Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7RrSP72uX8hnJxLfl7alv_vJSjs.roa
File: 7RrSP72uX8hnJxLfl7alv_vJSjs.roa (raw, json)
Hash identifier: HESqrQeFM2RScRpr6/cz3qtgPrm3ge6ZNUdcisQ+lEA=
Subject key identifier: ED:1A:D2:3F:BD:AE:5F:C8:67:27:12:DF:97:B6:A5:BF:FB:C9:4A:3B
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018963D7C396BC38D96A269C602A06E3AB2F
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7RrSP72uX8hnJxLfl7alv_vJSjs.roa
Signing time: Mon 17 Jul 2023 12:33:51 +0000
ROA not before: Mon 17 Jul 2023 12:33:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31083
IP address blocks: 79.124.4.0/24 maxlen: 24
79.124.5.0/24 maxlen: 24
79.124.6.0/24 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.151.0/24 maxlen: 24
217.174.148.0/23 maxlen: 24
217.174.146.0/23 maxlen: 24
79.124.17.0/24 maxlen: 24
79.124.16.0/24 maxlen: 24
79.124.14.0/24 maxlen: 24
79.124.13.0/24 maxlen: 24
217.174.155.0/24 maxlen: 24
79.124.22.0/24 maxlen: 24
79.124.31.0/24 maxlen: 24
79.124.29.0/24 maxlen: 24
79.124.44.0/24 maxlen: 24
79.124.52.0/24 maxlen: 24
79.124.64.0/24 maxlen: 24
79.124.63.0/24 maxlen: 24
79.124.66.0/24 maxlen: 24
79.124.67.0/24 maxlen: 24
79.124.65.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.75.0/24 maxlen: 24
79.124.84.0/24 maxlen: 24
79.124.90.0/24 maxlen: 24
185.197.152.0/22 maxlen: 24
82.118.243.0/24 maxlen: 24
178.132.87.0/24 maxlen: 24
178.132.86.0/24 maxlen: 24
82.118.229.0/24 maxlen: 24
78.128.62.0/24 maxlen: 24
78.128.63.0/24 maxlen: 24
78.128.60.0/24 maxlen: 24
5.104.175.0/24 maxlen: 24
78.128.78.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
78.128.77.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
78.128.80.0/24 maxlen: 24
91.148.148.0/24 maxlen: 24
78.128.1.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.9.0/24 maxlen: 24
78.128.7.0/24 maxlen: 24
78.128.6.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
78.128.42.0/24 maxlen: 24
185.232.156.0/23 maxlen: 24
130.185.232.0/24 maxlen: 24
78.142.32.0/24 maxlen: 24
78.142.51.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
78.142.58.0/24 maxlen: 24
78.142.56.0/24 maxlen: 24
78.142.57.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
78.142.62.0/24 maxlen: 24
78.142.59.0/24 maxlen: 24
78.128.118.0/24 maxlen: 24
91.148.168.0/24 maxlen: 24
91.148.167.0/24 maxlen: 24
78.128.126.0/24 maxlen: 24
78.142.6.0/24 maxlen: 24
130.185.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 13:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:d7:c3:96:bc:38:d9:6a:26:9c:60:2a:06:e3:ab:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jul 17 12:33:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed1ad23fbdae5fc8672712df97b6a5bffbc94a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:d3:30:0a:73:c5:e7:b6:f8:b1:c6:b2:11:
f0:3e:3d:e9:f4:9d:38:8b:d0:9e:ad:ac:87:ab:e4:
54:ff:43:4d:c1:f3:e9:cd:21:9f:a5:fa:1e:bf:d0:
5c:2d:be:eb:86:54:73:f5:04:14:3f:3f:05:cb:a5:
a2:00:7b:57:3b:bf:cf:56:a7:4f:74:a4:80:1a:c1:
8e:c7:d2:cc:74:3c:8d:bd:fe:47:94:9a:73:94:1c:
7c:aa:5f:b5:d6:d1:d5:eb:bd:34:9b:36:dc:bb:3e:
77:92:17:79:d9:ce:c0:4e:36:5d:31:24:e1:eb:46:
5f:c4:82:e8:98:50:9f:0c:e2:3e:f1:37:75:e4:d0:
3d:5a:bb:88:07:15:65:65:58:d2:52:46:9c:77:75:
85:cb:5a:2d:bb:9f:e2:f1:64:6a:10:76:88:05:9c:
e7:07:81:10:09:ba:95:f5:ab:bb:9a:ab:49:4f:40:
7c:0d:e4:ec:af:5a:6b:ae:64:23:fc:07:71:57:8d:
69:2e:64:05:64:83:1e:1b:b5:8f:94:cb:08:ca:57:
ac:28:fb:4d:e6:b6:6c:52:e8:5b:db:dc:ae:e4:11:
bc:c4:93:39:11:71:73:3e:4e:61:ee:51:68:7a:22:
3b:cb:40:9f:dd:52:e6:84:d6:c2:ed:77:36:a1:d8:
99:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1A:D2:3F:BD:AE:5F:C8:67:27:12:DF:97:B6:A5:BF:FB:C9:4A:3B
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7RrSP72uX8hnJxLfl7alv_vJSjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.175.0/24
78.128.1.0/24
78.128.6.0-78.128.9.255
78.128.42.0/23
78.128.60.0/24
78.128.62.0/23
78.128.76.0-78.128.78.255
78.128.80.0/23
78.128.118.0/24
78.128.126.0/24
78.142.6.0/24
78.142.32.0/24
78.142.47.0/24
78.142.51.0/24
78.142.56.0/22
78.142.62.0/23
79.124.4.0-79.124.6.255
79.124.13.0-79.124.14.255
79.124.16.0/23
79.124.22.0/24
79.124.29.0/24
79.124.31.0/24
79.124.44.0/24
79.124.52.0/24
79.124.63.0-79.124.67.255
79.124.75.0-79.124.76.255
79.124.84.0/24
79.124.90.0/24
82.118.229.0/24
82.118.243.0/24
91.148.148.0/24
91.148.167.0-91.148.168.255
130.185.225.0/24
130.185.232.0/24
178.132.86.0/23
185.197.152.0/22
185.232.156.0/23
217.174.146.0-217.174.149.255
217.174.151.0-217.174.153.255
217.174.155.0/24
Signature Algorithm: sha256WithRSAEncryption
50:0e:25:34:fe:80:52:65:0c:48:81:66:e4:12:a3:f2:48:84:
4b:fd:f0:24:0e:be:b2:d2:51:c4:ad:e6:59:81:5f:97:85:14:
38:26:e1:46:f1:18:2b:15:b5:30:2d:9e:07:28:40:78:b9:e2:
99:ef:33:8f:9f:8b:31:76:28:24:43:94:27:c3:f4:2a:8e:73:
63:fa:37:a2:bf:62:c2:55:74:9a:0e:f3:61:62:14:2c:c4:81:
f8:56:14:8c:c0:fc:f9:31:ee:ae:40:e6:13:f1:54:bf:b9:e2:
5a:55:21:71:fe:2b:2f:34:6e:95:0a:0d:9b:5e:ff:07:38:8e:
e1:9e:6e:15:37:b5:af:8f:75:f9:93:3f:61:f4:78:63:12:7b:
e3:db:3e:d8:f4:be:6b:f7:12:d7:31:81:67:35:a1:f5:2f:6c:
55:b8:2b:84:22:22:a1:a6:fd:5b:28:a5:54:94:e7:44:7d:04:
b1:c2:71:c8:95:f9:1d:b4:b8:61:1c:64:fe:20:34:05:45:21:
4b:ed:93:83:d0:3c:e5:4e:c8:bd:5f:40:ce:82:b5:b6:df:77:
9e:4c:38:dc:e1:5a:de:db:f9:d1:68:15:c7:61:b1:46:70:45:
44:3e:38:93:aa:ed:a3:bb:8f:a2:f9:7c:e7:72:75:d5:3d:49:
80:38:e2:b6
-----BEGIN CERTIFICATE-----
MIIGOTCCBSGgAwIBAgISAYlj18OWvDjZaiacYCoG46svMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjMwNzE3MTIzMzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDFhZDIzZmJkYWU1ZmM4NjcyNzEyZGY5N2I2YTViZmZiYzk0YTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDzTMApzxee2+LHGshHwPj3p9J04
i9CerayHq+RU/0NNwfPpzSGfpfoev9BcLb7rhlRz9QQUPz8Fy6WiAHtXO7/PVqdP
dKSAGsGOx9LMdDyNvf5HlJpzlBx8ql+11tHV6700mzbcuz53khd52c7ATjZdMSTh
60ZfxILomFCfDOI+8Td15NA9WruIBxVlZVjSUkacd3WFy1otu5/i8WRqEHaIBZzn
B4EQCbqV9au7mqtJT0B8DeTsr1prrmQj/AdxV41pLmQFZIMeG7WPlMsIylesKPtN
5rZsUuhb29yu5BG8xJM5EXFzPk5h7lFoeiI7y0Cf3VLmhNbC7Xc2odiZtQIDAQAB
o4IDRTCCA0EwHQYDVR0OBBYEFO0a0j+9rl/IZycS35e2pb/7yUo7MB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvN1JyU1A3MnVYOGhuSnhMZmw3YWx2X3ZKU2pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBWQYIKwYBBQUHAQcBAf8EggFIMIIBRDCCAUAEAgABMIIB
OAMEAAVorwMEAE6AATAMAwQBToAGAwQBToAIAwQBToAqAwQAToA8AwQBToA+MAwD
BAJOgEwDBABOgE4DBAFOgFADBABOgHYDBABOgH4DBABOjgYDBABOjiADBABOji8D
BABOjjMDBAJOjjgDBAFOjj4wDAMEAk98BAMEAE98BjAMAwQAT3wNAwQAT3wOAwQB
T3wQAwQAT3wWAwQAT3wdAwQAT3wfAwQAT3wsAwQAT3w0MAwDBABPfD8DBAJPfEAw
DAMEAE98SwMEAE98TAMEAE98VAMEAE98WgMEAFJ25QMEAFJ28wMEAFuUlDAMAwQA
W5SnAwQAW5SoAwQAgrnhAwQAgrnoAwQBsoRWAwQCucWYAwQBueicMAwDBAHZrpID
BAHZrpQwDAMEANmulwMEAdmumAMEANmumzANBgkqhkiG9w0BAQsFAAOCAQEAUA4l
NP6AUmUMSIFm5BKj8kiES/3wJA6+stJRxK3mWYFfl4UUOCbhRvEYKxW1MC2eByhA
eLnime8zj5+LMXYoJEOUJ8P0Ko5zY/o3or9iwlV0mg7zYWIULMSB+FYUjMD8+THu
rkDmE/FUv7niWlUhcf4rLzRulQoNm17/BziO4Z5uFTe1r491+ZM/YfR4YxJ749s+
2PS+a/cS1zGBZzWh9S9sVbgrhCIioab9WyilVJTnRH0EscJxyJX5HbS4YRxk/iA0
BUUhS+2Tg9A85U7IvV9AzoK1tt93nkw43OFa3tv50WgVx2GxRnBFRD44k6rto7uP
ovl853J11T1JgDjitg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org