Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/leqXSRRU9FJePQgb78ZlqcZzIj0.roa
File: leqXSRRU9FJePQgb78ZlqcZzIj0.roa (raw, json)
Hash identifier: eCQ0twQaUdT9ci3JntNWFLHU8dpbhedr5RkFVTZawCQ=
Subject key identifier: 95:EA:97:49:14:54:F4:52:5E:3D:08:1B:EF:C6:65:A9:C6:73:22:3D
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019428242204D41DD19E40260CC8F9ECD30A
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/leqXSRRU9FJePQgb78ZlqcZzIj0.roa
Signing time: Thu 02 Jan 2025 17:50:44 +0000
ROA not before: Thu 02 Jan 2025 17:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31083
IP address blocks: 5.104.175.0/24 maxlen: 24
77.76.14.0/24 maxlen: 24
78.128.1.0/24 maxlen: 24
78.128.6.0/24 maxlen: 24
78.128.7.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.9.0/24 maxlen: 24
78.128.42.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
78.128.60.0/24 maxlen: 24
78.128.62.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
78.128.77.0/24 maxlen: 24
78.128.78.0/24 maxlen: 24
78.128.80.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
78.128.118.0/24 maxlen: 24
78.128.126.0/24 maxlen: 24
78.142.6.0/24 maxlen: 24
78.142.32.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
78.142.51.0/24 maxlen: 24
78.142.56.0/24 maxlen: 24
78.142.57.0/24 maxlen: 24
78.142.58.0/24 maxlen: 24
78.142.59.0/24 maxlen: 24
78.142.62.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
79.124.4.0/24 maxlen: 24
79.124.5.0/24 maxlen: 24
79.124.6.0/24 maxlen: 24
79.124.13.0/24 maxlen: 24
79.124.14.0/24 maxlen: 24
79.124.16.0/24 maxlen: 24
79.124.17.0/24 maxlen: 24
79.124.22.0/24 maxlen: 24
79.124.31.0/24 maxlen: 24
79.124.44.0/24 maxlen: 24
79.124.52.0/24 maxlen: 24
79.124.63.0/24 maxlen: 24
79.124.64.0/24 maxlen: 24
79.124.65.0/24 maxlen: 24
79.124.66.0/24 maxlen: 24
79.124.67.0/24 maxlen: 24
79.124.75.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.84.0/24 maxlen: 24
79.124.90.0/24 maxlen: 24
82.118.229.0/24 maxlen: 24
82.118.243.0/24 maxlen: 24
91.148.148.0/24 maxlen: 24
91.148.168.0/24 maxlen: 24
94.72.136.0/22 maxlen: 24
130.185.225.0/24 maxlen: 24
130.185.232.0/24 maxlen: 24
178.132.86.0/24 maxlen: 24
178.132.87.0/24 maxlen: 24
185.197.152.0/22 maxlen: 24
185.232.156.0/23 maxlen: 24
217.174.146.0/23 maxlen: 24
217.174.148.0/23 maxlen: 24
217.174.151.0/24 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 09:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:22:04:d4:1d:d1:9e:40:26:0c:c8:f9:ec:d3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95ea97491454f4525e3d081befc665a9c673223d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:4c:f0:7e:73:f0:42:aa:01:dd:76:fd:ea:
11:f6:4c:db:d2:f8:6f:ea:ec:dd:b3:d6:3d:99:9b:
e9:45:af:e2:0c:43:36:f3:b2:8e:69:19:24:35:42:
a0:82:1c:6d:66:5f:32:02:38:01:de:62:e9:dd:42:
cd:79:14:60:8f:59:20:5c:47:86:5b:bb:84:f9:43:
c8:38:67:60:60:06:48:6b:c5:35:64:a7:1b:5f:73:
fc:df:8e:43:a7:e4:d9:80:4b:d9:a0:b2:cd:2e:1c:
0d:be:f3:bf:5d:3e:3b:d4:c2:19:16:4a:4d:dc:e8:
3d:dd:8d:dc:74:47:68:52:2a:fd:9d:25:08:21:22:
3e:19:c9:ce:a8:ac:14:0d:7e:08:bd:60:96:1e:8d:
6f:d1:c3:70:f7:6d:69:d7:91:e8:da:87:e1:c7:da:
ee:e8:0e:8b:3a:87:13:a6:a2:cc:47:61:e5:b0:ca:
f7:63:6a:cc:3b:2a:89:00:32:22:57:ac:9b:f5:9c:
63:a1:f3:a3:2c:d8:80:63:92:44:65:bf:b1:8b:d2:
ed:7a:71:c4:54:3a:9f:da:74:a0:3f:3b:f2:6c:65:
f7:5d:10:cc:6b:62:3e:5e:0e:e4:1e:60:ed:ef:e5:
ff:26:6b:db:b7:d1:a4:5d:a8:44:86:93:7f:42:01:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EA:97:49:14:54:F4:52:5E:3D:08:1B:EF:C6:65:A9:C6:73:22:3D
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/leqXSRRU9FJePQgb78ZlqcZzIj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.175.0/24
77.76.14.0/24
78.128.1.0/24
78.128.6.0-78.128.9.255
78.128.42.0/23
78.128.60.0/24
78.128.62.0/24
78.128.76.0-78.128.78.255
78.128.80.0/23
78.128.118.0/24
78.128.126.0/24
78.142.6.0/24
78.142.32.0/24
78.142.47.0/24
78.142.51.0/24
78.142.56.0/22
78.142.62.0/23
79.124.4.0-79.124.6.255
79.124.13.0-79.124.14.255
79.124.16.0/23
79.124.22.0/24
79.124.31.0/24
79.124.44.0/24
79.124.52.0/24
79.124.63.0-79.124.67.255
79.124.75.0-79.124.76.255
79.124.84.0/24
79.124.90.0/24
82.118.229.0/24
82.118.243.0/24
91.148.148.0/24
91.148.168.0/24
94.72.136.0/22
130.185.225.0/24
130.185.232.0/24
178.132.86.0/23
185.197.152.0/22
185.232.156.0/23
217.174.146.0-217.174.149.255
217.174.151.0-217.174.153.255
217.174.155.0/24
Signature Algorithm: sha256WithRSAEncryption
01:70:25:ee:00:3f:3d:79:02:62:c0:25:95:b6:26:31:12:b8:
13:77:67:62:a8:69:ae:0a:f8:16:d6:d2:3c:d7:7e:21:16:a1:
95:f4:65:f7:b4:36:07:26:ab:8c:54:18:18:fe:97:a3:49:fa:
0e:2e:77:71:59:7b:eb:1b:d1:c9:f1:51:ad:8f:64:b9:30:a1:
51:65:37:df:56:ca:00:dc:ad:a8:7c:5f:b2:47:a7:6a:60:31:
f9:d1:56:c8:d8:54:e0:8e:43:60:bf:3d:9a:51:2a:f9:5d:6d:
7e:22:49:a3:06:13:86:ec:9e:4b:34:e3:30:65:53:72:0e:7a:
66:3d:47:cc:a4:36:e9:d8:d3:9e:dc:b8:10:62:ca:83:cd:4f:
a5:6b:78:6a:e0:ff:6e:a8:e7:65:89:21:95:df:7d:15:8d:0b:
c1:f0:95:26:c6:7b:84:02:1d:45:25:9b:02:32:d8:a8:fb:54:
b1:1e:cf:11:f2:b1:95:b0:99:4d:32:67:a0:eb:17:ef:bf:83:
48:6e:13:77:6b:65:d9:59:39:c3:0b:e7:1b:2b:95:c4:78:58:
cb:be:01:e5:f5:01:b9:7a:29:9f:de:6b:2c:8d:f0:74:75:04:
d1:59:11:1f:3c:f9:7b:21:c9:cf:17:27:a8:0e:34:ad:5b:d6:
f5:b3:1e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:46:23 2025 by rpki-client