Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/XmyPKThuc4pli_6hPX8mvIeyBGE.roa
File: XmyPKThuc4pli_6hPX8mvIeyBGE.roa (raw, json)
Hash identifier: NY6mGvnHCBXEBOIlqm9E5LULwLA7eFF8bN50PBb8HQE=
Subject key identifier: 5E:6C:8F:29:38:6E:73:8A:65:8B:FE:A1:3D:7F:26:BC:87:B2:04:61
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 0190915D96D823E91B0366242D67CE7B32E1
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/XmyPKThuc4pli_6hPX8mvIeyBGE.roa
Signing time: Mon 08 Jul 2024 08:02:28 +0000
ROA not before: Mon 08 Jul 2024 08:02:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50522
IP address blocks: 81.23.244.0/22 maxlen: 22
81.173.0.0/22 maxlen: 22
81.173.7.0/24 maxlen: 24
81.173.32.0/22 maxlen: 22
81.173.48.0/20 maxlen: 20
81.173.64.0/20 maxlen: 20
81.173.96.0/22 maxlen: 22
81.173.125.0/24 maxlen: 24
81.173.126.0/23 maxlen: 23
109.235.32.0/21 maxlen: 21
185.61.68.0/22 maxlen: 22
2a03:be00::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:5d:96:d8:23:e9:1b:03:66:24:2d:67:ce:7b:32:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: Jul 8 08:02:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e6c8f29386e738a658bfea13d7f26bc87b20461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:d4:de:f1:30:ce:1f:f8:8b:05:ca:63:b6:
40:e1:f7:fd:dd:3e:d4:4d:c5:19:ef:10:22:a5:75:
f4:30:b2:ca:5b:5b:c1:6d:3a:75:69:1b:35:a5:89:
61:c0:81:fd:23:2e:98:10:24:dc:4e:f3:b8:f8:39:
df:ea:17:96:6d:9c:39:2a:85:4b:3c:c5:19:3e:6f:
c7:c6:bd:86:c8:85:85:7d:62:f2:9a:2e:37:63:d5:
3b:00:f9:66:30:48:40:db:6d:94:d0:99:f8:3b:26:
86:96:1f:7a:0c:09:5b:1d:48:15:9c:14:63:d6:d6:
12:1c:5a:1c:c1:1a:d8:2d:80:d6:7a:86:e3:97:24:
00:b8:de:26:2c:a5:6c:b4:bb:ad:e1:b8:48:1d:9f:
b2:25:af:15:7b:14:9e:a7:f9:dd:39:6e:38:13:4f:
f4:ae:07:95:d8:db:d2:d9:cc:4d:6a:c2:95:f7:9e:
fb:d3:1e:15:71:aa:18:c5:d0:90:d5:35:be:c5:9e:
96:33:6b:cd:6c:f1:c0:57:0d:38:6b:c7:8b:b5:9b:
ce:1b:b4:75:a0:73:b9:8d:25:8b:b0:9f:a6:4a:80:
41:18:01:f8:f7:c6:4a:b2:f7:e3:5a:58:c0:1b:f6:
7d:50:c5:a9:54:55:53:2c:89:fd:7e:7d:61:4e:f7:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6C:8F:29:38:6E:73:8A:65:8B:FE:A1:3D:7F:26:BC:87:B2:04:61
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/XmyPKThuc4pli_6hPX8mvIeyBGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.244.0/22
81.173.0.0/22
81.173.7.0/24
81.173.32.0/22
81.173.48.0-81.173.79.255
81.173.96.0/22
81.173.125.0-81.173.127.255
109.235.32.0/21
185.61.68.0/22
IPv6:
2a03:be00::/32
Signature Algorithm: sha256WithRSAEncryption
89:f9:fc:a2:59:b1:bb:ae:10:58:81:dc:c8:d5:32:05:a3:98:
d6:29:3d:3b:7c:38:b5:57:1b:77:50:a3:21:0b:4d:51:68:ac:
66:22:6f:8e:9f:62:95:83:e2:f8:a9:fb:3a:ec:d4:af:de:2c:
06:83:44:08:68:58:85:6e:44:d8:d0:1c:84:e3:2b:a8:6a:70:
cf:5d:6f:3d:52:e6:5f:17:c5:1a:0e:bb:69:41:ab:bb:ab:ec:
13:d5:02:57:ae:77:95:99:a9:6c:b7:d6:9f:bd:20:8a:72:01:
bc:fe:12:b2:05:43:d4:26:73:57:33:6a:05:8f:14:89:2f:7b:
fd:02:34:f7:9c:69:39:7f:75:77:2e:92:8f:62:ba:f1:fd:0f:
cf:67:40:13:93:79:20:77:17:80:65:24:60:b9:2a:f9:12:b9:
4d:74:1e:b2:1c:73:96:0f:32:88:c3:f0:40:56:f7:67:fc:80:
63:94:6d:5f:e4:0b:fb:27:51:e0:f8:33:22:1f:3b:65:c2:c3:
78:10:aa:d4:4d:da:ba:10:e3:fb:6d:b2:52:2c:18:06:5c:26:
f0:1a:2d:83:87:64:a0:49:24:e0:73:2d:a8:b1:5f:18:29:77:
84:33:e6:b1:58:d2:71:e2:97:fe:7b:83:54:32:04:38:bd:1d:
64:ae:32:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:10 2025 by rpki-client