Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/dIZ5b8xzPHadhJ_uPtiluA5RJiU.roa
File: dIZ5b8xzPHadhJ_uPtiluA5RJiU.roa (raw, json)
Hash identifier: e11o3N9uKIhAACM2bSafbzbj/8Q3JrMwwCG4mk4dSIA=
Subject key identifier: 74:86:79:6F:CC:73:3C:76:9D:84:9F:EE:3E:D8:A5:B8:0E:51:26:25
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 0191A296E09C8AEA6F17CCD83CAF045BE46F
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/dIZ5b8xzPHadhJ_uPtiluA5RJiU.roa
Signing time: Fri 30 Aug 2024 09:21:22 +0000
ROA not before: Fri 30 Aug 2024 09:21:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43937
IP address blocks: 78.24.48.0/24 maxlen: 24
78.24.49.0/24 maxlen: 24
78.24.50.0/24 maxlen: 24
78.24.51.0/24 maxlen: 24
78.24.52.0/24 maxlen: 24
78.24.53.0/24 maxlen: 24
78.24.54.0/24 maxlen: 24
78.24.55.0/24 maxlen: 24
82.116.128.0/24 maxlen: 24
82.116.129.0/24 maxlen: 24
82.116.130.0/24 maxlen: 24
82.116.131.0/24 maxlen: 24
82.116.132.0/24 maxlen: 24
82.116.133.0/24 maxlen: 24
82.116.134.0/24 maxlen: 24
82.116.135.0/24 maxlen: 24
82.116.136.0/24 maxlen: 24
82.116.137.0/24 maxlen: 24
82.116.138.0/24 maxlen: 24
82.116.139.0/24 maxlen: 24
82.116.140.0/24 maxlen: 24
82.116.141.0/24 maxlen: 24
82.116.142.0/24 maxlen: 24
82.116.143.0/24 maxlen: 24
82.116.144.0/24 maxlen: 24
82.116.145.0/24 maxlen: 24
82.116.146.0/24 maxlen: 24
82.116.147.0/24 maxlen: 24
82.116.148.0/24 maxlen: 24
82.116.149.0/24 maxlen: 24
82.116.150.0/24 maxlen: 24
82.116.151.0/24 maxlen: 24
82.116.152.0/24 maxlen: 24
82.116.153.0/24 maxlen: 24
82.116.154.0/24 maxlen: 24
82.116.155.0/24 maxlen: 24
82.116.156.0/24 maxlen: 24
82.116.157.0/24 maxlen: 24
82.116.158.0/24 maxlen: 24
82.116.159.0/24 maxlen: 24
94.190.144.0/24 maxlen: 24
94.190.145.0/24 maxlen: 24
94.190.146.0/24 maxlen: 24
94.190.147.0/24 maxlen: 24
94.190.148.0/24 maxlen: 24
94.190.149.0/24 maxlen: 24
94.190.150.0/24 maxlen: 24
94.190.151.0/24 maxlen: 24
94.190.152.0/24 maxlen: 24
94.190.153.0/24 maxlen: 24
94.190.154.0/24 maxlen: 24
94.190.155.0/24 maxlen: 24
94.190.156.0/24 maxlen: 24
94.190.157.0/24 maxlen: 24
94.190.158.0/24 maxlen: 24
94.190.159.0/24 maxlen: 24
103.245.116.0/24 maxlen: 24
178.255.8.0/24 maxlen: 24
178.255.9.0/24 maxlen: 24
178.255.10.0/24 maxlen: 24
178.255.11.0/24 maxlen: 24
178.255.12.0/24 maxlen: 24
178.255.13.0/24 maxlen: 24
178.255.14.0/24 maxlen: 24
178.255.15.0/24 maxlen: 24
185.6.176.0/24 maxlen: 24
185.6.177.0/24 maxlen: 24
185.6.178.0/24 maxlen: 24
185.6.179.0/24 maxlen: 24
185.249.222.0/24 maxlen: 24
185.249.223.0/24 maxlen: 24
213.187.224.0/24 maxlen: 24
213.187.225.0/24 maxlen: 24
213.187.226.0/24 maxlen: 24
213.187.227.0/24 maxlen: 24
213.187.228.0/22 maxlen: 24
213.187.228.0/24 maxlen: 24
213.187.229.0/24 maxlen: 24
213.187.230.0/24 maxlen: 24
213.187.231.0/24 maxlen: 24
213.187.232.0/24 maxlen: 24
213.187.233.0/24 maxlen: 24
213.187.235.0/24 maxlen: 24
213.187.236.0/24 maxlen: 24
213.187.237.0/24 maxlen: 24
213.187.238.0/24 maxlen: 24
213.187.239.0/24 maxlen: 24
213.187.248.0/21 maxlen: 21
213.187.248.0/24 maxlen: 24
213.187.249.0/24 maxlen: 24
213.187.250.0/24 maxlen: 24
213.187.251.0/24 maxlen: 24
213.187.252.0/23 maxlen: 23
213.187.252.0/24 maxlen: 24
213.187.253.0/24 maxlen: 24
213.187.254.0/24 maxlen: 24
213.187.255.0/24 maxlen: 24
2a02:7980::/32 maxlen: 32
2a02:7980:105::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 28 Oct 2024 06:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a2:96:e0:9c:8a:ea:6f:17:cc:d8:3c:af:04:5b:e4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Aug 30 09:21:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7486796fcc733c769d849fee3ed8a5b80e512625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bf:da:0a:57:d0:9d:52:7c:6c:e9:8f:91:8c:
11:8a:95:cb:bc:91:dd:81:20:25:c5:4b:2b:d3:98:
e3:8e:e7:75:bd:c3:61:0a:90:97:66:e8:b4:65:34:
cb:33:f6:08:b3:1e:b0:d1:8e:88:cb:78:59:03:97:
c0:ca:d6:46:4f:c2:f6:7d:b3:1b:5c:3e:da:f5:96:
74:b5:e6:80:e7:4a:9d:fc:3f:27:6e:ea:a7:bc:84:
9f:e5:2c:e7:f8:4d:0e:d6:83:c0:5a:e6:6b:69:c9:
e2:0d:3b:c8:bd:d8:7f:93:a5:a6:a6:6f:02:1f:7c:
2f:02:18:3b:0c:9d:a9:31:85:f6:dc:5a:3c:13:13:
6b:d5:53:bf:ea:1e:24:3c:fd:75:07:c4:1d:43:b4:
66:4d:a4:c3:45:91:f2:b1:fc:f6:83:12:db:a8:ab:
7f:58:2d:8e:43:ba:32:10:96:2f:44:5e:30:4c:87:
d8:e0:6f:2d:f8:21:6d:42:42:dc:d4:94:6b:db:75:
e9:d8:be:05:e5:e5:d7:19:79:dc:f4:9d:2a:69:00:
fd:d0:68:06:ef:aa:e1:51:1e:f5:a0:1b:50:97:d7:
2a:70:e2:b2:06:3a:43:66:50:c5:a2:49:63:2d:8a:
7c:4f:19:79:ae:95:87:f7:a9:d6:b0:71:89:84:b1:
e2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:86:79:6F:CC:73:3C:76:9D:84:9F:EE:3E:D8:A5:B8:0E:51:26:25
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/dIZ5b8xzPHadhJ_uPtiluA5RJiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.48.0/21
82.116.128.0/19
94.190.144.0/20
103.245.116.0/24
178.255.8.0/21
185.6.176.0/22
185.249.222.0/23
213.187.224.0-213.187.233.255
213.187.235.0-213.187.239.255
213.187.248.0/21
IPv6:
2a02:7980::/32
Signature Algorithm: sha256WithRSAEncryption
39:09:d4:78:bc:de:aa:7a:1c:b4:77:a8:25:cb:8d:4a:39:a4:
0b:6e:07:57:52:cf:79:80:6a:eb:c7:2c:e1:77:09:05:39:d8:
5b:c1:f2:5e:c9:8f:f7:26:ef:ab:ab:fb:3e:a2:9f:7d:dc:48:
69:8c:37:c9:86:39:16:81:69:61:f7:91:f9:44:11:63:8e:da:
28:8b:b0:9c:6a:9b:9a:0b:bb:4f:2c:5e:f4:59:d1:b4:c0:63:
b5:1f:26:db:41:10:ce:ff:25:c1:a8:93:37:ae:8e:28:48:c1:
42:be:e7:d3:44:d4:33:46:e5:19:b0:a8:43:09:bd:d8:39:38:
9c:3d:67:20:4f:ec:f4:b6:d2:b1:43:76:58:6c:f2:ec:a3:13:
7a:a6:5d:33:3c:ac:61:f5:95:36:5a:23:ae:da:92:f3:22:5e:
7c:c9:3b:ed:89:d1:f3:d2:30:9c:a0:85:d7:05:ae:87:71:15:
da:b0:68:2a:57:79:32:0a:cc:13:ce:46:61:50:21:39:7b:4d:
43:52:e8:0a:70:ff:c7:fe:f9:9d:02:04:4e:b1:c4:50:ba:0f:
6c:34:6e:d0:6c:a4:0f:19:0e:08:a9:be:8f:85:72:ad:d3:87:
49:e8:d6:d3:4c:6a:5a:68:53:f6:f0:c1:3c:a6:6d:78:22:62:
5d:50:59:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 09:40:51 2024 by rpki-client on console-ams.rpki-client.org