Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/KF7LLH4P0857T5UHa-KCA0zR2Xw.roa
File: KF7LLH4P0857T5UHa-KCA0zR2Xw.roa (raw, json)
Hash identifier: 3dEpw65rn7c9m0Ggkxsotjlr0KGMOIHhEHRf+RJfBQo=
Subject key identifier: 28:5E:CB:2C:7E:0F:D3:CE:7B:4F:95:07:6B:E2:82:03:4C:D1:D9:7C
Certificate issuer: /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial: 01955D141A717DD725B29DF023C70F08EF63
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/KF7LLH4P0857T5UHa-KCA0zR2Xw.roa
Signing time: Mon 03 Mar 2025 17:35:53 +0000
ROA not before: Mon 03 Mar 2025 17:35:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43391
IP address blocks: 77.223.128.0/19 maxlen: 24
77.223.128.0/20 maxlen: 20
77.223.128.0/24 maxlen: 24
77.223.132.0/24 maxlen: 24
77.223.134.0/24 maxlen: 24
77.223.135.0/24 maxlen: 24
77.223.136.0/24 maxlen: 24
77.223.137.0/24 maxlen: 24
77.223.142.0/24 maxlen: 24
77.223.143.0/24 maxlen: 24
77.223.146.0/23 maxlen: 23
77.223.148.0/24 maxlen: 24
77.223.149.0/24 maxlen: 24
77.223.152.0/24 maxlen: 24
77.223.153.0/24 maxlen: 24
77.223.154.0/24 maxlen: 24
77.223.156.0/24 maxlen: 24
77.223.158.0/24 maxlen: 24
78.40.224.0/21 maxlen: 21
78.40.224.0/24 maxlen: 24
78.40.228.0/24 maxlen: 24
78.40.230.0/24 maxlen: 24
91.191.160.0/20 maxlen: 24
91.191.160.0/21 maxlen: 21
91.191.168.0/21 maxlen: 21
91.191.170.0/24 maxlen: 24
91.191.171.0/24 maxlen: 24
91.191.175.0/24 maxlen: 24
93.187.200.0/21 maxlen: 21
93.187.204.0/24 maxlen: 24
93.187.205.0/24 maxlen: 24
93.187.206.0/24 maxlen: 24
93.187.207.0/24 maxlen: 24
185.80.72.0/24 maxlen: 24
195.244.32.0/19 maxlen: 24
195.244.32.0/24 maxlen: 24
195.244.33.0/24 maxlen: 24
195.244.34.0/24 maxlen: 24
195.244.35.0/24 maxlen: 24
195.244.36.0/24 maxlen: 24
195.244.37.0/24 maxlen: 24
195.244.38.0/24 maxlen: 24
195.244.39.0/24 maxlen: 24
195.244.40.0/24 maxlen: 24
195.244.41.0/24 maxlen: 24
195.244.42.0/24 maxlen: 24
195.244.43.0/24 maxlen: 24
195.244.44.0/24 maxlen: 24
195.244.46.0/24 maxlen: 24
195.244.54.0/24 maxlen: 24
195.244.55.0/24 maxlen: 24
195.244.57.0/24 maxlen: 24
195.244.58.0/24 maxlen: 24
195.244.59.0/24 maxlen: 24
195.244.60.0/24 maxlen: 24
195.244.61.0/24 maxlen: 24
195.244.63.0/24 maxlen: 24
2a01:aac0::/32 maxlen: 32
2a0a:be80::/29 maxlen: 29
2a0a:be80::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Mar 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5d:14:1a:71:7d:d7:25:b2:9d:f0:23:c7:0f:08:ef:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Validity
Not Before: Mar 3 17:35:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=285ecb2c7e0fd3ce7b4f95076be282034cd1d97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:ab:77:3d:72:39:6e:75:b4:5a:d8:1c:ab:
78:ed:30:10:6f:a1:15:bf:81:65:c8:de:a3:8d:fa:
46:81:78:1e:cf:d2:2a:4d:c6:b9:c3:5e:16:86:49:
3f:9e:c5:41:1a:07:21:21:bf:96:d6:50:53:0b:0d:
4d:44:21:1c:7d:f3:e5:2d:38:7d:12:fe:22:b3:7f:
94:bd:66:2f:b8:2c:3c:84:a5:02:fc:0d:26:52:2b:
23:79:2f:00:ef:c9:ae:6f:39:12:f8:06:28:c4:20:
23:a6:e7:5b:9c:0e:09:fd:bb:7d:aa:f1:0c:47:9d:
b1:15:66:c4:e2:e0:cc:4e:cf:5a:7e:6a:eb:f3:65:
d7:18:cd:ad:9a:cd:bf:39:7b:21:59:88:e1:fc:01:
d4:0c:58:7f:da:c2:d5:3c:17:92:9b:28:5f:2d:ea:
81:5c:b7:48:10:a1:0e:e8:6c:ee:f8:a8:6a:7a:24:
cf:9f:69:7d:c9:f1:d7:7f:9e:2d:fa:34:69:10:d6:
f6:73:a8:10:1b:17:92:67:26:31:7a:19:bb:2f:20:
2d:97:94:2f:02:7e:ca:1e:74:77:7b:95:46:3e:fc:
36:de:fc:e7:4e:a1:7b:7e:98:11:4b:f2:e5:59:e6:
3d:82:36:e4:c7:11:5a:db:29:09:3a:74:f6:c4:42:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5E:CB:2C:7E:0F:D3:CE:7B:4F:95:07:6B:E2:82:03:4C:D1:D9:7C
X509v3 Authority Key Identifier:
keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/KF7LLH4P0857T5UHa-KCA0zR2Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.128.0/19
78.40.224.0/21
91.191.160.0/20
93.187.200.0/21
185.80.72.0/24
195.244.32.0/19
IPv6:
2a01:aac0::/32
2a0a:be80::/29
Signature Algorithm: sha256WithRSAEncryption
36:b6:6e:2a:b4:93:2b:07:bd:f0:75:63:9b:5a:84:52:8f:ed:
90:b4:38:5f:6d:ff:23:86:da:95:18:8c:44:55:c8:ec:0d:e0:
98:60:d2:dc:49:65:b3:c2:f2:e9:77:2d:b7:87:c3:0a:70:74:
3a:b8:e0:d4:75:94:32:41:c4:95:d1:8a:c9:a6:7a:4f:9f:2a:
84:54:3e:15:7f:05:e1:c2:cd:16:42:49:ef:a5:92:18:22:b6:
f8:8e:c7:9d:c3:36:bc:f4:ff:a7:c3:7f:fa:76:50:cc:60:70:
33:a0:46:dd:f2:7c:97:51:2e:71:38:1a:34:09:1b:41:84:bc:
82:ad:52:e0:aa:70:fb:5f:51:3e:c8:6d:86:07:57:d1:ad:bc:
3b:8b:59:1b:5c:83:e4:a0:f7:68:b9:69:3c:b3:a6:55:ff:0e:
fb:2c:73:59:c3:2d:d8:a9:8b:eb:19:d5:fd:67:3e:a6:2e:17:
0d:0c:18:1a:34:1e:c5:12:fc:d9:10:b7:4f:11:2c:1a:7b:21:
c6:dd:63:9a:80:93:bd:97:87:b8:ff:05:8c:80:e2:d8:c9:58:
12:5b:a9:e5:61:4f:05:54:a4:80:04:37:f0:40:1d:07:b1:d5:
5d:bc:ae:23:64:d1:4c:c1:2c:b1:8b:f1:1c:0f:f8:8d:a1:c3:
61:dd:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:19:38 2025 by rpki-client