Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/S7zt1cKCknghMn3akdwTF-GillY.roa
File: S7zt1cKCknghMn3akdwTF-GillY.roa (raw, json)
Hash identifier: rQyeQl1+sejQw8njW+UMAToJIYS8IUpTOIHfTzSjpHM=
Subject key identifier: 4B:BC:ED:D5:C2:82:92:78:21:32:7D:DA:91:DC:13:17:E1:A2:96:56
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0191BC881E5B5828D547EA9DF7137173F08E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/S7zt1cKCknghMn3akdwTF-GillY.roa
Signing time: Wed 04 Sep 2024 10:15:22 +0000
ROA not before: Wed 04 Sep 2024 10:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52116
IP address blocks: 77.105.6.0/24 maxlen: 24
77.105.11.0/24 maxlen: 24
77.105.31.0/24 maxlen: 24
79.175.103.0/24 maxlen: 24
79.175.115.0/24 maxlen: 24
79.175.116.0/24 maxlen: 24
79.175.118.0/24 maxlen: 24
80.74.173.0/24 maxlen: 24
81.18.49.0/24 maxlen: 24
81.18.50.0/24 maxlen: 24
81.18.52.0/23 maxlen: 23
81.18.55.0/24 maxlen: 24
81.18.61.0/24 maxlen: 24
93.186.64.0/24 maxlen: 24
93.186.67.0/24 maxlen: 24
93.186.71.0/24 maxlen: 24
93.186.72.0/24 maxlen: 24
109.121.60.0/24 maxlen: 24
178.219.8.0/23 maxlen: 23
178.219.11.0/24 maxlen: 24
178.253.207.0/24 maxlen: 24
178.253.210.0/24 maxlen: 24
178.253.213.0/24 maxlen: 24
178.253.214.0/24 maxlen: 24
178.253.219.0/24 maxlen: 24
178.253.222.0/24 maxlen: 24
178.253.236.0/24 maxlen: 24
178.253.240.0/24 maxlen: 24
185.47.88.0/24 maxlen: 24
185.47.89.0/24 maxlen: 24
185.47.90.0/24 maxlen: 24
188.255.130.0/24 maxlen: 24
188.255.140.0/24 maxlen: 24
188.255.185.0/24 maxlen: 24
188.255.190.0/24 maxlen: 24
188.255.208.0/24 maxlen: 24
188.255.213.0/24 maxlen: 24
188.255.219.0/24 maxlen: 24
188.255.238.0/24 maxlen: 24
188.255.244.0/23 maxlen: 23
188.255.246.0/24 maxlen: 24
188.255.247.0/24 maxlen: 24
188.255.248.0/24 maxlen: 24
188.255.250.0/23 maxlen: 23
188.255.252.0/24 maxlen: 24
188.255.254.0/24 maxlen: 24
188.255.255.0/24 maxlen: 24
212.69.6.0/24 maxlen: 24
212.69.7.0/24 maxlen: 24
212.69.12.0/24 maxlen: 24
212.69.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 10:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bc:88:1e:5b:58:28:d5:47:ea:9d:f7:13:71:73:f0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 4 10:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bbcedd5c282927821327dda91dc1317e1a29656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:5b:b0:40:e8:ce:ec:50:71:8b:79:ae:9a:
4d:e4:7a:34:9b:38:42:9d:02:e0:97:b4:d9:d9:f4:
e8:f0:15:de:34:aa:07:26:dd:a7:3d:52:de:ed:28:
08:a2:35:cc:ac:f5:7c:05:28:61:30:d6:4c:45:db:
5d:53:3d:32:38:25:98:4c:18:5e:e1:d9:ec:5f:ea:
7d:99:a0:40:4e:5f:98:eb:97:79:fa:ef:bd:d4:53:
70:bb:eb:db:f2:d6:26:7c:6a:47:f6:32:f1:88:bc:
d2:ff:5e:d6:c6:20:80:ec:6f:ed:ff:92:b5:61:db:
41:c0:78:a6:d2:fa:28:cc:ae:3c:f8:ea:86:d5:ea:
b2:45:65:f8:72:5a:a6:2f:2d:89:43:e2:d1:61:87:
b8:f5:47:00:2d:60:7d:a6:a6:8d:f4:1d:f1:d8:16:
05:a9:52:4a:b5:ef:4e:60:cf:6c:32:95:67:25:b4:
99:c9:f5:3b:68:5e:be:20:f6:cd:e2:a4:6c:f2:47:
20:7e:b9:86:aa:6b:3f:34:5c:0b:4d:92:e7:a4:b7:
c9:1b:e8:52:25:05:d7:01:29:1f:e2:90:d4:a4:37:
7e:23:af:52:3d:ae:0b:a3:86:d2:c8:69:dc:8a:98:
fe:34:24:a5:c3:d5:82:b4:0d:87:1d:55:65:67:e9:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BC:ED:D5:C2:82:92:78:21:32:7D:DA:91:DC:13:17:E1:A2:96:56
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/S7zt1cKCknghMn3akdwTF-GillY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.6.0/24
77.105.11.0/24
77.105.31.0/24
79.175.103.0/24
79.175.115.0-79.175.116.255
79.175.118.0/24
80.74.173.0/24
81.18.49.0-81.18.50.255
81.18.52.0/23
81.18.55.0/24
81.18.61.0/24
93.186.64.0/24
93.186.67.0/24
93.186.71.0-93.186.72.255
109.121.60.0/24
178.219.8.0/23
178.219.11.0/24
178.253.207.0/24
178.253.210.0/24
178.253.213.0-178.253.214.255
178.253.219.0/24
178.253.222.0/24
178.253.236.0/24
178.253.240.0/24
185.47.88.0-185.47.90.255
188.255.130.0/24
188.255.140.0/24
188.255.185.0/24
188.255.190.0/24
188.255.208.0/24
188.255.213.0/24
188.255.219.0/24
188.255.238.0/24
188.255.244.0-188.255.248.255
188.255.250.0-188.255.252.255
188.255.254.0/23
212.69.6.0/23
212.69.12.0/24
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1c:fd:b7:af:d4:69:0e:a7:0b:bf:6b:bb:ed:66:93:8d:bd:
30:7d:95:2e:59:0f:61:10:e9:24:a8:55:1f:05:4b:23:10:48:
46:ed:ae:5e:94:e1:ae:f4:ff:72:3c:7d:e0:5e:05:af:35:19:
97:9d:9d:9e:46:f0:b7:a6:53:3d:85:62:c6:27:43:cf:36:fb:
1c:8b:5f:7d:12:37:f2:49:68:81:00:e9:89:b8:e5:d3:19:63:
d5:e5:c5:8f:52:e7:55:64:38:5e:2d:45:82:f2:96:6d:94:9d:
fc:81:87:7c:6d:5d:04:93:4e:e9:d2:13:54:88:18:66:67:d1:
da:20:02:5f:01:c4:d6:c5:45:45:7f:9f:89:3d:65:2a:d7:fb:
13:dc:09:e7:7f:2e:c7:14:d6:31:a3:43:fb:a7:4a:f2:ae:8e:
dc:cf:34:37:c6:a1:eb:0e:62:cc:41:6b:3f:17:3c:f9:7c:04:
8c:0f:5e:4a:0b:17:3b:a6:02:d3:3e:ec:89:43:35:eb:9a:4d:
84:d9:11:45:f8:39:bf:1a:32:3c:55:85:1a:6d:74:96:ed:ba:
9a:c2:88:20:a2:b7:73:6b:59:7a:01:54:88:21:44:09:4c:9e:
9c:99:72:b0:80:bd:61:fb:53:6f:d2:12:5f:ba:72:28:dd:65:
dc:d1:6a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:29 2025 by rpki-client