Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/XrhAR1OU_-FziSWJYK_mIc1MFhY.roa
File: XrhAR1OU_-FziSWJYK_mIc1MFhY.roa (raw, json)
Hash identifier: I2QoG8q6CZgOeHIcUU1GFQ6RT3U+T64XvxJbIucuQRE=
Subject key identifier: 5E:B8:40:47:53:94:FF:E1:73:89:25:89:60:AF:E6:21:CD:4C:16:16
Certificate issuer: /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial: 018CC7949F83691EF0F85BF9C0D7F907B5BA
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/XrhAR1OU_-FziSWJYK_mIc1MFhY.roa
Signing time: Tue 02 Jan 2024 00:30:55 +0000
ROA not before: Tue 02 Jan 2024 00:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204257
IP address blocks: 141.226.191.0/24 maxlen: 24
141.226.188.0/24 maxlen: 24
141.226.189.0/24 maxlen: 24
141.226.190.0/24 maxlen: 24
141.226.187.0/24 maxlen: 24
185.109.148.0/22 maxlen: 24
141.226.184.0/24 maxlen: 24
141.226.186.0/23 maxlen: 23
141.226.185.0/24 maxlen: 24
141.226.186.0/24 maxlen: 24
141.226.184.0/23 maxlen: 23
141.226.184.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:9f:83:69:1e:f0:f8:5b:f9:c0:d7:f9:07:b5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Validity
Not Before: Jan 2 00:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5eb840475394ffe17389258960afe621cd4c1616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:83:32:5e:7d:94:bb:4b:19:e1:fe:66:ae:
d2:d8:21:48:55:0e:98:bd:83:ee:5e:c7:b5:b8:18:
4c:cb:bb:e2:a4:4e:2f:c2:ac:ce:23:18:c0:8f:47:
64:4e:25:c4:b8:71:4e:49:f0:eb:05:5c:d1:34:31:
e9:4c:36:5a:b3:32:ff:99:7a:1b:7a:8d:aa:ce:a5:
51:da:d4:59:5f:a9:8b:37:e3:9d:09:f0:aa:e7:7b:
6c:a7:52:82:34:57:9f:8b:fc:bc:9f:0b:27:90:34:
75:d9:fb:03:18:d4:fc:22:43:af:46:8d:4a:ce:98:
17:90:e9:54:60:d8:ea:73:85:2b:c0:e1:b1:8f:e6:
16:16:69:c8:37:44:97:6b:93:dc:39:6a:a0:11:38:
ed:93:a8:4d:ad:19:70:51:db:c6:5e:19:80:67:db:
54:46:cf:67:24:69:11:0c:e7:58:3a:59:95:98:41:
fb:09:15:1c:ed:14:28:d6:3a:c8:75:03:52:54:72:
54:25:5b:c8:0c:be:e9:ab:cf:0d:d7:53:ca:c1:37:
8d:a7:7c:2c:92:50:ff:00:9e:bb:2c:3b:8e:d6:a3:
98:1b:f3:3e:c4:be:62:6e:a2:07:db:ca:41:10:fd:
a5:8f:58:9b:2c:57:3f:60:12:74:5b:bc:18:8a:38:
f8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B8:40:47:53:94:FF:E1:73:89:25:89:60:AF:E6:21:CD:4C:16:16
X509v3 Authority Key Identifier:
keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/XrhAR1OU_-FziSWJYK_mIc1MFhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.184.0/21
185.109.148.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:fa:fa:16:a2:a2:33:f7:6b:4f:f5:f4:ff:3c:81:90:70:c5:
ca:f4:49:32:dc:27:19:cd:90:ba:5c:d2:43:d0:36:81:46:8e:
a4:0e:cd:3d:0c:7c:ce:57:f0:55:e7:01:5a:3d:1a:98:6c:d5:
ff:04:41:02:45:12:fb:02:2e:73:b9:61:87:f1:07:cd:c4:85:
61:1e:43:f9:4a:65:6b:d7:3f:dd:7f:e3:c9:5f:d1:87:fe:0b:
bc:41:38:92:86:de:2f:38:63:46:8a:12:99:55:61:e6:a1:b6:
76:6b:e5:a3:d6:91:65:dd:56:ef:bf:3b:b4:ca:72:fe:a4:41:
fc:fb:b2:b2:c5:ba:69:34:ce:36:03:b2:47:52:ed:7d:31:7f:
2d:b8:99:57:23:99:13:01:f9:f1:26:2b:9a:c3:cd:b2:fe:a2:
f2:f0:ae:88:95:e5:c6:c4:09:67:6f:4d:19:a2:f5:7e:1b:e9:
a5:c4:a1:9c:d2:b5:fa:af:56:71:06:e7:06:87:37:c6:02:b2:
fb:74:2f:9b:af:e0:37:80:0b:b4:3f:78:da:9f:f8:bd:23:16:
af:32:d0:60:44:d2:8f:58:59:9c:1a:8b:d4:aa:4a:1f:29:4e:
e6:fd:dc:29:aa:6c:da:fd:c2:dc:a7:dd:04:24:78:f9:0d:a9:
b8:c8:23:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:31 2025 by rpki-client