Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/2Orfi18Ns2p5OqArU8-yCh6N5x8.roa
File: 2Orfi18Ns2p5OqArU8-yCh6N5x8.roa (raw, json)
Hash identifier: dL3RoZt2V1WJm/Wt6GN+s84MvEzCunLTtPn/ehWJnrc=
Subject key identifier: D8:EA:DF:8B:5F:0D:B3:6A:79:3A:A0:2B:53:CF:B2:0A:1E:8D:E7:1F
Certificate issuer: /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial: 0195654F2281CBB6420DD3D9294ABC6D0BA4
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/2Orfi18Ns2p5OqArU8-yCh6N5x8.roa
Signing time: Wed 05 Mar 2025 07:57:19 +0000
ROA not before: Wed 05 Mar 2025 07:57:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43391
IP address blocks: 77.223.128.0/20 maxlen: 20
77.223.128.0/24 maxlen: 24
77.223.129.0/24 maxlen: 24
77.223.130.0/24 maxlen: 24
77.223.131.0/24 maxlen: 24
77.223.132.0/24 maxlen: 24
77.223.133.0/24 maxlen: 24
77.223.134.0/24 maxlen: 24
77.223.135.0/24 maxlen: 24
77.223.136.0/24 maxlen: 24
77.223.137.0/24 maxlen: 24
77.223.138.0/24 maxlen: 24
77.223.139.0/24 maxlen: 24
77.223.140.0/24 maxlen: 24
77.223.141.0/24 maxlen: 24
77.223.142.0/24 maxlen: 24
77.223.143.0/24 maxlen: 24
77.223.146.0/23 maxlen: 23
77.223.147.0/24 maxlen: 24
77.223.148.0/24 maxlen: 24
77.223.149.0/24 maxlen: 24
77.223.150.0/24 maxlen: 24
77.223.151.0/24 maxlen: 24
77.223.152.0/24 maxlen: 24
77.223.153.0/24 maxlen: 24
77.223.154.0/24 maxlen: 24
77.223.155.0/24 maxlen: 24
77.223.156.0/24 maxlen: 24
77.223.157.0/24 maxlen: 24
77.223.158.0/24 maxlen: 24
77.223.159.0/24 maxlen: 24
78.40.224.0/21 maxlen: 21
78.40.224.0/24 maxlen: 24
78.40.225.0/24 maxlen: 24
78.40.226.0/24 maxlen: 24
78.40.227.0/24 maxlen: 24
78.40.228.0/24 maxlen: 24
78.40.229.0/24 maxlen: 24
78.40.230.0/24 maxlen: 24
78.40.231.0/24 maxlen: 24
91.191.160.0/21 maxlen: 21
91.191.161.0/24 maxlen: 24
91.191.162.0/24 maxlen: 24
91.191.163.0/24 maxlen: 24
91.191.164.0/24 maxlen: 24
91.191.165.0/24 maxlen: 24
91.191.166.0/24 maxlen: 24
91.191.167.0/24 maxlen: 24
91.191.168.0/21 maxlen: 21
91.191.168.0/24 maxlen: 24
91.191.169.0/24 maxlen: 24
91.191.170.0/24 maxlen: 24
91.191.171.0/24 maxlen: 24
91.191.172.0/24 maxlen: 24
91.191.173.0/24 maxlen: 24
91.191.174.0/24 maxlen: 24
91.191.175.0/24 maxlen: 24
93.187.200.0/21 maxlen: 21
93.187.200.0/24 maxlen: 24
93.187.201.0/24 maxlen: 24
93.187.202.0/24 maxlen: 24
93.187.203.0/24 maxlen: 24
93.187.204.0/24 maxlen: 24
93.187.205.0/24 maxlen: 24
93.187.206.0/24 maxlen: 24
93.187.207.0/24 maxlen: 24
185.80.72.0/24 maxlen: 24
195.244.32.0/19 maxlen: 19
195.244.32.0/24 maxlen: 24
195.244.33.0/24 maxlen: 24
195.244.34.0/24 maxlen: 24
195.244.35.0/24 maxlen: 24
195.244.36.0/24 maxlen: 24
195.244.37.0/24 maxlen: 24
195.244.38.0/24 maxlen: 24
195.244.39.0/24 maxlen: 24
195.244.40.0/24 maxlen: 24
195.244.41.0/24 maxlen: 24
195.244.42.0/24 maxlen: 24
195.244.43.0/24 maxlen: 24
195.244.44.0/24 maxlen: 24
195.244.46.0/24 maxlen: 24
195.244.47.0/24 maxlen: 24
195.244.48.0/24 maxlen: 24
195.244.49.0/24 maxlen: 24
195.244.50.0/24 maxlen: 24
195.244.51.0/24 maxlen: 24
195.244.52.0/24 maxlen: 24
195.244.53.0/24 maxlen: 24
195.244.54.0/24 maxlen: 24
195.244.55.0/24 maxlen: 24
195.244.57.0/24 maxlen: 24
195.244.58.0/24 maxlen: 24
195.244.59.0/24 maxlen: 24
195.244.60.0/24 maxlen: 24
195.244.61.0/24 maxlen: 24
195.244.62.0/24 maxlen: 24
195.244.63.0/24 maxlen: 24
2a01:aac0::/32 maxlen: 32
2a0a:be80::/29 maxlen: 29
2a0a:be80::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Mar 2025 10:53:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:4f:22:81:cb:b6:42:0d:d3:d9:29:4a:bc:6d:0b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Validity
Not Before: Mar 5 07:57:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8eadf8b5f0db36a793aa02b53cfb20a1e8de71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:4b:5e:a9:6e:3c:07:43:b6:21:32:e8:01:
12:cf:f9:d3:b7:d5:5d:5e:9b:3c:47:bc:c4:f3:3e:
cf:e9:f1:c1:38:cc:74:8e:68:00:41:b5:f5:4e:ee:
72:e9:15:fb:da:00:39:14:55:d5:30:19:0f:fe:2b:
40:5d:a4:21:75:eb:61:67:7a:5c:8d:2d:50:e5:4b:
26:8f:08:37:65:65:91:42:93:a7:8a:23:69:11:75:
f2:4b:57:b2:21:86:36:21:9c:60:6c:7e:3b:61:8f:
6a:06:f4:74:09:f7:e9:f9:38:1c:5c:9f:c4:2d:43:
a6:11:5e:53:04:fb:0c:df:5b:70:26:2e:bd:13:88:
24:4f:a5:8f:5c:5a:09:60:51:cf:70:22:49:2d:7a:
ae:61:19:72:ff:5c:88:40:9a:1d:f9:6b:f7:1a:3f:
d2:37:2c:99:fa:c5:67:d2:3a:b4:86:74:5b:8d:b2:
c3:65:d1:8d:6a:54:44:02:e3:b2:46:a1:be:03:3e:
0f:6c:14:43:df:5f:51:99:3d:57:fa:5b:11:0a:1e:
94:64:ec:26:8a:66:98:3b:bf:18:f7:77:90:7d:74:
36:5a:cc:35:31:53:56:2a:ef:18:b4:5f:e5:38:77:
a4:98:85:ad:8c:a2:c6:14:33:ce:46:69:95:d7:5a:
b8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EA:DF:8B:5F:0D:B3:6A:79:3A:A0:2B:53:CF:B2:0A:1E:8D:E7:1F
X509v3 Authority Key Identifier:
keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/2Orfi18Ns2p5OqArU8-yCh6N5x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.128.0/20
77.223.146.0-77.223.159.255
78.40.224.0/21
91.191.160.0/20
93.187.200.0/21
185.80.72.0/24
195.244.32.0/19
IPv6:
2a01:aac0::/32
2a0a:be80::/29
Signature Algorithm: sha256WithRSAEncryption
81:1f:41:11:65:f0:e8:5d:c0:92:99:6a:81:29:b9:2b:20:1c:
91:6e:ad:8a:58:1e:c5:af:2e:d0:84:06:77:43:00:a1:4b:35:
9f:63:31:54:55:34:c0:56:40:16:a8:7e:2b:0a:f0:02:2e:c4:
08:40:93:af:16:15:d8:5e:30:89:b2:3a:36:55:bc:8e:30:54:
37:43:50:94:56:10:41:46:96:73:3c:31:fe:03:f9:70:cf:84:
e8:14:c8:4e:7c:87:c6:61:17:7c:92:09:33:a2:51:a4:b6:5d:
53:2b:81:8b:97:2c:09:a1:3d:ac:66:c9:db:65:9c:c5:57:b6:
56:a7:df:c1:de:e7:59:9e:f8:af:7a:1f:ca:37:08:38:da:70:
21:8f:e4:69:46:76:c5:31:75:4a:b5:7b:d0:ae:1f:b2:4d:de:
a1:ba:79:c7:d3:21:6d:b4:2f:8b:53:4e:65:2b:41:e2:f5:54:
95:43:ea:f8:c9:07:38:19:68:8f:ca:6f:e4:fa:b3:c4:fb:91:
13:6f:26:6d:35:a6:00:79:c9:8e:be:86:f9:64:59:45:68:d5:
39:ec:3c:f3:5e:0b:f1:91:34:b1:2d:13:a3:4c:19:14:2f:84:
0c:af:bb:58:cd:0f:ec:2c:20:e0:ae:28:e5:03:c7:b2:9c:2f:
56:ad:63:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:05:20 2025 by rpki-client