Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/6cuHnp0iBZS2UcJhRokyjCPciCo.roa
File: 6cuHnp0iBZS2UcJhRokyjCPciCo.roa (raw, json)
Hash identifier: rXN6N+MnMGJrN/0d2JdkNwqt0WltlamLNcwpVGx5spY=
Subject key identifier: E9:CB:87:9E:9D:22:05:94:B6:51:C2:61:46:89:32:8C:23:DC:88:2A
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0190E4298587F6B411BE5BE6B2E1AF7C9E08
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/6cuHnp0iBZS2UcJhRokyjCPciCo.roa
Signing time: Wed 24 Jul 2024 09:54:04 +0000
ROA not before: Wed 24 Jul 2024 09:54:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 77.111.117.0/24 maxlen: 24
77.111.123.0/24 maxlen: 24
92.61.106.0/24 maxlen: 24
92.61.109.0/24 maxlen: 24
185.112.240.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
185.112.242.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Nov 2024 06:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e4:29:85:87:f6:b4:11:be:5b:e6:b2:e1:af:7c:9e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jul 24 09:54:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9cb879e9d220594b651c2614689328c23dc882a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:bd:ef:c3:35:99:23:35:73:52:9c:6c:91:
e6:70:ff:ed:5e:20:05:5b:02:9f:f7:51:23:ea:29:
c3:82:48:e0:2e:59:a6:d2:7e:7e:05:15:fa:af:12:
43:8b:95:71:75:38:18:12:51:02:b3:8c:5d:5e:de:
d3:72:43:fe:c1:cd:f2:db:2f:1b:17:39:ee:a9:90:
6a:ee:9e:8a:38:42:d2:c1:95:97:96:d2:be:ea:b6:
b3:fe:de:34:70:63:3d:3e:d6:22:2e:ed:a6:f5:48:
62:01:86:1c:77:83:2a:09:dd:a5:47:cf:19:d9:a4:
b5:df:b1:16:bc:f2:1c:02:61:cf:9c:1b:4d:5a:3e:
4f:2c:02:ea:bd:d5:a8:73:1b:5d:c7:91:8a:20:9f:
60:8c:1b:38:70:fd:b4:c4:b1:f8:c1:4f:3a:37:a9:
17:48:d0:54:02:50:a5:93:87:8a:a8:f3:06:10:dc:
d8:3a:ba:e9:c9:84:c7:db:20:c8:8c:4c:2c:f1:63:
80:27:19:0d:98:dc:25:04:6d:bb:7a:e5:78:1e:93:
1d:a7:04:02:d2:8f:90:ea:4a:9b:c1:d3:57:0a:95:
9a:a4:8a:34:b6:04:93:55:87:0a:f9:cb:fd:35:3b:
e7:c4:8b:75:8d:de:de:0a:37:97:19:2c:bd:87:c2:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CB:87:9E:9D:22:05:94:B6:51:C2:61:46:89:32:8C:23:DC:88:2A
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/6cuHnp0iBZS2UcJhRokyjCPciCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.117.0/24
77.111.123.0/24
92.61.106.0/24
92.61.109.0/24
185.112.240.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:dd:db:43:d7:11:57:6a:6e:c7:46:59:9b:82:66:50:9a:51:
81:25:ec:e5:1d:b0:f4:54:c5:bb:42:b1:f6:f8:40:5b:e0:c1:
4f:3b:17:6e:80:6e:c5:b7:58:1f:0c:d8:2d:2c:a8:c7:c1:f0:
f1:3f:b7:f7:a6:4a:b8:03:be:56:6f:b8:8e:d8:34:a7:08:09:
a9:1e:99:01:1d:7f:77:8e:8c:e2:ee:09:97:90:ea:e3:37:3d:
70:22:12:de:86:80:f3:ea:8a:d7:95:a7:66:25:5a:c1:a4:b4:
0b:9f:78:83:e4:07:13:cb:01:04:6a:4b:df:b4:65:1c:e8:7a:
69:25:1b:78:ff:f5:f8:c5:fb:fc:83:56:23:72:ce:c8:15:7c:
36:5a:e2:ee:60:51:cb:c8:1e:14:55:bf:9d:f5:c7:d8:20:b6:
a9:c4:09:6b:1a:2c:64:74:1d:f8:61:2b:6a:17:13:b4:68:1d:
50:eb:8f:c3:dd:4f:ae:b1:a0:ac:88:8f:ff:96:68:5f:53:47:
3d:84:47:19:e1:57:5c:d6:b4:05:ad:37:25:f0:fb:1d:04:19:
f9:53:d5:31:e0:b9:88:8f:ab:f2:82:41:82:5c:2a:3c:d2:52:
22:fd:b2:eb:e0:7e:8c:f2:20:a9:1b:f6:f1:55:00:9d:05:68:
60:8c:fe:93
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZDkKYWH9rQRvlvmsuGvfJ4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjQwNzI0MDk1NDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWNiODc5ZTlkMjIwNTk0YjY1MWMyNjE0Njg5MzI4YzIzZGM4ODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRa978M1mSM1c1KcbJHmcP/tXiAF
WwKf91Ej6inDgkjgLlmm0n5+BRX6rxJDi5VxdTgYElECs4xdXt7TckP+wc3y2y8b
FznuqZBq7p6KOELSwZWXltK+6raz/t40cGM9PtYiLu2m9UhiAYYcd4MqCd2lR88Z
2aS137EWvPIcAmHPnBtNWj5PLALqvdWocxtdx5GKIJ9gjBs4cP20xLH4wU86N6kX
SNBUAlClk4eKqPMGENzYOrrpyYTH2yDIjEws8WOAJxkNmNwlBG27euV4HpMdpwQC
0o+Q6kqbwdNXCpWapIo0tgSTVYcK+cv9NTvnxIt1jd7eCjeXGSy9h8LdYQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOnLh56dIgWUtlHCYUaJMowj3IgqMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvNmN1SG5wMGlCWlMyVWNKaFJva3lqQ1BjaUNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATW91AwQA
TW97AwQAXD1qAwQAXD1tAwQCuXDwMA0GCSqGSIb3DQEBCwUAA4IBAQBd3dtD1xFX
am7HRlmbgmZQmlGBJezlHbD0VMW7QrH2+EBb4MFPOxdugG7Ft1gfDNgtLKjHwfDx
P7f3pkq4A75Wb7iO2DSnCAmpHpkBHX93jozi7gmXkOrjNz1wIhLehoDz6orXladm
JVrBpLQLn3iD5AcTywEEakvftGUc6HppJRt4//X4xfv8g1Yjcs7IFXw2WuLuYFHL
yB4UVb+d9cfYILapxAlrGixkdB34YStqFxO0aB1Q64/D3U+usaCsiI//lmhfU0c9
hEcZ4Vdc1rQFrTcl8PsdBBn5U9Ux4LmIj6vygkGCXCo80lIi/bLr4H6M8iCpG/bx
VQCdBWhgjP6T
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:27:17 2025 by rpki-client