Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/1-gnlAL1rg2_43-EPc_QAR2cjQR8.roa
File: 1-gnlAL1rg2_43-EPc_QAR2cjQR8.roa (raw, json)
Hash identifier: 81y42dAvslYuW/efwVh/VmDm2JFJKnZ9TK0frGro9mg=
Subject key identifier: FA:09:E5:00:BD:6B:83:6F:F8:DF:E1:0F:73:F4:00:47:67:23:41:1F
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019425222A52B55FDFFB791D54D295B14824
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/1-gnlAL1rg2_43-EPc_QAR2cjQR8.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24877
IP address blocks: 84.55.24.0/21 maxlen: 21
84.55.38.0/23 maxlen: 23
84.55.40.0/21 maxlen: 21
84.55.40.0/22 maxlen: 22
84.55.44.0/23 maxlen: 23
84.55.46.0/23 maxlen: 23
88.222.0.0/17 maxlen: 17
88.222.128.0/18 maxlen: 18
88.222.192.0/20 maxlen: 20
88.222.216.0/24 maxlen: 24
88.222.224.0/20 maxlen: 20
88.222.248.0/22 maxlen: 22
88.223.64.0/20 maxlen: 20
88.223.64.0/21 maxlen: 21
88.223.72.0/21 maxlen: 21
88.223.100.0/22 maxlen: 22
88.223.132.0/22 maxlen: 22
88.223.136.0/23 maxlen: 23
88.223.136.0/24 maxlen: 24
88.223.139.0/24 maxlen: 24
88.223.140.0/22 maxlen: 22
88.223.156.0/22 maxlen: 22
213.164.112.0/22 maxlen: 22
217.147.32.0/23 maxlen: 23
217.147.32.0/24 maxlen: 24
217.147.33.0/24 maxlen: 24
217.147.39.0/24 maxlen: 24
217.147.42.0/23 maxlen: 23
2a01:7c80:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Fri 21 Feb 2025 11:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2a:52:b5:5f:df:fb:79:1d:54:d2:95:b1:48:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa09e500bd6b836ff8dfe10f73f400476723411f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:3c:23:95:dc:bc:42:3e:0d:5e:cf:15:33:
32:5b:ba:01:45:df:d3:0f:82:dc:6f:08:59:21:c7:
eb:cd:79:2d:f4:96:91:54:a9:cc:de:e2:ea:c7:89:
ed:a1:5e:6e:8a:fb:01:04:75:20:b7:34:ed:60:56:
57:18:7e:e4:57:22:b7:6f:f9:d9:61:82:06:34:64:
0e:ef:0c:ce:10:88:88:c7:9b:08:46:19:2d:bc:49:
63:03:87:e8:6e:3a:eb:78:76:6e:ba:8e:5a:24:67:
6b:f2:73:fa:aa:31:71:7a:68:f9:dc:31:b1:9a:30:
09:c7:a4:9b:79:d3:9b:a4:83:90:e1:b6:1f:c4:04:
92:0f:38:4a:1e:1d:a2:25:01:6f:97:a0:d7:9f:b5:
4b:7c:b4:8f:2c:4a:f7:0d:23:a8:d1:df:58:ca:a3:
24:69:65:5c:f1:a7:7c:ff:0f:58:b7:e5:a9:d4:d3:
98:b2:99:48:5b:bd:60:cc:f0:3c:2d:11:20:22:42:
b1:c6:47:9f:95:c3:3b:e7:40:b4:60:37:b2:48:11:
d2:28:cf:09:79:6d:0d:a6:a3:4c:83:8d:42:40:f6:
ff:4e:83:82:e4:2a:4b:3a:66:62:60:2a:37:62:9e:
4f:70:95:38:5d:9d:40:38:4d:0c:c3:60:b9:37:78:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:09:E5:00:BD:6B:83:6F:F8:DF:E1:0F:73:F4:00:47:67:23:41:1F
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/1-gnlAL1rg2_43-EPc_QAR2cjQR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.24.0/21
84.55.38.0-84.55.47.255
88.222.0.0-88.222.207.255
88.222.216.0/24
88.222.224.0/20
88.222.248.0/22
88.223.64.0/20
88.223.100.0/22
88.223.132.0-88.223.137.255
88.223.139.0-88.223.143.255
88.223.156.0/22
213.164.112.0/22
217.147.32.0/23
217.147.39.0/24
217.147.42.0/23
IPv6:
2a01:7c80:8000::/33
Signature Algorithm: sha256WithRSAEncryption
18:cb:0c:29:18:da:97:82:43:53:d1:46:b3:fe:75:6c:3c:1f:
10:9d:ef:75:85:dc:b1:7b:99:2d:75:6a:59:48:ea:fe:38:1e:
ee:0b:f4:ae:94:ac:a1:cf:50:0d:42:2a:78:7e:fa:5a:30:52:
2f:e6:87:89:ad:74:90:df:26:da:b9:be:55:43:69:f5:54:4b:
39:19:c9:6a:45:85:44:6d:f9:01:4a:3d:0d:92:f7:a8:e8:d9:
18:68:b2:0d:2a:3b:43:1d:b9:20:b5:dd:67:b8:d1:1a:ad:0c:
15:77:95:a9:41:d2:cf:c1:a1:4a:80:6b:92:8d:ad:1a:40:40:
aa:2c:e3:a3:53:5d:a4:ac:9c:fc:71:cc:23:d1:0d:73:d4:20:
d3:f9:de:15:45:30:42:1d:90:fd:e9:55:88:59:ce:c3:80:d3:
c2:cc:de:a3:6e:ec:ca:02:62:71:c6:ea:64:0e:d8:a9:2c:40:
52:9e:b5:ec:fd:e4:12:2b:dc:2c:88:96:4f:c3:35:d3:d6:e4:
cc:f6:bc:17:c0:ad:79:84:ae:06:bd:b2:a5:89:2f:5a:4d:ec:
ec:e5:9a:3b:97:36:e2:d5:06:f7:59:53:ff:71:be:53:29:87:
08:b3:70:ed:be:1e:f4:49:3b:e5:08:20:90:f9:91:7e:cc:8d:
45:f5:32:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:30 2025 by rpki-client