Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kSewNrEJK_nHHcIj3tNWmjJq-vw.roa
File: kSewNrEJK_nHHcIj3tNWmjJq-vw.roa (raw, json)
Hash identifier: /bM4qVoQuw5S1qxPLIPBif4De+df+h29zprpzqiKLoI=
Subject key identifier: 91:27:B0:36:B1:09:2B:F9:C7:1D:C2:23:DE:D3:56:9A:32:6A:FA:FC
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018CC56EE9B5976F4BEC04C22170FFD65F47
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kSewNrEJK_nHHcIj3tNWmjJq-vw.roa
Signing time: Mon 01 Jan 2024 14:30:29 +0000
ROA not before: Mon 01 Jan 2024 14:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31083
IP address blocks: 79.124.4.0/24 maxlen: 24
79.124.5.0/24 maxlen: 24
79.124.6.0/24 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.148.0/23 maxlen: 24
217.174.146.0/23 maxlen: 24
79.124.17.0/24 maxlen: 24
79.124.16.0/24 maxlen: 24
79.124.14.0/24 maxlen: 24
217.174.151.0/24 maxlen: 24
79.124.22.0/24 maxlen: 24
217.174.155.0/24 maxlen: 24
79.124.31.0/24 maxlen: 24
79.124.29.0/24 maxlen: 24
79.124.44.0/24 maxlen: 24
79.124.52.0/24 maxlen: 24
79.124.64.0/24 maxlen: 24
79.124.63.0/24 maxlen: 24
79.124.66.0/24 maxlen: 24
79.124.67.0/24 maxlen: 24
79.124.65.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.75.0/24 maxlen: 24
79.124.84.0/24 maxlen: 24
79.124.90.0/24 maxlen: 24
77.76.14.0/24 maxlen: 24
94.72.136.0/22 maxlen: 24
185.197.152.0/22 maxlen: 24
82.118.243.0/24 maxlen: 24
178.132.87.0/24 maxlen: 24
178.132.86.0/24 maxlen: 24
82.118.229.0/24 maxlen: 24
78.128.62.0/24 maxlen: 24
78.128.63.0/24 maxlen: 24
78.128.60.0/24 maxlen: 24
5.104.175.0/24 maxlen: 24
78.128.78.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
78.128.77.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
78.128.80.0/24 maxlen: 24
91.148.148.0/24 maxlen: 24
78.128.1.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.9.0/24 maxlen: 24
78.128.7.0/24 maxlen: 24
78.128.6.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
78.128.42.0/24 maxlen: 24
185.232.156.0/23 maxlen: 24
130.185.232.0/24 maxlen: 24
78.142.32.0/24 maxlen: 24
78.142.51.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
78.142.58.0/24 maxlen: 24
78.142.56.0/24 maxlen: 24
78.142.57.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
78.142.62.0/24 maxlen: 24
78.142.59.0/24 maxlen: 24
78.128.118.0/24 maxlen: 24
91.148.168.0/24 maxlen: 24
91.148.167.0/24 maxlen: 24
78.128.126.0/24 maxlen: 24
78.142.6.0/24 maxlen: 24
130.185.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 15:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e9:b5:97:6f:4b:ec:04:c2:21:70:ff:d6:5f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 14:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9127b036b1092bf9c71dc223ded3569a326afafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:e8:2d:e2:34:72:4e:b2:4b:b8:6b:46:4f:
96:df:20:81:e0:6d:13:34:cb:42:e4:aa:f8:54:7a:
f8:db:32:0f:94:f2:ca:62:83:51:a8:8b:ed:78:63:
6c:83:d8:6f:87:47:60:51:56:88:33:4f:13:6e:4d:
f3:37:4c:30:92:51:53:00:97:a9:58:ad:75:a7:01:
8e:c1:6b:30:b4:e6:d5:3d:f7:78:4a:b8:4e:7a:fe:
71:12:8c:af:d9:bf:79:e6:10:2a:02:e0:11:88:ec:
06:02:de:52:74:2f:da:6c:e2:63:da:a4:bb:3a:95:
55:f8:5c:85:29:bb:c6:b6:04:88:21:02:16:b3:a5:
2e:cd:d4:66:0a:a9:9e:d1:19:6f:15:1d:ce:5f:a6:
f9:cb:6d:c4:a4:89:9b:dc:42:65:4a:1e:cb:5a:c3:
70:0d:d4:11:40:19:f3:1d:09:81:85:e8:ef:3e:e0:
29:60:20:c0:d5:d8:d1:c7:01:3b:74:0e:c3:3b:11:
9c:93:69:42:43:ac:75:dc:3b:d7:02:95:f8:56:4b:
2e:53:99:21:00:68:55:1a:c4:ef:6d:d6:82:a5:8e:
fb:ee:29:50:5a:11:3d:c3:12:ab:bb:8d:a8:25:93:
46:0d:85:5b:f2:43:38:4d:47:7d:29:51:04:46:46:
3a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:27:B0:36:B1:09:2B:F9:C7:1D:C2:23:DE:D3:56:9A:32:6A:FA:FC
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kSewNrEJK_nHHcIj3tNWmjJq-vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.175.0/24
77.76.14.0/24
78.128.1.0/24
78.128.6.0-78.128.9.255
78.128.42.0/23
78.128.60.0/24
78.128.62.0/23
78.128.76.0-78.128.78.255
78.128.80.0/23
78.128.118.0/24
78.128.126.0/24
78.142.6.0/24
78.142.32.0/24
78.142.47.0/24
78.142.51.0/24
78.142.56.0/22
78.142.62.0/23
79.124.4.0-79.124.6.255
79.124.14.0/24
79.124.16.0/23
79.124.22.0/24
79.124.29.0/24
79.124.31.0/24
79.124.44.0/24
79.124.52.0/24
79.124.63.0-79.124.67.255
79.124.75.0-79.124.76.255
79.124.84.0/24
79.124.90.0/24
82.118.229.0/24
82.118.243.0/24
91.148.148.0/24
91.148.167.0-91.148.168.255
94.72.136.0/22
130.185.225.0/24
130.185.232.0/24
178.132.86.0/23
185.197.152.0/22
185.232.156.0/23
217.174.146.0-217.174.149.255
217.174.151.0-217.174.153.255
217.174.155.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:a0:a3:da:ea:42:33:98:38:ab:72:da:c1:46:6a:47:c1:88:
3f:9b:20:cb:1e:84:34:1a:fb:36:d9:b0:07:57:13:2e:cb:68:
a0:bd:08:57:49:e3:c4:c3:f1:7c:71:c1:ee:ba:f8:ed:d7:34:
0e:9d:b5:05:a1:6c:c7:82:e9:9a:94:d0:40:10:f1:a3:38:e7:
21:26:fb:78:17:f2:fd:4e:24:1c:d7:63:29:52:dd:29:0f:c9:
cb:72:f5:3c:54:5e:7d:0c:e2:5f:88:7e:2e:8b:3a:b2:c8:5a:
d6:9b:b3:d3:93:ee:3a:ae:9e:c9:e0:90:c6:8f:0b:0a:5a:39:
b3:0d:20:15:16:91:f0:30:7f:d1:cc:77:6d:fb:b8:5f:26:e8:
2f:85:f9:ef:97:01:01:65:ec:c0:7b:03:f4:65:a1:6c:6e:ae:
cf:2a:e3:97:99:19:74:b2:2d:2e:24:ff:26:be:30:61:51:7f:
93:e8:85:5d:e2:c8:50:1d:d2:db:08:40:54:f9:ac:5d:35:22:
38:a8:06:f4:62:d9:2a:30:a3:f7:a9:81:97:54:d4:14:60:4e:
7b:98:72:e7:de:69:40:65:b2:1d:21:a5:04:0c:21:33:9d:d4:
6c:88:f0:a3:b4:79:69:e4:e9:6b:25:c5:f7:77:5f:36:70:4f:
b8:11:ee:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 20:16:35 2024 by rpki-client on console-ams.rpki-client.org