Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/PPBpdw4csLqO7hsxwoIJtgldE70.roa
File: PPBpdw4csLqO7hsxwoIJtgldE70.roa (raw, json)
Hash identifier: FTszFPuDQZWJrRzeZnZZpBXuff5jIWbGAp6rClLo7qE=
Subject key identifier: 3C:F0:69:77:0E:1C:B0:BA:8E:EE:1B:31:C2:82:09:B6:09:5D:13:BD
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018B19DADD8F9EC4B5A1AF23BEA82DDC512A
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/PPBpdw4csLqO7hsxwoIJtgldE70.roa
Signing time: Tue 10 Oct 2023 13:50:55 +0000
ROA not before: Tue 10 Oct 2023 13:50:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31083
IP address blocks: 79.124.4.0/24 maxlen: 24
79.124.5.0/24 maxlen: 24
79.124.6.0/24 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.151.0/24 maxlen: 24
217.174.148.0/23 maxlen: 24
217.174.146.0/23 maxlen: 24
79.124.17.0/24 maxlen: 24
79.124.16.0/24 maxlen: 24
79.124.14.0/24 maxlen: 24
79.124.13.0/24 maxlen: 24
217.174.155.0/24 maxlen: 24
79.124.22.0/24 maxlen: 24
79.124.31.0/24 maxlen: 24
79.124.29.0/24 maxlen: 24
79.124.44.0/24 maxlen: 24
79.124.52.0/24 maxlen: 24
79.124.64.0/24 maxlen: 24
79.124.63.0/24 maxlen: 24
79.124.66.0/24 maxlen: 24
79.124.67.0/24 maxlen: 24
79.124.65.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.75.0/24 maxlen: 24
79.124.84.0/24 maxlen: 24
79.124.90.0/24 maxlen: 24
94.72.136.0/22 maxlen: 24
185.197.152.0/22 maxlen: 24
82.118.243.0/24 maxlen: 24
178.132.87.0/24 maxlen: 24
178.132.86.0/24 maxlen: 24
82.118.229.0/24 maxlen: 24
78.128.62.0/24 maxlen: 24
78.128.63.0/24 maxlen: 24
78.128.60.0/24 maxlen: 24
5.104.175.0/24 maxlen: 24
78.128.78.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
78.128.77.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
78.128.80.0/24 maxlen: 24
91.148.148.0/24 maxlen: 24
78.128.1.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.9.0/24 maxlen: 24
78.128.7.0/24 maxlen: 24
78.128.6.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
78.128.42.0/24 maxlen: 24
185.232.156.0/23 maxlen: 24
130.185.232.0/24 maxlen: 24
78.142.32.0/24 maxlen: 24
78.142.51.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
78.142.58.0/24 maxlen: 24
78.142.56.0/24 maxlen: 24
78.142.57.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
78.142.62.0/24 maxlen: 24
78.142.59.0/24 maxlen: 24
78.128.118.0/24 maxlen: 24
91.148.168.0/24 maxlen: 24
91.148.167.0/24 maxlen: 24
78.128.126.0/24 maxlen: 24
78.142.6.0/24 maxlen: 24
130.185.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:da:dd:8f:9e:c4:b5:a1:af:23:be:a8:2d:dc:51:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Oct 10 13:50:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cf069770e1cb0ba8eee1b31c28209b6095d13bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:46:4c:a1:4c:14:b9:56:6f:fe:9e:bf:ec:8f:
96:44:2b:fd:3d:d5:09:2a:30:e2:be:d3:16:82:af:
8f:d4:54:12:a9:1e:70:a9:4f:fb:06:ef:7b:b1:5c:
9c:63:b6:28:02:0a:b9:20:63:13:8d:c9:0b:bd:ca:
da:29:07:06:3e:78:fd:35:2a:e1:96:43:04:c5:31:
44:61:86:1d:c1:31:51:72:a5:9f:2c:37:ff:99:6a:
2d:eb:74:50:4b:1b:58:95:61:cc:8a:81:3b:7e:1f:
20:9e:64:1e:c1:59:30:99:50:38:a7:bf:9c:43:24:
ee:a6:5f:01:de:a8:df:11:01:ca:d7:69:38:4a:11:
c0:a8:49:b0:d7:5f:b9:8e:c2:65:c1:de:fd:95:fe:
c7:5b:a9:4e:66:de:c7:5e:2d:36:fa:84:b3:44:ad:
d3:8c:46:9e:7f:c5:a8:53:aa:f2:87:5b:b8:e2:6a:
ef:ca:38:16:2d:f0:26:b8:46:df:90:a0:bc:86:d6:
77:a3:4f:9e:97:86:eb:ba:27:36:c4:40:a5:1c:9c:
99:5a:2e:af:15:bb:69:aa:22:c4:33:8a:42:f9:2b:
74:ae:24:2f:75:58:1c:a2:c7:46:71:6f:7c:e0:2a:
e0:7a:3a:37:c6:b5:8a:0b:e4:9a:84:97:b8:a2:67:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F0:69:77:0E:1C:B0:BA:8E:EE:1B:31:C2:82:09:B6:09:5D:13:BD
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/PPBpdw4csLqO7hsxwoIJtgldE70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.175.0/24
78.128.1.0/24
78.128.6.0-78.128.9.255
78.128.42.0/23
78.128.60.0/24
78.128.62.0/23
78.128.76.0-78.128.78.255
78.128.80.0/23
78.128.118.0/24
78.128.126.0/24
78.142.6.0/24
78.142.32.0/24
78.142.47.0/24
78.142.51.0/24
78.142.56.0/22
78.142.62.0/23
79.124.4.0-79.124.6.255
79.124.13.0-79.124.14.255
79.124.16.0/23
79.124.22.0/24
79.124.29.0/24
79.124.31.0/24
79.124.44.0/24
79.124.52.0/24
79.124.63.0-79.124.67.255
79.124.75.0-79.124.76.255
79.124.84.0/24
79.124.90.0/24
82.118.229.0/24
82.118.243.0/24
91.148.148.0/24
91.148.167.0-91.148.168.255
94.72.136.0/22
130.185.225.0/24
130.185.232.0/24
178.132.86.0/23
185.197.152.0/22
185.232.156.0/23
217.174.146.0-217.174.149.255
217.174.151.0-217.174.153.255
217.174.155.0/24
Signature Algorithm: sha256WithRSAEncryption
52:2c:25:94:6a:03:7f:0d:aa:00:d4:e4:d4:94:a3:36:6b:07:
db:ab:97:27:f8:e6:63:1b:80:96:c7:5c:ce:c1:9a:10:1d:08:
4b:3a:a1:30:e7:a7:c1:02:4e:d6:a7:02:ac:8e:f0:bb:91:b8:
2e:8a:a7:07:f3:1a:d1:9b:8c:34:ec:97:b1:71:84:6a:e0:15:
94:37:6b:98:09:0f:63:77:0a:19:15:2c:b4:6d:53:ba:57:cd:
63:ee:95:21:bc:48:0e:7b:f7:49:d9:c6:24:f1:5b:72:16:a7:
6b:43:9f:80:51:ff:00:60:01:46:14:75:f9:54:da:a9:33:e2:
66:aa:05:41:13:22:e6:f5:e5:43:77:d8:3f:d1:75:10:c4:0c:
b4:88:52:19:7f:96:5f:49:5e:17:f6:5a:a1:51:5f:d6:bf:6e:
f0:50:94:ca:df:8c:29:d8:f1:81:42:0f:a1:74:2c:ec:05:79:
da:96:9a:ee:b4:2e:91:93:8a:50:9e:65:41:16:60:14:ae:1e:
dc:45:b8:68:6c:fb:2c:cf:58:db:d5:f5:84:3a:42:1b:a9:42:
33:97:eb:85:fa:2c:e7:2a:9f:45:8c:23:b0:d1:86:b9:35:cd:
e4:1d:d2:67:70:ba:56:1f:0b:13:dd:94:77:d1:03:0a:84:2d:
02:e7:d2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 12:19:10 2023 by rpki-client on console-fra.rpki-client.org