Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/d-TCvBQPk-Nr45AdId1ahrBQyUs.roa
File: d-TCvBQPk-Nr45AdId1ahrBQyUs.roa (raw, json)
Hash identifier: lLLBXkFt3i1OkltbeXeQQMvEGEVriVRHFCvHgiFjJH0=
Subject key identifier: 77:E4:C2:BC:14:0F:93:E3:6B:E3:90:1D:21:DD:5A:86:B0:50:C9:4B
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0192048B92D313FAC3EC286503C78C706ED9
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/d-TCvBQPk-Nr45AdId1ahrBQyUs.roa
Signing time: Wed 18 Sep 2024 09:51:48 +0000
ROA not before: Wed 18 Sep 2024 09:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31083
IP address blocks: 5.104.175.0/24 maxlen: 24
77.76.14.0/24 maxlen: 24
78.128.1.0/24 maxlen: 24
78.128.6.0/24 maxlen: 24
78.128.7.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.9.0/24 maxlen: 24
78.128.42.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
78.128.60.0/24 maxlen: 24
78.128.62.0/24 maxlen: 24
78.128.63.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
78.128.77.0/24 maxlen: 24
78.128.78.0/24 maxlen: 24
78.128.80.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
78.128.118.0/24 maxlen: 24
78.128.126.0/24 maxlen: 24
78.142.6.0/24 maxlen: 24
78.142.32.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
78.142.51.0/24 maxlen: 24
78.142.56.0/24 maxlen: 24
78.142.57.0/24 maxlen: 24
78.142.58.0/24 maxlen: 24
78.142.59.0/24 maxlen: 24
78.142.62.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
79.124.4.0/24 maxlen: 24
79.124.5.0/24 maxlen: 24
79.124.6.0/24 maxlen: 24
79.124.14.0/24 maxlen: 24
79.124.16.0/24 maxlen: 24
79.124.17.0/24 maxlen: 24
79.124.22.0/24 maxlen: 24
79.124.31.0/24 maxlen: 24
79.124.44.0/24 maxlen: 24
79.124.52.0/24 maxlen: 24
79.124.63.0/24 maxlen: 24
79.124.64.0/24 maxlen: 24
79.124.65.0/24 maxlen: 24
79.124.66.0/24 maxlen: 24
79.124.67.0/24 maxlen: 24
79.124.75.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.84.0/24 maxlen: 24
79.124.90.0/24 maxlen: 24
82.118.229.0/24 maxlen: 24
82.118.243.0/24 maxlen: 24
91.148.148.0/24 maxlen: 24
91.148.168.0/24 maxlen: 24
94.72.136.0/22 maxlen: 24
130.185.225.0/24 maxlen: 24
130.185.232.0/24 maxlen: 24
178.132.86.0/24 maxlen: 24
178.132.87.0/24 maxlen: 24
185.197.152.0/22 maxlen: 24
185.232.156.0/23 maxlen: 24
217.174.146.0/23 maxlen: 24
217.174.148.0/23 maxlen: 24
217.174.151.0/24 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 14:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:8b:92:d3:13:fa:c3:ec:28:65:03:c7:8c:70:6e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Sep 18 09:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77e4c2bc140f93e36be3901d21dd5a86b050c94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:8c:5a:ff:0a:57:43:7b:c5:0a:80:4e:94:
b6:d0:90:dd:16:76:0a:bc:03:34:e6:46:f4:2f:d0:
d7:89:28:cc:2d:e1:84:2d:0e:6c:8d:c4:3d:3a:b2:
dd:18:21:6b:5e:87:ac:f5:f3:30:58:71:e0:2d:e1:
78:99:73:29:b1:b9:9f:ec:59:20:1a:f3:93:8e:5b:
bc:c5:42:52:0b:b9:5e:d1:70:00:92:5d:44:df:dd:
71:0e:23:15:96:bf:58:db:af:4d:41:2c:59:77:65:
ca:1e:01:92:e4:ab:c3:dc:57:25:41:c8:af:75:2b:
26:ff:5e:e1:fd:a1:a4:4d:84:65:7b:0b:5a:b9:86:
91:29:ed:23:71:ed:9b:87:3f:d3:2d:f4:b5:34:a5:
5c:14:82:d0:d9:ea:50:2c:23:52:d9:fd:de:5b:81:
6e:70:f7:cd:17:80:88:90:36:4f:fe:89:e7:ff:e7:
ac:09:f6:06:bd:53:61:30:b6:3c:c2:a0:8e:10:0a:
a5:f7:d8:3f:8c:31:6f:74:3d:94:51:3a:f3:69:67:
c4:02:d7:e9:17:fe:e3:40:ba:83:36:e8:f5:03:b7:
af:78:c4:4b:2c:cc:0e:95:46:5a:48:9a:2e:99:9c:
fa:0d:27:88:ed:59:f4:33:2b:53:97:20:c1:8d:07:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E4:C2:BC:14:0F:93:E3:6B:E3:90:1D:21:DD:5A:86:B0:50:C9:4B
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/d-TCvBQPk-Nr45AdId1ahrBQyUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.175.0/24
77.76.14.0/24
78.128.1.0/24
78.128.6.0-78.128.9.255
78.128.42.0/23
78.128.60.0/24
78.128.62.0/23
78.128.76.0-78.128.78.255
78.128.80.0/23
78.128.118.0/24
78.128.126.0/24
78.142.6.0/24
78.142.32.0/24
78.142.47.0/24
78.142.51.0/24
78.142.56.0/22
78.142.62.0/23
79.124.4.0-79.124.6.255
79.124.14.0/24
79.124.16.0/23
79.124.22.0/24
79.124.31.0/24
79.124.44.0/24
79.124.52.0/24
79.124.63.0-79.124.67.255
79.124.75.0-79.124.76.255
79.124.84.0/24
79.124.90.0/24
82.118.229.0/24
82.118.243.0/24
91.148.148.0/24
91.148.168.0/24
94.72.136.0/22
130.185.225.0/24
130.185.232.0/24
178.132.86.0/23
185.197.152.0/22
185.232.156.0/23
217.174.146.0-217.174.149.255
217.174.151.0-217.174.153.255
217.174.155.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:5e:04:e1:01:ae:d8:12:ec:38:9a:bb:f5:a1:05:c7:ed:16:
99:e1:4d:74:33:f5:20:e3:a0:cb:24:4b:f7:82:1a:e7:32:23:
b8:a4:eb:e5:c5:74:ea:c1:45:49:85:03:a4:ee:8c:76:f7:c3:
d1:fe:21:08:31:cf:61:0f:3d:3b:cf:1f:b6:6c:81:46:02:ab:
cd:5f:60:fe:2a:c1:63:e8:a0:07:12:f6:92:92:de:84:00:83:
23:b1:fc:3b:07:f0:65:0a:5d:c2:67:80:f4:21:e3:7d:4f:8b:
2a:fb:99:10:fa:af:53:79:ca:00:3f:e9:f6:9b:4b:dc:cb:12:
d0:0e:06:12:6f:ee:65:74:79:f4:40:d4:7f:37:a0:2f:61:d7:
fb:64:3a:56:6d:52:04:92:61:95:62:2e:ba:c6:2c:f6:cd:87:
c0:da:c3:dc:fd:13:29:63:e2:cd:6e:a3:08:49:b1:51:c0:f3:
79:f7:bf:fa:51:65:10:b5:9b:46:6c:73:ab:53:00:31:d4:ec:
e6:df:c8:4b:73:8a:8e:e9:b8:92:26:f7:f1:74:a0:15:cc:03:
b0:02:ab:fb:a8:15:75:dc:6e:ff:58:3e:6f:57:e6:3b:e5:1b:
c5:66:8e:08:67:7b:be:b6:c4:25:6f:18:b9:73:94:64:d1:4b:
ab:c6:42:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 16:32:39 2024 by rpki-client on console-fra.rpki-client.org