Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XnEBJ4NHqKG-AcUMfJ0XKVzIVho.roa
File: XnEBJ4NHqKG-AcUMfJ0XKVzIVho.roa (raw, json)
Hash identifier: beHHPSkm0jJxp2bA2ufH6vOwUEZa1lRSHAeOWRFowL0=
Subject key identifier: 5E:71:01:27:83:47:A8:A1:BE:01:C5:0C:7C:9D:17:29:5C:C8:56:1A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F8180AD264691F8C315C3A05C9321EBD4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XnEBJ4NHqKG-AcUMfJ0XKVzIVho.roa
Signing time: Thu 16 May 2024 13:04:04 +0000
ROA not before: Thu 16 May 2024 13:04:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2.59.252.0/24 maxlen: 24
37.221.120.0/22 maxlen: 24
45.9.156.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
45.14.164.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.86.0/23 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 06:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:80:ad:26:46:91:f8:c3:15:c3:a0:5c:93:21:eb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 16 13:04:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e7101278347a8a1be01c50c7c9d17295cc8561a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:f3:97:23:f0:04:c2:9d:71:73:d8:0b:10:
25:55:3b:83:ca:99:16:e0:c8:6a:14:f0:a5:0f:7b:
e0:ab:ff:d2:a9:e8:63:74:8e:60:5c:6b:bb:12:3c:
21:28:5d:8b:c2:db:b3:b4:8a:25:03:07:1e:81:fd:
76:a8:69:a3:61:e6:be:2a:68:be:3e:0e:3c:2c:46:
52:f5:de:e6:11:7b:ca:b0:09:3b:70:0d:fa:1c:98:
bc:31:f6:2b:ca:0c:33:a1:36:e2:1f:72:34:42:c4:
8c:a2:18:16:b4:71:18:46:0d:a8:40:e5:72:dd:59:
2c:8b:41:3f:b5:0d:cd:d0:90:1b:db:2a:e2:61:62:
81:95:43:6d:48:51:69:5b:66:7d:78:df:e2:62:c9:
49:cc:b8:b8:89:0c:b8:d1:74:82:74:e7:71:98:75:
c7:77:de:ca:90:a2:68:40:bf:1d:25:4a:af:c0:b0:
9a:14:43:c3:fb:ab:9c:e5:82:27:46:6b:58:1f:36:
39:b8:74:6a:c6:f5:c9:4a:72:03:dd:eb:7d:69:c6:
80:8e:e7:bf:e8:05:12:ad:fd:48:87:21:66:6e:bf:
02:82:6d:52:52:54:42:b4:8c:d0:14:77:28:1b:ea:
61:92:29:9d:a2:fe:3f:1e:b4:49:e7:da:11:0f:50:
83:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:71:01:27:83:47:A8:A1:BE:01:C5:0C:7C:9D:17:29:5C:C8:56:1A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XnEBJ4NHqKG-AcUMfJ0XKVzIVho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.252.0/24
37.221.120.0/22
45.9.156.0/23
45.14.164.0/24
45.81.241.0/24
45.88.88.0/24
45.144.152.0-45.144.154.255
45.149.233.0/24
45.151.88.0/23
83.219.97.0/24
84.21.174.0/23
87.120.87.0/24
87.121.45.0/24
87.121.86.0/23
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
95.214.25.0-95.214.26.255
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.48.248.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:2c:0c:ee:b6:a5:49:d8:bd:1e:0e:9f:04:4e:84:9e:24:4e:
a0:8a:58:57:c1:d3:90:73:81:3d:44:01:ac:2e:70:44:a9:eb:
29:26:90:e9:37:53:71:52:bb:4a:b9:80:5e:93:e5:23:69:e9:
d4:81:29:9d:86:64:0f:cc:16:96:91:9e:5a:ac:bd:15:08:80:
04:1e:e5:63:ec:1e:4d:f2:79:6e:12:97:ee:de:1f:70:8f:3e:
ee:67:ad:61:f5:86:4a:95:70:51:3b:3a:f8:01:5d:4e:60:73:
8e:60:10:ec:47:26:39:f2:95:6d:59:c9:ca:d3:00:c6:43:b4:
1d:5b:f3:09:7f:e3:22:33:45:a1:29:89:41:aa:36:bf:c6:1e:
c8:fc:d3:65:ad:62:73:97:b2:23:e0:b3:ab:2d:82:62:ca:0e:
f1:f9:ce:2f:69:24:14:03:91:7c:2e:1c:ac:3f:b3:4d:5d:de:
3f:6f:e7:b3:85:0b:66:12:2e:bf:b5:d0:ac:0a:50:7d:a4:7a:
d1:a0:37:ac:df:12:09:b7:ee:e6:1a:74:38:96:22:eb:dd:d2:
ad:02:f4:53:43:41:90:3b:42:11:19:ae:f7:ec:7a:16:3f:d4:
94:6d:32:fe:71:ab:f7:a5:9d:66:86:a3:f7:20:71:c3:b3:4c:
a7:04:9b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:35 2024 by rpki-client on console-ams.rpki-client.org