Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/sUGtnGYysSLsIxRqi3nzcOmK6vs.roa
File: sUGtnGYysSLsIxRqi3nzcOmK6vs.roa (raw, json)
Hash identifier: e2oekTLcp+z8adAxI18TtM03zNm7tHLREa9hq6VWAEs=
Subject key identifier: B1:41:AD:9C:66:32:B1:22:EC:23:14:6A:8B:79:F3:70:E9:8A:EA:FB
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018A8ED57C26C153948492D7CE318E382982
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/sUGtnGYysSLsIxRqi3nzcOmK6vs.roa
Signing time: Wed 13 Sep 2023 13:57:50 +0000
ROA not before: Wed 13 Sep 2023 13:57:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57344
IP address blocks: 79.124.0.0/24 maxlen: 24
217.174.150.0/24 maxlen: 24
79.124.15.0/24 maxlen: 24
217.174.154.0/24 maxlen: 24
217.174.159.0/24 maxlen: 24
79.124.20.0/23 maxlen: 23
79.124.24.0/22 maxlen: 24
79.124.23.0/24 maxlen: 24
79.124.28.0/24 maxlen: 24
79.124.51.0/24 maxlen: 24
79.124.50.0/24 maxlen: 24
79.124.73.0/24 maxlen: 24
79.124.74.0/24 maxlen: 24
79.124.79.0/24 maxlen: 24
79.124.82.0/24 maxlen: 24
94.72.145.0/24 maxlen: 24
94.72.148.0/22 maxlen: 24
94.72.159.0/24 maxlen: 24
94.72.158.0/24 maxlen: 24
82.118.246.0/23 maxlen: 23
82.118.244.0/24 maxlen: 24
178.132.80.0/24 maxlen: 24
178.132.84.0/23 maxlen: 24
178.132.82.0/23 maxlen: 24
178.132.81.0/24 maxlen: 24
82.118.224.0/24 maxlen: 24
82.118.236.0/24 maxlen: 24
82.118.238.0/24 maxlen: 24
5.104.168.0/23 maxlen: 23
78.128.67.0/24 maxlen: 24
5.104.174.0/24 maxlen: 24
78.128.72.0/24 maxlen: 24
91.148.131.0/24 maxlen: 24
78.128.79.0/24 maxlen: 24
91.148.140.0/24 maxlen: 24
78.128.92.0/24 maxlen: 24
78.128.94.0/24 maxlen: 24
78.128.98.0/24 maxlen: 24
130.185.229.0/24 maxlen: 24
130.185.236.0/24 maxlen: 24
130.185.235.0/24 maxlen: 24
130.185.237.0/24 maxlen: 24
78.142.34.0/24 maxlen: 24
78.142.33.0/24 maxlen: 24
130.185.250.0/24 maxlen: 24
130.185.248.0/24 maxlen: 24
78.142.60.0/24 maxlen: 24
185.148.160.0/22 maxlen: 22
91.148.160.0/24 maxlen: 24
78.128.108.0/23 maxlen: 23
78.142.1.0/24 maxlen: 24
78.142.4.0/23 maxlen: 23
78.142.17.0/24 maxlen: 24
130.185.224.0/24 maxlen: 24
78.142.20.0/24 maxlen: 24
78.142.24.0/24 maxlen: 24
2a01:8740::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 24 Nov 2023 12:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:d5:7c:26:c1:53:94:84:92:d7:ce:31:8e:38:29:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Sep 13 13:57:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b141ad9c6632b122ec23146a8b79f370e98aeafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c5:df:fa:0a:e5:d6:b7:b7:90:24:24:ed:00:
f6:70:52:f1:25:ac:45:3a:47:ae:88:ef:5a:9f:77:
bb:e6:1d:f3:af:5a:4f:a0:ae:dd:53:b0:c3:0a:96:
d8:e2:c6:fa:8a:97:50:f9:99:03:6b:4b:dd:4c:fd:
11:51:9b:e9:b9:af:ad:60:ec:b5:34:17:26:64:f6:
ad:c3:4f:9f:55:4f:a8:8b:a4:92:09:7c:37:25:6a:
24:ac:70:23:67:00:0a:f0:37:1e:92:13:96:8a:71:
ea:e6:5b:96:4e:fb:23:c3:e0:ba:51:b2:a9:b6:6e:
0e:0c:ff:5a:ef:c8:cd:10:40:e3:59:fd:0a:1c:60:
54:8d:b9:56:7d:2e:a9:48:cf:29:b2:3a:76:54:62:
ec:f6:55:2c:f0:4d:35:33:f1:65:1f:c8:3f:e9:1d:
d8:b0:95:85:e0:34:f2:0e:1e:94:c7:56:af:51:c9:
ee:56:8d:8c:d2:5d:4c:2b:53:9f:a2:f9:42:99:67:
5a:cf:bf:8c:5d:7d:a7:24:88:90:aa:37:eb:95:36:
b1:a6:57:a7:b3:24:4f:53:70:de:f9:ae:7e:81:8b:
97:c3:00:93:69:62:b0:9d:80:9d:69:73:7a:ba:83:
db:f3:f0:c7:9f:d7:24:aa:60:d6:bf:4a:0e:98:b7:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:41:AD:9C:66:32:B1:22:EC:23:14:6A:8B:79:F3:70:E9:8A:EA:FB
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/sUGtnGYysSLsIxRqi3nzcOmK6vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.168.0/23
5.104.174.0/24
78.128.67.0/24
78.128.72.0/24
78.128.79.0/24
78.128.92.0/24
78.128.94.0/24
78.128.98.0/24
78.128.108.0/23
78.142.1.0/24
78.142.4.0/23
78.142.17.0/24
78.142.20.0/24
78.142.24.0/24
78.142.33.0-78.142.34.255
78.142.60.0/24
79.124.0.0/24
79.124.15.0/24
79.124.20.0/23
79.124.23.0-79.124.28.255
79.124.50.0/23
79.124.73.0-79.124.74.255
79.124.79.0/24
79.124.82.0/24
82.118.224.0/24
82.118.236.0/24
82.118.238.0/24
82.118.244.0/24
82.118.246.0/23
91.148.131.0/24
91.148.140.0/24
91.148.160.0/24
94.72.145.0/24
94.72.148.0/22
94.72.158.0/23
130.185.224.0/24
130.185.229.0/24
130.185.235.0-130.185.237.255
130.185.248.0/24
130.185.250.0/24
178.132.80.0-178.132.85.255
185.148.160.0/22
217.174.150.0/24
217.174.154.0/24
217.174.159.0/24
IPv6:
2a01:8740::/32
Signature Algorithm: sha256WithRSAEncryption
ab:3e:8c:e1:af:b9:ac:e1:37:76:11:13:a1:4f:1f:28:8f:1d:
fe:b3:36:96:50:5d:a5:e1:26:a4:02:b6:a5:4e:48:13:fb:61:
89:e3:4c:b7:48:48:8a:98:9d:79:ec:aa:99:91:43:0b:db:79:
e5:1c:e9:b7:66:a1:01:d4:95:8d:e5:08:a0:23:f0:8c:0a:36:
ad:00:a7:7a:1d:be:3c:c9:ab:3d:9f:9d:da:eb:18:25:1d:04:
8f:d1:d3:f7:fd:e9:94:91:42:9d:9c:76:64:89:65:11:7a:06:
ae:97:4a:60:7e:a8:3a:3d:47:66:cf:aa:5b:d1:41:d8:e8:98:
3a:bc:06:a2:5f:1e:a2:5c:34:5f:a6:b2:1f:09:9a:89:97:2d:
da:a6:12:2f:9d:0c:b4:19:53:85:b6:dc:30:4e:e4:52:1d:10:
57:43:59:50:27:8a:53:dc:bd:d2:9f:ab:e1:94:2d:06:5a:73:
17:ee:1b:4d:2d:f6:2a:fd:25:d4:aa:18:4f:4c:c1:d2:45:76:
30:0b:d2:b5:6c:c4:e4:37:54:d2:19:34:6e:51:94:bd:60:a2:
7d:04:d7:35:3f:e8:d9:b8:f5:12:ee:03:5e:34:6c:74:8c:80:
9c:9c:23:2b:e7:ac:ab:41:8e:be:e7:4b:a6:63:63:a9:b1:6f:
01:1b:0d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:15 2024 by rpki-client on console-fra.rpki-client.org