Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/79-O0NmdViWTIQEEoN4_D1IzrBA.roa
File: 79-O0NmdViWTIQEEoN4_D1IzrBA.roa (raw, json)
Hash identifier: psjZ1AP29iQ2zcR8NUafZc9egjY2ZY7o3WazG5gTVp8=
Subject key identifier: EF:DF:8E:D0:D9:9D:56:25:93:21:01:04:A0:DE:3F:0F:52:33:AC:10
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194ACE5C43041B5C852645A1729BC928953
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/79-O0NmdViWTIQEEoN4_D1IzrBA.roa
Signing time: Tue 28 Jan 2025 12:32:06 +0000
ROA not before: Tue 28 Jan 2025 12:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 45.88.14.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
77.81.182.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.115.107.0/24 maxlen: 24
93.118.36.0/24 maxlen: 24
93.119.154.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
185.198.233.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
188.241.221.0/24 maxlen: 24
193.178.134.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 14:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:e5:c4:30:41:b5:c8:52:64:5a:17:29:bc:92:89:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 28 12:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efdf8ed0d99d562593210104a0de3f0f5233ac10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:76:65:9e:d4:4e:bf:6e:c6:e1:ec:14:de:
05:c2:73:e2:74:8f:7b:93:b8:21:ef:7f:4e:ab:67:
74:01:10:36:dc:42:65:ee:06:c3:11:6e:1c:b2:8a:
df:34:04:16:51:e7:9f:aa:55:10:50:35:68:6f:73:
8d:09:a2:a1:9e:eb:88:4c:cf:ee:ca:56:e0:26:14:
ec:9b:c7:01:ee:35:97:ac:51:e1:86:21:48:59:5f:
79:cc:c7:62:50:61:59:06:2e:c5:6b:13:ee:d5:47:
34:85:40:92:02:85:a4:7f:4d:d9:83:9e:4e:ae:50:
84:78:fa:0c:7e:cd:14:15:f7:e5:09:af:1e:96:40:
04:4e:5e:36:4c:eb:fb:b5:60:f5:77:70:19:eb:36:
72:4f:14:14:6b:05:70:98:1d:95:9f:46:34:d6:23:
de:c6:15:e8:84:c0:f3:0e:73:98:ce:a8:17:1b:d2:
d8:26:34:5f:b2:84:e3:4d:ba:e2:de:40:37:0d:8c:
ea:59:fb:16:05:52:43:20:64:e8:5b:89:d5:c8:07:
b5:cb:d6:d6:9e:0a:c0:1f:f5:4b:99:79:c0:2d:ca:
ae:cd:10:b3:fe:60:57:16:81:a5:a1:13:65:4e:fb:
9f:83:6e:69:31:cb:70:a6:43:ec:1d:ea:de:1e:4e:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DF:8E:D0:D9:9D:56:25:93:21:01:04:A0:DE:3F:0F:52:33:AC:10
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/79-O0NmdViWTIQEEoN4_D1IzrBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.14.0/23
62.192.152.0/24
77.81.182.0/24
79.110.227.0/24
85.204.18.0/24
89.34.106.0/24
89.35.129.0/24
89.37.192.0/24
89.40.36.0/24
89.40.215.0/24
89.45.35.0/24
89.47.36.0/24
93.115.106.0/23
93.118.36.0/24
93.119.154.0/24
94.198.171.0/24
128.0.41.0/24
176.223.188.0/24
185.198.233.0/24
188.212.121.0/24
188.215.31.0/24
188.241.221.0/24
193.178.134.0/24
195.133.192.0/24
Signature Algorithm: sha256WithRSAEncryption
24:5f:64:9a:dc:71:dc:17:b9:7c:44:b0:7a:83:ad:a5:c7:a2:
66:51:72:cd:53:e2:8c:aa:ae:d3:5c:65:b2:df:35:5d:f7:31:
63:aa:f2:81:18:4a:e2:42:cb:7e:3f:d6:d3:5d:2f:f9:6c:af:
b6:eb:db:9d:d2:34:8c:c6:88:3a:70:aa:e0:a9:32:eb:51:71:
f3:23:ec:2b:44:84:5c:a3:b5:a8:c2:6b:3e:47:47:b2:82:3e:
07:81:1d:67:ad:aa:ac:89:fb:f8:46:cd:0e:15:a5:1c:7d:fb:
8c:e2:d5:0f:12:5f:0b:17:42:82:3c:a9:89:26:82:73:7c:e8:
fa:46:9a:5a:59:1c:68:8d:c0:b6:32:4f:1e:62:ba:db:6f:00:
9a:70:25:dd:a7:ec:a1:1a:05:89:42:00:9b:0a:19:fe:b3:0e:
de:c6:58:48:c0:f9:8e:36:94:9e:a3:95:fb:13:8a:60:a9:77:
ee:07:41:a3:5d:cd:c2:20:45:74:62:2f:52:77:03:60:4b:3e:
6b:7e:74:53:87:c5:53:89:36:3a:7b:12:4a:b9:97:db:eb:8b:
ab:7d:ac:c6:67:33:f6:c6:00:f5:b6:f5:32:79:6d:29:01:66:
94:6a:70:dc:2d:38:e6:c0:ad:75:2d:f4:89:d1:ce:52:f3:44:
82:80:9e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:44 2025 by rpki-client