Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/55CB6hTYndwv1Jjn5kJzIdY-UAs.roa
File: 55CB6hTYndwv1Jjn5kJzIdY-UAs.roa (raw, json)
Hash identifier: OoWuYq6UDzTuXv2Fr6OnkKkuhzdZ8iBuddTsh+E7W6s=
Subject key identifier: E7:90:81:EA:14:D8:9D:DC:2F:D4:98:E7:E6:42:73:21:D6:3E:50:0B
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019593D2AD7DE2191FF90A83221A3098E3C9
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/55CB6hTYndwv1Jjn5kJzIdY-UAs.roa
Signing time: Fri 14 Mar 2025 08:43:32 +0000
ROA not before: Fri 14 Mar 2025 08:43:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 77.76.0.0/23 maxlen: 23
77.76.4.0/22 maxlen: 22
78.128.2.0/23 maxlen: 23
78.128.10.0/23 maxlen: 23
78.128.12.0/22 maxlen: 22
78.128.16.0/20 maxlen: 20
78.128.36.0/22 maxlen: 22
78.128.40.0/23 maxlen: 23
78.128.52.0/22 maxlen: 22
78.128.56.0/22 maxlen: 22
78.128.82.0/23 maxlen: 23
78.128.84.0/22 maxlen: 22
78.128.88.0/22 maxlen: 22
78.128.96.0/23 maxlen: 23
78.128.100.0/22 maxlen: 22
78.128.104.0/22 maxlen: 22
78.128.115.0/24 maxlen: 24
78.128.116.0/23 maxlen: 23
78.128.120.0/23 maxlen: 23
78.128.122.0/24 maxlen: 24
78.128.123.0/24 maxlen: 24
78.142.9.0/24 maxlen: 24
78.142.10.0/23 maxlen: 23
78.142.12.0/22 maxlen: 22
78.142.30.0/23 maxlen: 23
79.124.47.0/24 maxlen: 24
83.222.185.0/24 maxlen: 24
84.201.224.0/20 maxlen: 20
91.148.149.0/24 maxlen: 24
91.148.150.0/23 maxlen: 23
91.148.152.0/21 maxlen: 21
91.148.162.0/23 maxlen: 23
91.148.164.0/23 maxlen: 23
91.148.166.0/24 maxlen: 24
91.148.169.0/24 maxlen: 24
91.148.170.0/23 maxlen: 23
91.148.172.0/22 maxlen: 22
91.148.176.0/21 maxlen: 21
91.148.186.0/23 maxlen: 23
130.185.227.0/24 maxlen: 24
193.24.240.0/22 maxlen: 22
193.200.14.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 20 Mar 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:93:d2:ad:7d:e2:19:1f:f9:0a:83:22:1a:30:98:e3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Mar 14 08:43:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e79081ea14d89ddc2fd498e7e6427321d63e500b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:dd:a7:ea:92:fc:ad:dd:fb:43:33:92:56:
25:e7:f8:78:ee:1b:a2:d3:f0:11:f8:58:86:26:b0:
b8:c1:1d:5c:75:2c:02:29:12:ca:0c:54:75:6a:3c:
86:59:e6:d8:cd:15:f4:20:45:c1:1d:86:47:0f:45:
08:21:02:23:0b:33:0f:a6:1e:15:ff:d3:33:ae:f3:
f9:64:a9:0f:ca:ee:82:41:77:e0:51:c0:fc:7b:e5:
be:85:9f:8c:c3:f4:72:75:62:06:ae:20:58:d1:51:
b9:0e:4d:64:ce:96:b2:5a:90:e7:4a:28:b8:e9:7f:
1f:63:64:e5:47:52:a5:da:11:fe:c2:9e:b5:77:7f:
d7:de:a8:30:54:a1:10:7b:7c:74:97:e0:61:48:95:
9d:d4:69:ac:ed:6f:e0:a5:88:86:45:e5:a0:66:f4:
35:4c:e1:ea:ee:52:39:ad:85:95:bb:44:9d:56:58:
5f:55:64:2e:b8:61:ae:d3:66:fd:86:06:eb:1a:9c:
a4:c7:8d:cf:5b:4d:f7:14:ce:e7:b1:b7:ec:96:03:
a1:7c:09:b7:30:3b:56:1d:57:42:dc:c8:84:25:dd:
4a:26:9e:97:92:65:1f:d0:f7:11:e7:19:51:91:3a:
e4:fc:81:d4:af:76:5d:88:87:96:9c:dd:bb:da:a6:
54:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:90:81:EA:14:D8:9D:DC:2F:D4:98:E7:E6:42:73:21:D6:3E:50:0B
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/55CB6hTYndwv1Jjn5kJzIdY-UAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.0.0/23
77.76.4.0/22
78.128.2.0/23
78.128.10.0-78.128.31.255
78.128.36.0-78.128.41.255
78.128.52.0-78.128.59.255
78.128.82.0-78.128.91.255
78.128.96.0/23
78.128.100.0-78.128.107.255
78.128.115.0-78.128.117.255
78.128.120.0/22
78.142.9.0-78.142.15.255
78.142.30.0/23
79.124.47.0/24
83.222.185.0/24
84.201.224.0/20
91.148.149.0-91.148.159.255
91.148.162.0-91.148.166.255
91.148.169.0-91.148.183.255
91.148.186.0/23
130.185.227.0/24
193.24.240.0/22
193.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:98:40:22:de:63:c4:d4:b6:da:91:3a:f5:5d:a1:ff:7e:c3:
91:15:5a:4b:3f:b3:0d:52:67:6d:35:e8:da:43:9f:ac:43:6c:
1d:d5:76:12:6a:c9:9c:9d:5b:d0:4e:d8:b1:1c:a0:28:bd:06:
4d:f4:39:81:00:4e:62:6c:41:67:1e:32:03:71:b6:fa:c2:99:
3d:38:85:36:3d:7d:b8:57:3f:89:15:b8:ac:33:c0:62:f1:3d:
d2:08:9e:35:64:3c:ac:23:7d:2f:e8:f6:8b:53:65:9e:4b:66:
56:55:15:7b:af:68:32:a2:5b:42:29:61:a8:2e:c9:c0:3f:9a:
49:20:28:41:6a:6b:c6:11:9c:50:b7:02:19:28:c7:61:df:43:
a3:0e:68:00:13:f0:63:94:0d:c6:cb:63:e6:5e:7f:8a:56:45:
76:b5:d5:ca:c5:f2:32:c1:26:d5:fd:d4:a7:cc:59:df:88:d1:
f4:ee:95:4d:e0:d2:44:c1:3d:27:49:4f:d8:ed:9e:fe:27:fa:
f2:ae:df:81:8d:26:b5:23:27:91:01:12:9c:38:46:6e:98:02:
d9:fa:e1:19:81:b1:9b:17:24:e9:a6:a5:76:e9:6e:2e:85:e9:
c4:0c:de:9a:cd:e6:ca:17:71:51:42:28:6b:54:86:d9:04:22:
16:ed:d6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:33:41 2025 by rpki-client