Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/z6a12l1yhLzrjO4sHK_5mRQA8YY.roa
File: z6a12l1yhLzrjO4sHK_5mRQA8YY.roa (raw, json)
Hash identifier: RIH+ge1DC8yyrp7/pfatk02gCOfSxBPYGLlF//FHTz4=
Subject key identifier: CF:A6:B5:DA:5D:72:84:BC:EB:8C:EE:2C:1C:AF:F9:99:14:00:F1:86
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018C5DC514E8E3A6A795A51A45D6673D0A1A
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/z6a12l1yhLzrjO4sHK_5mRQA8YY.roa
Signing time: Tue 12 Dec 2023 11:24:06 +0000
ROA not before: Tue 12 Dec 2023 11:24:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57344
IP address blocks: 79.124.0.0/24 maxlen: 24
217.174.148.0/23 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.150.0/24 maxlen: 24
79.124.15.0/24 maxlen: 24
79.124.20.0/23 maxlen: 23
79.124.24.0/22 maxlen: 24
217.174.154.0/24 maxlen: 24
217.174.159.0/24 maxlen: 24
79.124.23.0/24 maxlen: 24
79.124.28.0/24 maxlen: 24
79.124.51.0/24 maxlen: 24
79.124.50.0/24 maxlen: 24
79.124.73.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.74.0/24 maxlen: 24
79.124.79.0/24 maxlen: 24
79.124.82.0/24 maxlen: 24
77.76.0.0/21 maxlen: 24
77.76.10.0/24 maxlen: 24
77.76.8.0/23 maxlen: 24
94.72.145.0/24 maxlen: 24
94.72.148.0/22 maxlen: 24
94.72.159.0/24 maxlen: 24
94.72.158.0/24 maxlen: 24
82.118.246.0/23 maxlen: 23
82.118.244.0/24 maxlen: 24
178.132.84.0/23 maxlen: 24
178.132.82.0/23 maxlen: 24
178.132.80.0/24 maxlen: 24
178.132.81.0/24 maxlen: 24
82.118.224.0/24 maxlen: 24
82.118.236.0/24 maxlen: 24
82.118.238.0/24 maxlen: 24
5.104.168.0/23 maxlen: 23
78.128.60.0/24 maxlen: 24
78.128.67.0/24 maxlen: 24
5.104.174.0/24 maxlen: 24
78.128.72.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
91.148.131.0/24 maxlen: 24
78.128.79.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
91.148.140.0/24 maxlen: 24
78.128.92.0/24 maxlen: 24
78.128.94.0/24 maxlen: 24
78.128.98.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
130.185.229.0/24 maxlen: 24
78.142.34.0/24 maxlen: 24
78.142.33.0/24 maxlen: 24
130.185.236.0/24 maxlen: 24
130.185.235.0/24 maxlen: 24
130.185.237.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
130.185.250.0/24 maxlen: 24
130.185.248.0/24 maxlen: 24
78.142.60.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
91.148.160.0/24 maxlen: 24
78.128.108.0/23 maxlen: 23
185.148.160.0/22 maxlen: 22
91.148.168.0/24 maxlen: 24
78.142.4.0/23 maxlen: 23
78.142.1.0/24 maxlen: 24
78.142.17.0/24 maxlen: 24
78.142.20.0/24 maxlen: 24
78.142.24.0/24 maxlen: 24
130.185.224.0/24 maxlen: 24
2a01:8740::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:c5:14:e8:e3:a6:a7:95:a5:1a:45:d6:67:3d:0a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Dec 12 11:24:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfa6b5da5d7284bceb8cee2c1caff9991400f186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:30:1f:d0:1a:b2:1f:56:cb:7f:8f:68:6c:66:
21:40:d0:63:db:04:cc:ee:25:40:f7:66:a2:1a:e5:
63:74:ab:2a:be:7e:9c:d6:6f:a3:aa:13:a6:c2:f4:
46:87:38:09:ad:ea:a6:94:07:90:bb:2e:96:b2:d3:
4c:de:00:9a:9f:ea:a7:2d:ab:c7:b7:a4:a6:a8:c3:
35:d3:f2:be:46:bd:76:d5:c6:84:c0:46:3a:9d:fb:
eb:ee:0c:91:5c:1d:04:b8:be:b3:1c:4b:c5:47:30:
a6:b1:92:3a:47:05:26:47:a7:55:3e:65:cd:58:d5:
90:9b:35:82:5a:7a:ab:63:97:cf:00:56:90:ae:cb:
24:b5:4f:dd:6b:14:12:0a:6f:76:c2:9e:7a:a9:f7:
00:40:fe:1c:3b:60:cf:b3:95:e3:05:86:44:d1:cf:
da:86:9b:d9:a6:63:0d:c9:77:cb:9c:0d:41:49:a9:
61:23:4a:12:ac:c6:ca:00:bd:4b:ce:0c:43:64:56:
61:85:0b:0a:dc:06:09:75:d8:b0:67:3e:22:19:40:
be:83:06:85:18:21:f2:4b:19:a2:1f:94:3a:31:d5:
51:2f:36:bc:ed:13:e4:51:a6:61:dc:96:5c:fc:d3:
09:7b:4c:ea:90:35:59:75:3f:9b:8b:c5:fd:dd:30:
9f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A6:B5:DA:5D:72:84:BC:EB:8C:EE:2C:1C:AF:F9:99:14:00:F1:86
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/z6a12l1yhLzrjO4sHK_5mRQA8YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.168.0/23
5.104.174.0/24
77.76.0.0-77.76.10.255
78.128.8.0/24
78.128.43.0/24
78.128.60.0/24
78.128.67.0/24
78.128.72.0/24
78.128.76.0/24
78.128.79.0/24
78.128.81.0/24
78.128.92.0/24
78.128.94.0/24
78.128.98.0/24
78.128.108.0/23
78.142.1.0/24
78.142.4.0/23
78.142.17.0/24
78.142.20.0/24
78.142.24.0/24
78.142.33.0-78.142.34.255
78.142.47.0/24
78.142.60.0/24
78.142.63.0/24
79.124.0.0/24
79.124.15.0/24
79.124.20.0/23
79.124.23.0-79.124.28.255
79.124.50.0/23
79.124.73.0-79.124.74.255
79.124.76.0/24
79.124.79.0/24
79.124.82.0/24
82.118.224.0/24
82.118.236.0/24
82.118.238.0/24
82.118.244.0/24
82.118.246.0/23
91.148.131.0/24
91.148.140.0/24
91.148.160.0/24
91.148.168.0/24
94.72.145.0/24
94.72.148.0/22
94.72.158.0/23
130.185.224.0/24
130.185.229.0/24
130.185.235.0-130.185.237.255
130.185.248.0/24
130.185.250.0/24
178.132.80.0-178.132.85.255
185.148.160.0/22
217.174.148.0-217.174.150.255
217.174.152.0-217.174.154.255
217.174.159.0/24
IPv6:
2a01:8740::/32
Signature Algorithm: sha256WithRSAEncryption
a5:db:b0:48:18:ee:a2:2d:08:9b:98:51:88:4c:4b:a8:7c:97:
17:7c:0c:27:c0:28:a3:bb:be:41:35:f4:8f:54:ae:ca:a3:c6:
be:99:b8:5e:7a:e8:c1:5d:ba:e6:0b:78:f3:1f:43:3f:a6:8f:
44:bf:72:46:22:d2:d8:97:4e:30:86:26:fb:7d:b4:ef:c1:fe:
07:15:42:52:87:d7:8e:6b:3f:4e:b4:5d:09:5c:0d:fd:e1:86:
c9:4c:b3:d7:f8:b9:39:ed:6a:36:1b:42:9e:54:b5:9c:fe:0d:
66:74:f6:ba:b1:e0:c4:db:97:95:2e:82:f8:a1:6f:96:61:16:
4d:be:cc:7e:34:36:86:8c:34:b4:30:55:81:e1:06:f6:d3:55:
98:a0:a3:47:a9:c7:f9:23:8f:6d:16:45:58:cc:ba:0f:c6:55:
64:e3:c4:d8:f9:aa:4e:ec:7d:ce:ec:f5:54:5e:43:a0:28:eb:
5c:26:1b:c5:1f:da:bb:4a:6d:b5:4d:4a:5d:a5:d0:30:67:24:
87:1f:95:09:a3:e8:68:13:71:a7:49:3c:90:17:e6:96:5f:9e:
10:af:aa:f7:20:42:bb:bc:01:ba:0b:c7:3d:84:ef:5d:18:52:
60:86:f5:78:8c:d1:ce:2e:a6:60:32:18:c8:6a:29:b3:e0:6c:
e7:68:40:bd
-----BEGIN CERTIFICATE-----
MIIGmTCCBYGgAwIBAgISAYxdxRTo46anlaUaRdZnPQoaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjMxMjEyMTEyNDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmE2YjVkYTVkNzI4NGJjZWI4Y2VlMmMxY2FmZjk5OTE0MDBmMTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjAf0BqyH1bLf49obGYhQNBj2wTM
7iVA92aiGuVjdKsqvn6c1m+jqhOmwvRGhzgJreqmlAeQuy6WstNM3gCan+qnLavH
t6SmqMM10/K+Rr121caEwEY6nfvr7gyRXB0EuL6zHEvFRzCmsZI6RwUmR6dVPmXN
WNWQmzWCWnqrY5fPAFaQrssktU/daxQSCm92wp56qfcAQP4cO2DPs5XjBYZE0c/a
hpvZpmMNyXfLnA1BSalhI0oSrMbKAL1LzgxDZFZhhQsK3AYJddiwZz4iGUC+gwaF
GCHySxmiH5Q6MdVRLza87RPkUaZh3JZc/NMJe0zqkDVZdT+bi8X93TCf3QIDAQAB
o4IDpTCCA6EwHQYDVR0OBBYEFM+mtdpdcoS864zuLByv+ZkUAPGGMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvejZhMTJsMXloTHpyak80c0hLXzVtUlFBOFlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBuQYIKwYBBQUHAQcBAf8EggGoMIIBpDCCAZEEAgABMIIB
iQMEAQVoqAMEAAVorjALAwMCTUwDBABNTAoDBABOgAgDBABOgCsDBABOgDwDBABO
gEMDBABOgEgDBABOgEwDBABOgE8DBABOgFEDBABOgFwDBABOgF4DBABOgGIDBAFO
gGwDBABOjgEDBAFOjgQDBABOjhEDBABOjhQDBABOjhgwDAMEAE6OIQMEAE6OIgME
AE6OLwMEAE6OPAMEAE6OPwMEAE98AAMEAE98DwMEAU98FDAMAwQAT3wXAwQAT3wc
AwQBT3wyMAwDBABPfEkDBABPfEoDBABPfEwDBABPfE8DBABPfFIDBABSduADBABS
duwDBABSdu4DBABSdvQDBAFSdvYDBABblIMDBABblIwDBABblKADBABblKgDBABe
SJEDBAJeSJQDBAFeSJ4DBACCueADBACCueUwDAMEAIK56wMEAYK57AMEAIK5+AME
AIK5+jAMAwQEsoRQAwQBsoRUAwQCuZSgMAwDBALZrpQDBADZrpYwDAMEA9mumAME
ANmumgMEANmunzANBAIAAjAHAwUAKgGHQDANBgkqhkiG9w0BAQsFAAOCAQEApduw
SBjuoi0Im5hRiExLqHyXF3wMJ8Aoo7u+QTX0j1SuyqPGvpm4XnrowV265gt48x9D
P6aPRL9yRiLS2JdOMIYm+32078H+BxVCUofXjms/TrRdCVwN/eGGyUyz1/i5Oe1q
NhtCnlS1nP4NZnT2urHgxNuXlS6C+KFvlmEWTb7MfjQ2how0tDBVgeEG9tNVmKCj
R6nH+SOPbRZFWMy6D8ZVZOPE2PmqTux9zuz1VF5DoCjrXCYbxR/au0pttU1KXaXQ
MGckhx+VCaPoaBNxp0k8kBfmll+eEK+q9yBCu7wBugvHPYTvXRhSYIb1eIzRzi6m
YDIYyGops+Bs52hAvQ==
-----END CERTIFICATE-----
Generated at Wed Dec 20 09:36:40 2023 by rpki-client on console-ams.rpki-client.org