Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/d3w3YdldhTeZeIuUurXTT6w-2qE.roa
File: d3w3YdldhTeZeIuUurXTT6w-2qE.roa (raw, json)
Hash identifier: Nz5rbtRT8yXBEWeEfgpnIXh/ah74c87BqrnYtmjIego=
Subject key identifier: 77:7C:37:61:D9:5D:85:37:99:78:8B:94:BA:B5:D3:4F:AC:3E:DA:A1
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DAC6861EF451538F2C08EA1095F29A
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/d3w3YdldhTeZeIuUurXTT6w-2qE.roa
Signing time: Mon 01 Jan 2024 02:29:26 +0000
ROA not before: Mon 01 Jan 2024 02:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62235
IP address blocks: 89.39.167.0/24 maxlen: 24
85.204.200.0/22 maxlen: 24
85.204.200.0/21 maxlen: 24
85.204.204.0/22 maxlen: 24
89.46.247.0/24 maxlen: 24
188.212.16.0/22 maxlen: 24
188.212.16.0/23 maxlen: 24
188.212.18.0/23 maxlen: 24
185.228.244.0/22 maxlen: 24
185.228.244.0/23 maxlen: 24
185.228.246.0/23 maxlen: 24
185.87.130.0/23 maxlen: 24
185.87.128.0/23 maxlen: 24
185.87.128.0/22 maxlen: 24
194.124.56.0/22 maxlen: 24
194.124.58.0/23 maxlen: 24
194.124.56.0/23 maxlen: 24
89.45.222.0/23 maxlen: 24
89.45.220.0/23 maxlen: 24
89.45.220.0/22 maxlen: 24
94.177.0.0/22 maxlen: 24
94.177.2.0/23 maxlen: 24
94.177.0.0/23 maxlen: 24
89.46.32.0/24 maxlen: 24
89.46.35.0/24 maxlen: 24
89.46.37.0/24 maxlen: 24
89.46.39.0/24 maxlen: 24
185.56.76.0/23 maxlen: 24
185.56.78.0/23 maxlen: 24
185.56.76.0/22 maxlen: 24
45.86.184.0/23 maxlen: 24
45.86.186.0/23 maxlen: 24
188.214.112.0/22 maxlen: 24
89.35.231.0/24 maxlen: 24
188.214.116.0/22 maxlen: 24
188.214.112.0/21 maxlen: 24
188.214.118.0/24 maxlen: 24
188.213.80.0/23 maxlen: 24
92.119.0.0/22 maxlen: 24
188.213.82.0/23 maxlen: 24
188.213.83.0/24 maxlen: 24
188.213.80.0/22 maxlen: 24
92.119.2.0/23 maxlen: 24
92.119.0.0/23 maxlen: 24
37.156.110.0/23 maxlen: 24
37.156.108.0/23 maxlen: 24
37.156.108.0/22 maxlen: 24
185.41.244.0/22 maxlen: 24
195.82.98.0/23 maxlen: 24
195.82.98.0/24 maxlen: 24
185.41.244.0/23 maxlen: 24
185.41.246.0/23 maxlen: 24
195.82.99.0/24 maxlen: 24
87.247.130.0/23 maxlen: 24
87.247.128.0/23 maxlen: 24
87.247.128.0/22 maxlen: 24
45.14.206.0/24 maxlen: 24
5.183.58.0/23 maxlen: 24
5.183.56.0/23 maxlen: 24
45.14.204.0/23 maxlen: 24
5.183.56.0/22 maxlen: 24
45.14.204.0/22 maxlen: 24
37.156.78.0/23 maxlen: 24
37.156.76.0/23 maxlen: 24
45.14.207.0/24 maxlen: 24
37.156.76.0/22 maxlen: 24
139.28.88.0/22 maxlen: 24
89.44.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 14:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c6:86:1e:f4:51:53:8f:2c:08:ea:10:95:f2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=777c3761d95d853799788b94bab5d34fac3edaa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bc:64:37:ae:de:0d:28:95:5b:52:91:2e:32:
ce:37:21:45:51:45:d6:09:33:54:ed:7e:fe:c7:af:
0f:4a:79:f1:48:ef:e9:d4:64:ee:e5:bd:14:53:66:
e5:1b:0b:a5:20:42:67:a6:78:ec:68:c9:88:6c:92:
61:99:f9:ec:14:ed:9a:03:65:0b:2a:b8:2f:45:68:
a2:a3:51:a5:93:dc:31:4e:9e:af:64:bc:ed:bd:64:
e9:a3:94:cf:b6:59:5f:68:6f:6c:5f:f2:e1:9d:0f:
e3:b2:75:d1:a5:80:5a:e5:ea:d3:43:ef:65:99:90:
c1:22:8b:27:95:dc:b0:d0:57:66:0f:d2:ad:6b:cd:
16:75:6b:01:6f:35:d5:52:4d:5f:1c:ad:4d:ea:21:
b3:94:ec:3a:c8:20:52:a4:f0:b6:1a:64:79:8c:90:
e1:ae:80:d2:a1:d7:72:d2:6e:99:e4:70:7b:6d:4d:
b4:4f:67:3d:cc:8c:d9:8d:b8:4b:a0:88:12:be:0b:
eb:b1:58:e2:fc:90:23:f1:27:bb:fb:bb:a2:44:62:
11:88:e9:b0:0e:ba:e5:44:df:82:6e:fa:2d:fc:be:
49:c9:89:c9:98:16:34:75:aa:e6:e4:44:41:5b:70:
1d:6b:3e:65:a6:7d:2d:52:55:99:1e:13:c9:2a:87:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7C:37:61:D9:5D:85:37:99:78:8B:94:BA:B5:D3:4F:AC:3E:DA:A1
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/d3w3YdldhTeZeIuUurXTT6w-2qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.56.0/22
37.156.76.0/22
37.156.108.0/22
45.14.204.0/22
45.86.184.0/22
85.204.200.0/21
87.247.128.0/22
89.35.231.0/24
89.39.167.0/24
89.44.82.0/24
89.45.220.0/22
89.46.32.0/24
89.46.35.0/24
89.46.37.0/24
89.46.39.0/24
89.46.247.0/24
92.119.0.0/22
94.177.0.0/22
139.28.88.0/22
185.41.244.0/22
185.56.76.0/22
185.87.128.0/22
185.228.244.0/22
188.212.16.0/22
188.213.80.0/22
188.214.112.0/21
194.124.56.0/22
195.82.98.0/23
Signature Algorithm: sha256WithRSAEncryption
81:b5:ed:19:75:57:b3:d3:ba:b9:74:c9:be:55:db:e6:8a:18:
10:53:48:8d:fa:f3:dc:3d:7c:3a:cd:88:21:a1:7c:3e:ca:f1:
d1:9d:cf:7e:45:1b:d6:f9:7a:70:68:84:fa:50:cb:e3:6d:6d:
37:84:1e:d7:2f:b7:81:2c:6c:d6:43:1c:c3:a4:82:d5:5e:ea:
f7:71:66:4c:7c:0c:7f:16:97:42:ea:f0:f9:bc:48:06:1c:b9:
b4:1c:92:3a:79:9d:2a:d0:16:a8:1b:12:c7:4b:d0:f0:8d:6c:
1e:7e:74:a4:40:1f:4f:9a:69:3a:a7:f0:6e:89:49:09:8c:cf:
92:fb:3e:99:6f:19:79:6d:2d:d8:be:45:67:2b:80:04:bb:9c:
51:b6:73:46:23:74:d5:01:9a:36:33:4a:18:28:f2:69:d0:93:
f4:80:24:c0:0e:43:b4:a9:eb:43:fa:5d:e7:5a:9a:de:d9:f2:
26:3a:97:62:95:e8:dd:2c:e6:47:25:47:3e:e0:6e:63:f7:4e:
86:be:30:7a:f0:5f:40:6f:59:59:12:ae:99:fd:ff:01:3d:0c:
55:00:37:1f:b3:b9:db:f9:4b:52:23:92:4d:c8:7d:81:d4:f6:
43:3d:a8:be:19:86:43:38:2a:38:ab:e0:d1:3e:e2:2b:88:d2:
3f:a0:df:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org