Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/d4OYS3CGxatzcup0GFB2DYx-y_M.roa
File: d4OYS3CGxatzcup0GFB2DYx-y_M.roa (raw, json)
Hash identifier: qk1jS+qqYL0u3D77Av3WEqW/o0uDyFluCR/uxvuKDgw=
Subject key identifier: 77:83:98:4B:70:86:C5:AB:73:72:EA:74:18:50:76:0D:8C:7E:CB:F3
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 019298E2C7534055786EE0387AC8D09B1C29
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/d4OYS3CGxatzcup0GFB2DYx-y_M.roa
Signing time: Thu 17 Oct 2024 05:10:51 +0000
ROA not before: Thu 17 Oct 2024 05:10:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216071
IP address blocks: 77.238.224.0/24 maxlen: 24
77.238.225.0/24 maxlen: 24
77.238.226.0/24 maxlen: 24
77.238.227.0/24 maxlen: 24
77.238.228.0/24 maxlen: 24
77.238.229.0/24 maxlen: 24
77.238.230.0/24 maxlen: 24
77.238.231.0/24 maxlen: 24
77.238.232.0/24 maxlen: 24
77.238.233.0/24 maxlen: 24
77.238.234.0/24 maxlen: 24
77.238.235.0/24 maxlen: 24
77.238.236.0/24 maxlen: 24
77.238.237.0/24 maxlen: 24
77.238.238.0/24 maxlen: 24
77.238.239.0/24 maxlen: 24
77.238.240.0/24 maxlen: 24
77.238.241.0/24 maxlen: 24
77.238.242.0/24 maxlen: 24
77.238.243.0/24 maxlen: 24
77.238.244.0/24 maxlen: 24
77.238.245.0/24 maxlen: 24
77.238.246.0/24 maxlen: 24
77.238.247.0/24 maxlen: 24
77.238.248.0/24 maxlen: 24
77.238.249.0/24 maxlen: 24
77.238.250.0/24 maxlen: 24
77.238.251.0/24 maxlen: 24
77.238.252.0/24 maxlen: 24
77.238.253.0/24 maxlen: 24
77.238.254.0/24 maxlen: 24
77.238.255.0/24 maxlen: 24
80.85.244.0/24 maxlen: 24
80.85.245.0/24 maxlen: 24
80.85.246.0/24 maxlen: 24
80.85.247.0/24 maxlen: 24
88.210.3.0/24 maxlen: 24
88.210.6.0/24 maxlen: 24
88.210.9.0/24 maxlen: 24
88.210.10.0/24 maxlen: 24
88.210.11.0/24 maxlen: 24
88.210.12.0/24 maxlen: 24
88.210.13.0/24 maxlen: 24
88.210.14.0/24 maxlen: 24
91.246.41.0/24 maxlen: 24
93.183.124.0/24 maxlen: 24
93.183.125.0/24 maxlen: 24
93.183.126.0/24 maxlen: 24
93.183.127.0/24 maxlen: 24
94.103.80.0/24 maxlen: 24
94.103.81.0/24 maxlen: 24
94.103.82.0/24 maxlen: 24
94.103.94.0/24 maxlen: 24
94.103.95.0/24 maxlen: 24
109.234.33.0/24 maxlen: 24
109.234.34.0/24 maxlen: 24
109.234.35.0/24 maxlen: 24
109.234.36.0/24 maxlen: 24
109.234.37.0/24 maxlen: 24
109.234.38.0/24 maxlen: 24
109.234.39.0/24 maxlen: 24
185.121.232.0/24 maxlen: 24
185.121.233.0/24 maxlen: 24
185.121.234.0/24 maxlen: 24
185.121.235.0/24 maxlen: 24
185.157.212.0/24 maxlen: 24
185.157.213.0/24 maxlen: 24
185.157.214.0/24 maxlen: 24
185.157.215.0/24 maxlen: 24
185.245.104.0/24 maxlen: 24
185.245.105.0/24 maxlen: 24
185.245.106.0/24 maxlen: 24
185.245.107.0/24 maxlen: 24
193.33.194.0/24 maxlen: 24
193.33.195.0/24 maxlen: 24
193.178.169.0/24 maxlen: 24
193.178.172.0/24 maxlen: 24
193.178.174.0/24 maxlen: 24
194.164.32.0/24 maxlen: 24
194.164.33.0/24 maxlen: 24
194.164.34.0/24 maxlen: 24
194.164.35.0/24 maxlen: 24
195.2.86.0/24 maxlen: 24
195.2.92.0/24 maxlen: 24
195.2.93.0/24 maxlen: 24
195.26.224.0/24 maxlen: 24
195.26.225.0/24 maxlen: 24
195.26.226.0/24 maxlen: 24
195.26.227.0/24 maxlen: 24
195.200.16.0/24 maxlen: 24
195.200.17.0/24 maxlen: 24
195.200.18.0/24 maxlen: 24
195.200.19.0/24 maxlen: 24
195.200.26.0/24 maxlen: 24
195.200.28.0/24 maxlen: 24
195.200.29.0/24 maxlen: 24
195.200.30.0/24 maxlen: 24
195.200.31.0/24 maxlen: 24
212.34.144.0/24 maxlen: 24
212.34.145.0/24 maxlen: 24
212.34.146.0/24 maxlen: 24
212.34.147.0/24 maxlen: 24
212.34.148.0/24 maxlen: 24
212.34.149.0/24 maxlen: 24
212.34.150.0/24 maxlen: 24
212.34.151.0/24 maxlen: 24
212.34.152.0/24 maxlen: 24
212.34.153.0/24 maxlen: 24
212.34.154.0/24 maxlen: 24
212.34.155.0/24 maxlen: 24
212.118.36.0/24 maxlen: 24
212.118.37.0/24 maxlen: 24
212.118.38.0/24 maxlen: 24
212.118.39.0/24 maxlen: 24
212.118.40.0/24 maxlen: 24
212.118.41.0/24 maxlen: 24
212.118.42.0/24 maxlen: 24
212.118.43.0/24 maxlen: 24
2a06:7740::/48 maxlen: 48
2a0d:8480:1::/48 maxlen: 48
2a0d:8480:3::/48 maxlen: 48
2a14:1e00:1::/48 maxlen: 48
2a14:1e00:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Nov 2024 05:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:98:e2:c7:53:40:55:78:6e:e0:38:7a:c8:d0:9b:1c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: Oct 17 05:10:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7783984b7086c5ab7372ea741850760d8c7ecbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:49:e8:65:9a:02:70:23:c9:e0:b2:a7:af:
d2:11:17:38:55:69:13:a7:de:c0:bd:77:e4:c8:71:
8a:06:fa:33:30:7e:e3:c6:3a:69:1b:c6:5d:31:58:
c2:5e:bb:6a:51:bc:a8:77:c5:96:94:9d:e2:19:08:
6e:cf:f2:8e:61:75:8d:62:2b:8d:76:be:35:85:47:
0a:e5:56:00:82:66:60:8a:98:d7:72:8a:7e:d3:74:
d2:8e:2f:9f:99:83:7a:5b:3f:c1:63:87:55:a8:33:
e9:1f:e8:9e:0d:0d:c6:f8:a8:24:fa:5d:ac:00:66:
93:0c:3c:b8:35:6a:0a:93:1a:6d:c8:92:2e:70:04:
9b:21:b6:1c:08:98:17:d1:53:c8:77:2e:40:85:49:
0f:8a:f6:29:7a:e7:6f:33:3a:61:1a:24:1c:9d:ee:
b1:3d:61:a0:6f:ec:eb:1e:6d:df:a9:84:b2:37:ae:
04:c3:e3:4e:3f:97:b5:19:3a:0d:75:7d:37:55:12:
ff:d7:59:e4:ab:4e:49:c2:f9:5b:0f:86:ac:d0:98:
67:67:a8:35:e5:a3:e2:62:51:22:31:b8:09:bc:bd:
d7:b1:6d:da:2e:31:a5:59:a4:11:f5:0f:08:12:04:
ea:59:7d:58:4e:97:68:71:ff:e5:ed:2d:c8:54:9f:
46:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:83:98:4B:70:86:C5:AB:73:72:EA:74:18:50:76:0D:8C:7E:CB:F3
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/d4OYS3CGxatzcup0GFB2DYx-y_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.238.224.0/19
80.85.244.0/22
88.210.3.0/24
88.210.6.0/24
88.210.9.0-88.210.14.255
91.246.41.0/24
93.183.124.0/22
94.103.80.0-94.103.82.255
94.103.94.0/23
109.234.33.0-109.234.39.255
185.121.232.0/22
185.157.212.0/22
185.245.104.0/22
193.33.194.0/23
193.178.169.0/24
193.178.172.0/24
193.178.174.0/24
194.164.32.0/22
195.2.86.0/24
195.2.92.0/23
195.26.224.0/22
195.200.16.0/22
195.200.26.0/24
195.200.28.0/22
212.34.144.0-212.34.155.255
212.118.36.0-212.118.43.255
IPv6:
2a06:7740::/48
2a0d:8480:1::/48
2a0d:8480:3::/48
2a14:1e00:1::-2a14:1e00:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
49:12:2e:d0:95:83:9f:44:12:51:31:e0:8e:ef:41:65:36:bc:
0e:3d:9f:98:a4:9b:e8:a9:ea:58:19:5a:53:ec:29:dd:b3:a5:
f9:f6:bb:ce:e5:80:11:f0:a1:bf:90:c0:25:68:4a:14:91:39:
ce:9a:9d:64:a9:b3:9a:77:03:03:d9:4b:e4:df:a7:cd:d3:54:
bc:be:a4:eb:74:0b:16:7f:7a:c6:8d:8c:8a:bb:4d:db:65:3d:
ec:2a:ad:d5:4c:36:0c:5f:22:cd:03:44:99:59:f6:37:31:b1:
f1:fe:8a:da:ef:f0:ab:03:2b:d5:c0:35:be:19:d8:3a:26:64:
2a:47:ad:50:06:1f:8a:06:53:b5:f7:a2:2d:e2:0e:2f:5e:c8:
9e:11:7a:e0:b9:d5:fc:82:c4:56:96:ea:d6:07:a0:e1:a5:ce:
93:cc:0b:51:dd:35:13:c4:63:4a:32:52:3b:7f:80:23:8b:61:
d7:7c:38:95:27:b4:0d:dc:1a:b2:66:b1:98:76:59:78:f0:13:
03:4b:39:fe:5d:3d:e1:8b:bb:cd:a1:43:df:df:90:60:6e:08:
2f:12:88:7c:8e:b0:7b:89:76:c7:5b:9a:8e:75:d4:0e:9e:3d:
9d:df:df:75:ff:3f:c8:28:de:cf:bb:d9:99:db:bc:77:ef:c3:
98:99:9f:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 13 07:17:13 2024 by rpki-client on console-ams.rpki-client.org