Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/4-LeJngHiDJOIo7dixoC0QVADVQ.roa
File: 4-LeJngHiDJOIo7dixoC0QVADVQ.roa (raw, json)
Hash identifier: 9PGEcixpEPdunQB4R8Yi2dhfX01EAtLmBSh5VyFq5q4=
Subject key identifier: E3:E2:DE:26:78:07:88:32:4E:22:8E:DD:8B:1A:02:D1:05:40:0D:54
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01942D5259F9383BC124CF46E0E9F195E580
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/4-LeJngHiDJOIo7dixoC0QVADVQ.roa
Signing time: Fri 03 Jan 2025 17:59:18 +0000
ROA not before: Fri 03 Jan 2025 17:59:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59711
IP address blocks: 5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
77.83.196.0/24 maxlen: 24
77.83.197.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
79.141.164.0/23 maxlen: 23
79.141.174.0/23 maxlen: 23
85.158.108.0/24 maxlen: 24
85.158.109.0/24 maxlen: 24
89.150.40.0/24 maxlen: 24
89.150.45.0/24 maxlen: 24
89.150.48.0/24 maxlen: 24
89.150.57.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
185.40.86.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.80.54.0/23 maxlen: 23
185.81.114.0/23 maxlen: 23
185.81.114.0/24 maxlen: 24
185.81.115.0/24 maxlen: 24
185.104.192.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
185.104.194.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
185.117.90.0/23 maxlen: 23
185.123.102.0/24 maxlen: 24
185.174.133.0/24 maxlen: 24
185.174.135.0/24 maxlen: 24
185.235.137.0/24 maxlen: 24
185.235.138.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
193.42.39.0/24 maxlen: 24
193.111.208.0/24 maxlen: 24
195.95.155.0/24 maxlen: 24
2a01:8640::/48 maxlen: 48
2a01:8640:2::/48 maxlen: 48
2a01:8640:6::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:12::/48 maxlen: 48
2a01:8640:13::/48 maxlen: 48
2a01:8640:14::/48 maxlen: 48
2a01:8640:15::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 Jan 2025 12:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2d:52:59:f9:38:3b:c1:24:cf:46:e0:e9:f1:95:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 3 17:59:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3e2de26780788324e228edd8b1a02d105400d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:59:ff:3b:34:7c:db:ef:be:b5:4f:60:2c:
50:48:8f:21:21:5d:2c:f0:5f:b9:b6:7c:fa:69:e4:
ae:65:0b:2a:f3:4d:1e:45:fb:ae:40:6e:79:94:aa:
18:01:13:30:86:90:5e:5c:fa:53:0a:c4:04:44:10:
c8:69:23:6a:98:a3:1a:61:a1:cd:a5:c6:4b:bd:98:
b0:77:d3:6b:d9:cf:46:2b:65:6b:ae:b7:92:7c:2a:
c9:f7:5f:87:1d:da:8c:0f:20:9d:84:c8:67:de:1a:
d8:f2:77:16:1f:6c:18:52:aa:b3:ce:da:cc:16:a3:
6b:aa:c2:70:8f:60:9b:ce:58:12:81:2c:68:cb:37:
0f:90:fc:a5:33:ea:74:76:f4:25:35:0a:3a:b6:a0:
32:fe:60:5b:31:4a:40:c6:87:1b:04:62:93:79:12:
c7:a2:74:91:7e:73:06:19:72:38:6c:b1:14:6e:4f:
03:24:9d:d5:d4:2b:56:a8:ad:b7:7d:f6:0e:19:3b:
54:32:62:c6:70:c8:31:e3:31:c8:57:32:c0:4a:02:
53:96:e1:7d:56:e0:3a:e6:1f:ec:31:5b:21:bb:8c:
c6:b0:f3:0f:05:bf:3c:51:5e:1e:d8:25:41:27:5f:
6a:6c:db:1b:80:a6:18:fc:f4:92:ee:75:be:04:88:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E2:DE:26:78:07:88:32:4E:22:8E:DD:8B:1A:02:D1:05:40:0D:54
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/4-LeJngHiDJOIo7dixoC0QVADVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0-77.83.198.255
79.141.164.0/23
79.141.174.0/23
85.158.108.0/23
89.150.40.0/24
89.150.45.0/24
89.150.48.0/24
89.150.57.0/24
91.193.18.0/24
185.40.86.0/24
185.80.52.0/22
185.81.114.0/23
185.104.192.0-185.104.194.255
185.117.88.0/22
185.123.102.0/24
185.174.133.0/24
185.174.135.0/24
185.235.137.0-185.235.138.255
193.42.36.0/24
193.42.39.0/24
193.111.208.0/24
195.95.155.0/24
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:6::/48
2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:15:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
53:83:97:db:b3:d5:a1:6e:28:ba:ae:5a:de:70:f1:e1:4e:10:
41:61:39:77:af:c1:41:a9:70:4b:f5:fb:e5:19:af:78:8e:37:
f9:03:45:d8:40:a7:f7:31:ad:ac:6d:9f:38:e7:a4:8e:f4:16:
08:a1:e5:65:ba:76:3a:b0:28:a7:82:5c:08:22:b5:74:c6:54:
4c:23:6f:3c:12:69:f7:85:0e:c9:e9:07:37:1b:b6:f0:93:69:
bf:d1:16:44:ed:e8:13:fb:b2:c1:38:09:1d:24:53:b9:1d:a8:
3d:9b:6d:39:89:88:3d:7d:f0:4e:fb:25:05:21:e3:6b:c3:00:
fb:55:ab:bd:1b:61:95:74:d1:46:b2:09:fb:0f:00:a9:29:48:
b3:5e:8e:ab:bc:97:3d:f8:ae:ef:aa:23:7d:ea:de:09:7b:54:
b9:00:44:f4:30:91:29:e5:3d:83:ba:1c:7b:ab:69:51:01:6c:
39:23:39:6c:54:ba:ba:4e:d1:d2:e2:1a:12:38:2a:5c:75:b8:
49:15:ee:7a:c6:bb:31:58:92:2f:38:72:c6:b4:68:9d:ca:74:
e9:57:7c:04:9d:60:35:e8:91:d9:33:ab:a3:34:51:99:63:20:
aa:9a:f5:6c:fc:b6:8f:28:8c:75:d1:4f:ee:01:1d:72:cc:f0:
b7:21:23:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:36 2025 by rpki-client