Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xEfWxXc4uJVJUmKtj-mHEF1F5AE.roa
File: xEfWxXc4uJVJUmKtj-mHEF1F5AE.roa (raw, json)
Hash identifier: l/cfaUtDhj4CyOHkx682LfrhogX+3Q4ThrE6tATVCaQ=
Subject key identifier: C4:47:D6:C5:77:38:B8:95:49:52:62:AD:8F:E9:87:10:5D:45:E4:01
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D1C5A8AFDE3E57A16AF86DE016D0AA5F5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xEfWxXc4uJVJUmKtj-mHEF1F5AE.roa
Signing time: Thu 18 Jan 2024 11:35:12 +0000
ROA not before: Thu 18 Jan 2024 11:35:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61302
IP address blocks: 37.139.130.0/24 maxlen: 24
45.129.84.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.61.0/24 maxlen: 24
81.161.239.0/24 maxlen: 24
82.115.210.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 06:35:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:5a:8a:fd:e3:e5:7a:16:af:86:de:01:6d:0a:a5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 18 11:35:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c447d6c57738b895495262ad8fe987105d45e401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:a4:15:f7:3a:1a:0d:4c:36:9e:3f:87:87:
c5:0f:c9:62:74:51:38:e6:65:09:7d:95:0d:6f:38:
af:1e:33:f2:81:36:45:f3:a4:b4:00:1a:bf:d6:61:
d6:c6:47:ec:cd:f2:1c:f7:f9:3d:b0:99:95:7c:3e:
4a:38:ff:bd:98:81:e2:65:1e:16:b4:bb:9b:13:de:
9f:e5:ab:e7:2b:73:88:ef:b4:49:9f:14:47:0c:8a:
27:d8:62:d6:6e:7e:fe:73:a8:f6:52:fb:fb:22:f6:
e5:58:50:d7:b5:68:8a:ae:ef:7f:dd:17:18:8d:be:
57:d8:83:c3:8d:d8:e6:d2:b1:9a:2a:18:13:a7:e7:
ed:e0:5e:06:1b:15:19:b4:16:e8:7c:95:08:42:cb:
a2:f6:e3:7b:66:1d:43:83:7a:a8:8f:b5:21:1b:8f:
4c:f7:6b:20:a6:4d:41:fa:25:13:33:1c:63:62:a4:
31:f1:2d:fc:8d:d5:f7:ef:a5:b7:e2:bd:bf:21:86:
c7:dc:a9:91:62:1d:db:83:7f:6a:67:c5:ea:f4:bf:
f3:cc:33:bd:ad:5c:d1:74:d8:72:56:48:11:ed:97:
81:bc:2c:ad:b8:f5:a6:78:ab:ca:88:8f:3e:33:22:
fd:84:d7:56:0c:f1:06:ae:82:96:16:3a:0d:29:e8:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:47:D6:C5:77:38:B8:95:49:52:62:AD:8F:E9:87:10:5D:45:E4:01
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xEfWxXc4uJVJUmKtj-mHEF1F5AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/24
45.129.84.0/24
45.141.158.0/24
79.110.61.0/24
81.161.239.0/24
82.115.210.0/24
87.121.124.0/23
87.121.162.0/24
91.200.192.0/22
147.78.100.0/24
171.22.17.0/24
171.22.31.0/24
193.25.216.0/24
Signature Algorithm: sha256WithRSAEncryption
01:57:53:6f:02:48:ea:e4:40:e6:cf:c9:4f:e6:a0:b4:d5:1e:
9c:71:5e:8e:ae:81:6f:fa:7c:31:38:3e:54:00:48:19:3c:5e:
cb:65:00:f4:47:3f:8b:8e:96:e0:44:89:9f:72:4f:ec:6b:18:
6f:38:9b:7b:71:30:41:32:ef:65:d5:7f:ae:c2:66:e4:00:b4:
ed:0b:d9:c3:d0:f3:cc:ca:98:9e:b1:48:e7:b2:37:8a:35:41:
3f:1e:9d:2f:c1:4c:70:5d:e2:3f:89:a9:5f:5b:cd:74:71:cb:
f5:f2:91:55:74:bd:3a:00:bc:35:8d:a1:00:f9:fd:21:ca:56:
fe:46:b0:ce:f8:10:85:ea:a8:fe:33:96:f8:d0:9e:bb:e0:41:
81:64:9b:3d:5c:df:cf:ea:1e:68:92:27:1d:3a:cb:b6:c3:e9:
c5:80:b6:2f:15:a3:d9:39:fe:56:b8:65:e0:a2:ad:db:0f:4a:
9a:32:ba:fd:88:5c:d9:a6:c0:28:0f:6f:88:db:11:1e:f2:e4:
8a:8a:d0:aa:a7:9f:10:84:06:1a:1a:97:6c:8a:ac:8e:24:3f:
a3:82:a3:ab:52:36:68:b5:83:a4:e4:fb:6c:ab:1b:31:34:9e:
bb:15:fc:f8:15:3e:82:e4:f1:6c:18:9f:a8:77:44:fb:77:37:
e0:51:76:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 11:28:43 2024 by rpki-client on console-ams.rpki-client.org