.121.12.0/24 maxlen: 24
77.121.13.0/24 maxlen: 24
77.121.15.0/24 maxlen: 24
77.121.16.0/24 maxlen: 24
77.121.17.0/24 maxlen: 24
77.121.18.0/24 maxlen: 24
77.121.19.0/24 maxlen: 24
77.121.20.0/24 maxlen: 24
77.121.21.0/24 maxlen: 24
77.121.22.0/24 maxlen: 24
77.121.23.0/24 maxlen: 24
77.121.24.0/24 maxlen: 24
77.121.25.0/24 maxlen: 24
77.121.26.0/24 maxlen: 24
77.121.27.0/24 maxlen: 24
77.121.28.0/24 maxlen: 24
77.121.29.0/24 maxlen: 24
77.121.30.0/24 maxlen: 24
77.121.64.0/21 maxlen: 22
77.121.72.0/21 maxlen: 22
77.121.80.0/20 maxlen: 21
77.121.96.0/19 maxlen: 20
77.121.96.0/20 maxlen: 21
77.121.112.0/20 maxlen: 21
77.123.128.0/19 maxlen: 20
77.123.144.0/22 maxlen: 22
77.123.160.0/20 maxlen: 24
77.244.32.0/20 maxlen: 21
82.144.192.0/19 maxlen: 20
109.201.224.0/24 maxlen: 24
109.201.225.0/24 maxlen: 24
109.201.226.0/24 maxlen: 24
109.201.227.0/24 maxlen: 24
109.201.228.0/22 maxlen: 23
109.201.232.0/22 maxlen: 23
109.201.236.0/23 maxlen: 24
109.201.238.0/23 maxlen: 24
109.201.240.0/20 maxlen: 21
141.170.224.0/23 maxlen: 24
141.170.226.0/23 maxlen: 24
141.170.226.0/24 maxlen: 24
141.170.227.0/24 maxlen: 24
141.170.229.0/24 maxlen: 24
141.170.230.0/24 maxlen: 24
141.170.231.0/24 maxlen: 24
141.170.232.0/24 maxlen: 24
141.170.233.0/24 maxlen: 24
141.170.234.0/23 maxlen: 24
141.170.236.0/24 maxlen: 24
141.170.238.0/24 maxlen: 24
141.170.240.0/22 maxlen: 23
141.170.244.0/22 maxlen: 23
141.170.248.0/21 maxlen: 22
141.170.248.0/23 maxlen: 24
141.170.250.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 09:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bb:e7:67:d4:79:cf:65:89:aa:52:78:8d:5b:8c:d0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Jul 16 14:17:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cabadc3e02bcdd4fa227fdd3351b84b77931b561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:44:e1:32:53:66:27:1a:59:1c:d4:3b:69:
11:17:51:6c:4d:e6:d3:e3:a6:4a:a7:77:cf:50:b3:
0a:1c:e3:b1:a5:f0:f6:99:dd:df:a6:ac:d5:4a:bd:
87:f3:1c:29:e1:48:f3:af:34:48:58:13:c6:ab:a3:
c2:59:ee:cd:74:13:7c:cf:f4:d1:40:39:93:b9:14:
a3:7a:1d:6b:e4:3b:8a:e6:2f:28:1c:ac:e0:ab:9a:
a4:7c:20:54:0b:d4:3e:41:cd:da:53:46:ab:71:81:
6a:a9:23:ee:6d:c9:b9:52:f6:17:3f:7d:6a:ee:23:
27:d2:de:45:11:fc:1e:ec:6d:bb:2a:16:6d:68:63:
f1:87:f9:ce:9c:75:14:d5:84:f4:e6:6f:e0:ac:2a:
02:d3:0c:ec:79:12:78:94:cc:a8:63:c5:23:9d:80:
90:a7:12:19:6e:78:39:87:20:46:46:a4:58:85:ed:
01:26:b8:f6:2c:20:0f:ed:a9:1c:66:43:3e:5f:39:
63:6d:e2:ab:45:c6:40:a9:63:95:2d:dd:5e:87:10:
e5:af:0f:9e:0e:88:42:6c:e5:85:99:31:db:12:ef:
d5:37:03:f9:af:74:52:fc:4e:38:c6:a4:f3:df:00:
d3:7a:04:48:b8:1e:ca:36:b8:e9:e6:4a:b9:54:e9:
8b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BA:DC:3E:02:BC:DD:4F:A2:27:FD:D3:35:1B:84:B7:79:31:B5:61
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/yrrcPgK83U-iJ_3TNRuEt3kxtWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.0.0-77.120.47.255
77.120.52.0/22
77.120.60.0-77.121.13.255
77.121.15.0-77.121.30.255
77.121.64.0/18
77.123.128.0-77.123.175.255
77.244.32.0/20
82.144.192.0/19
109.201.224.0/19
141.170.224.0/22
141.170.229.0-141.170.236.255
141.170.238.0/24
141.170.240.0/20
Signature Algorithm: sha256WithRSAEncryption
32:b9:8e:cc:c3:8b:65:56:81:8a:14:b5:b7:df:d7:50:96:ce:
e4:bf:d1:a8:33:61:2a:42:7f:91:3c:18:33:a9:7a:c2:f7:1e:
35:7c:12:bf:1c:7d:02:c8:1d:93:b8:59:90:19:86:f0:5e:4f:
8d:c7:e9:17:96:33:fc:bb:6a:ac:c5:45:79:53:a1:99:61:ea:
fa:d6:86:20:da:d4:93:ad:ff:f6:fa:a3:3b:79:d0:3c:73:f7:
52:9a:0f:54:b0:d2:a6:86:59:90:2a:40:c3:c7:47:1a:39:0b:
fe:8e:75:18:bb:02:76:0e:91:ae:95:c8:2d:ea:44:27:3d:8f:
05:93:4e:f7:06:43:e3:85:15:f7:32:2e:4d:ff:dd:72:a2:f5:
af:63:11:f4:3d:22:37:2a:78:d9:5f:c1:23:c3:e5:74:c1:fa:
45:6d:b0:28:74:b1:e1:16:5d:7c:68:a1:5a:e9:14:5a:a3:4e:
4a:2e:f7:af:f0:51:1d:6d:79:d6:c2:56:13:7b:f1:96:92:db:
77:52:24:a8:f7:2c:2f:3b:5e:cb:da:3a:38:ef:d1:5a:27:a7:
a4:70:27:59:b9:2d:23:fd:c5:b1:7f:52:9c:8d:ae:16:6a:56:
35:3f:11:d6:9f:d6:6c:89:f6:3d:d3:eb:94:5b:96:6f:bb:2d:
49:3e:96:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:53:28 2025 by rpki-client