Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/OtvGUZ00rKd4FJHjXcO1dXAS3g8.roa
File: OtvGUZ00rKd4FJHjXcO1dXAS3g8.roa (raw, json)
Hash identifier: YLjYNfxoGMYtFoMYPi1V15XUvF/1wCKDyPT8zE5hflE=
Subject key identifier: 3A:DB:C6:51:9D:34:AC:A7:78:14:91:E3:5D:C3:B5:75:70:12:DE:0F
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018B866DABA3D00CB61E08CDCA99341BC760
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/OtvGUZ00rKd4FJHjXcO1dXAS3g8.roa
Signing time: Tue 31 Oct 2023 15:50:15 +0000
ROA not before: Tue 31 Oct 2023 15:50:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31083
IP address blocks: 79.124.4.0/24 maxlen: 24
79.124.5.0/24 maxlen: 24
79.124.6.0/24 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.151.0/24 maxlen: 24
217.174.148.0/23 maxlen: 24
217.174.146.0/23 maxlen: 24
79.124.17.0/24 maxlen: 24
79.124.16.0/24 maxlen: 24
79.124.14.0/24 maxlen: 24
217.174.155.0/24 maxlen: 24
79.124.22.0/24 maxlen: 24
79.124.31.0/24 maxlen: 24
79.124.29.0/24 maxlen: 24
79.124.44.0/24 maxlen: 24
79.124.52.0/24 maxlen: 24
79.124.64.0/24 maxlen: 24
79.124.63.0/24 maxlen: 24
79.124.66.0/24 maxlen: 24
79.124.67.0/24 maxlen: 24
79.124.65.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.75.0/24 maxlen: 24
79.124.84.0/24 maxlen: 24
79.124.90.0/24 maxlen: 24
77.76.14.0/24 maxlen: 24
94.72.136.0/22 maxlen: 24
185.197.152.0/22 maxlen: 24
82.118.243.0/24 maxlen: 24
178.132.87.0/24 maxlen: 24
178.132.86.0/24 maxlen: 24
82.118.229.0/24 maxlen: 24
78.128.62.0/24 maxlen: 24
78.128.63.0/24 maxlen: 24
78.128.60.0/24 maxlen: 24
5.104.175.0/24 maxlen: 24
78.128.78.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
78.128.77.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
78.128.80.0/24 maxlen: 24
91.148.148.0/24 maxlen: 24
78.128.1.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.9.0/24 maxlen: 24
78.128.7.0/24 maxlen: 24
78.128.6.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
78.128.42.0/24 maxlen: 24
185.232.156.0/23 maxlen: 24
130.185.232.0/24 maxlen: 24
78.142.32.0/24 maxlen: 24
78.142.51.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
78.142.58.0/24 maxlen: 24
78.142.56.0/24 maxlen: 24
78.142.57.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
78.142.62.0/24 maxlen: 24
78.142.59.0/24 maxlen: 24
78.128.118.0/24 maxlen: 24
91.148.168.0/24 maxlen: 24
91.148.167.0/24 maxlen: 24
78.128.126.0/24 maxlen: 24
78.142.6.0/24 maxlen: 24
130.185.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:86:6d:ab:a3:d0:0c:b6:1e:08:cd:ca:99:34:1b:c7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Oct 31 15:50:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3adbc6519d34aca7781491e35dc3b5757012de0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:82:94:c5:37:c1:b3:e4:09:84:fd:c4:88:85:
18:9a:99:1c:c2:49:be:80:87:5c:94:43:46:b6:6c:
b9:9d:43:6e:59:77:a7:84:a5:7c:70:0d:cd:fc:1a:
88:a0:6e:44:ed:ac:6e:72:2b:6e:01:6c:08:60:bd:
f0:98:55:3e:27:bd:87:ac:ee:cb:2c:64:4b:a6:a9:
47:36:27:d0:a7:57:59:80:15:53:bf:1f:df:ad:e2:
91:56:c6:75:19:2b:e4:7d:8a:c8:b4:90:c4:0f:66:
27:e9:d7:19:9e:5f:8a:8e:b0:76:e6:31:7e:ee:1e:
a6:33:73:fa:dd:8c:86:58:6a:44:d8:e8:68:44:36:
64:7a:e9:8c:f1:cf:a3:f8:12:e1:1d:2c:d4:ec:19:
3d:a1:e3:80:4a:52:aa:20:c0:50:f9:fd:0c:af:01:
6b:ab:85:3e:97:27:ad:68:c4:ff:ee:97:65:09:01:
36:79:04:74:f3:3d:f4:c9:be:23:5b:25:5b:a3:b5:
00:b2:77:de:16:c8:65:8f:97:da:d4:e3:7f:c6:59:
ed:4d:90:c8:e8:40:54:f9:dd:7a:d7:ba:e4:92:37:
34:99:9d:a4:49:ee:79:22:2a:d2:83:36:fc:14:70:
e5:27:4e:27:a9:c7:68:65:73:79:27:9a:a6:67:8c:
ab:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DB:C6:51:9D:34:AC:A7:78:14:91:E3:5D:C3:B5:75:70:12:DE:0F
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/OtvGUZ00rKd4FJHjXcO1dXAS3g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.175.0/24
77.76.14.0/24
78.128.1.0/24
78.128.6.0-78.128.9.255
78.128.42.0/23
78.128.60.0/24
78.128.62.0/23
78.128.76.0-78.128.78.255
78.128.80.0/23
78.128.118.0/24
78.128.126.0/24
78.142.6.0/24
78.142.32.0/24
78.142.47.0/24
78.142.51.0/24
78.142.56.0/22
78.142.62.0/23
79.124.4.0-79.124.6.255
79.124.14.0/24
79.124.16.0/23
79.124.22.0/24
79.124.29.0/24
79.124.31.0/24
79.124.44.0/24
79.124.52.0/24
79.124.63.0-79.124.67.255
79.124.75.0-79.124.76.255
79.124.84.0/24
79.124.90.0/24
82.118.229.0/24
82.118.243.0/24
91.148.148.0/24
91.148.167.0-91.148.168.255
94.72.136.0/22
130.185.225.0/24
130.185.232.0/24
178.132.86.0/23
185.197.152.0/22
185.232.156.0/23
217.174.146.0-217.174.149.255
217.174.151.0-217.174.153.255
217.174.155.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ab:c1:30:0e:87:a8:23:6e:26:1a:5b:a2:b6:86:1f:37:75:
cf:0f:9a:27:45:ac:05:4e:35:42:f2:7d:42:73:c2:ec:5f:e4:
da:ec:5e:00:00:1f:d6:be:18:c2:67:34:1f:15:48:10:76:49:
3b:a8:ea:b6:88:33:89:c2:32:72:07:1d:69:7a:9d:b6:79:df:
5f:ee:64:82:e8:3f:8e:6c:fa:b1:53:11:99:8e:d6:41:8a:17:
9f:37:73:70:36:7f:d8:78:11:f0:df:6b:a1:0b:ca:30:9f:2a:
e8:d3:bb:57:d6:18:cd:dd:f5:aa:2d:58:e1:d0:0b:c1:cf:1c:
a9:6c:4d:b3:7b:94:36:b9:2a:08:3b:60:50:69:31:8e:b4:fb:
12:a0:e0:a1:e4:56:8d:de:b4:26:4b:8d:d9:a6:a2:32:05:e4:
9d:7f:a1:89:b7:a7:34:46:e8:dc:11:d7:15:9f:67:11:62:67:
29:11:79:22:81:3c:e2:fd:e5:63:62:06:42:63:ba:9b:9c:68:
d4:ee:bd:36:a0:7a:18:e6:f0:5e:f0:96:59:10:a1:9e:3c:56:
95:63:8b:e8:41:20:d0:0d:8b:94:b5:a8:fb:10:9f:98:6b:b6:
4d:ed:26:b2:ac:39:a6:8d:3f:48:f5:58:18:7d:3e:25:bc:cc:
b1:db:28:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:15 2024 by rpki-client on console-fra.rpki-client.org