Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/7XYJ7QCF3b7-9mMLFPjjvitD1b0.roa
File: 7XYJ7QCF3b7-9mMLFPjjvitD1b0.roa (raw, json)
Hash identifier: oUVERXePvlJxFi1RCIS5plqbUsJxOe0cVNSifiZQ9Jo=
Subject key identifier: ED:76:09:ED:00:85:DD:BE:FE:F6:63:0B:14:F8:E3:BE:2B:43:D5:BD
Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial: 01919972CAC12B052D359FFB3976BE093611
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/7XYJ7QCF3b7-9mMLFPjjvitD1b0.roa
Signing time: Wed 28 Aug 2024 14:45:22 +0000
ROA not before: Wed 28 Aug 2024 14:45:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20712
IP address blocks: 5.172.160.0/20 maxlen: 20
5.172.170.0/24 maxlen: 24
81.2.64.0/18 maxlen: 18
81.187.0.0/16 maxlen: 23
90.155.0.0/18 maxlen: 24
90.155.64.0/19 maxlen: 20
90.155.96.0/20 maxlen: 20
178.238.144.0/20 maxlen: 20
194.4.172.0/22 maxlen: 22
217.169.0.0/19 maxlen: 19
2001:8b0::/32 maxlen: 63
2001:8b0:a::666/128 maxlen: 128
2001:8b6::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 16 Sep 2024 13:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:99:72:ca:c1:2b:05:2d:35:9f:fb:39:76:be:09:36:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
Validity
Not Before: Aug 28 14:45:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed7609ed0085ddbefef6630b14f8e3be2b43d5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:48:6d:f7:38:02:3d:d1:07:66:28:6c:a9:
b8:78:dd:35:73:23:51:54:ad:71:b0:1e:dd:10:d8:
df:54:6e:e1:99:67:84:13:22:c4:31:66:f5:44:16:
b1:ff:be:a6:c0:ed:d9:dc:1f:f3:4d:ca:fd:c5:b7:
64:78:35:b9:38:60:ee:1f:b0:a3:6c:8e:4c:66:1e:
75:29:38:52:5c:cd:39:1c:60:a4:0e:f5:df:91:c0:
b5:a4:23:37:42:2e:90:f6:00:b6:5b:0e:e2:6f:9c:
2f:f0:97:7d:7f:a8:26:aa:10:ec:15:26:fd:8d:51:
ff:36:ea:20:8a:ac:91:eb:aa:5f:44:7e:9b:e6:db:
94:7a:fd:d5:ab:1c:8a:df:50:52:de:13:ab:d9:62:
4e:72:fd:30:df:cd:ea:e3:aa:7f:59:eb:63:71:e9:
ac:c0:5a:b2:fb:13:3e:8b:5b:9c:85:6b:f9:5a:57:
50:ba:f5:2e:b9:a7:93:6e:eb:b1:f2:bf:f7:97:fb:
48:6a:ac:d7:3a:37:bf:91:d0:c7:5d:8c:dc:40:28:
cc:c4:ed:10:7e:ff:37:c5:af:81:fa:5b:8b:f7:8d:
91:a6:8f:4e:2b:7e:72:5a:0a:a2:a4:6a:53:a2:84:
2e:8b:37:c2:8a:8d:0d:d0:6b:03:5f:4e:66:3f:48:
6e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:76:09:ED:00:85:DD:BE:FE:F6:63:0B:14:F8:E3:BE:2B:43:D5:BD
X509v3 Authority Key Identifier:
keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/7XYJ7QCF3b7-9mMLFPjjvitD1b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.160.0/20
81.2.64.0/18
81.187.0.0/16
90.155.0.0-90.155.111.255
178.238.144.0/20
194.4.172.0/22
217.169.0.0/19
IPv6:
2001:8b0::/32
2001:8b6::/32
Signature Algorithm: sha256WithRSAEncryption
01:f3:c2:98:52:72:b0:c8:84:48:95:a9:a0:02:c0:4c:f1:25:
dd:79:c9:6d:5a:be:20:4b:95:6b:e8:18:5a:ff:65:f1:c2:89:
55:20:73:e0:6e:cc:23:84:32:d7:1e:d8:b2:38:59:c1:10:42:
24:88:71:00:9c:0b:54:40:93:e4:25:ae:89:91:9b:65:19:65:
2e:b0:dc:e0:9c:e2:2c:09:75:cc:7c:83:7e:56:a7:5a:a0:48:
30:d1:4f:86:b9:84:b2:59:04:6b:94:82:65:73:5e:d9:d2:53:
28:8c:88:12:a6:90:66:96:1c:41:9c:01:53:f9:11:4f:ef:a3:
5f:dc:c9:cc:1c:8f:22:db:6f:66:41:f9:a4:6b:61:08:9d:39:
66:8f:4f:e6:c0:ac:d0:1b:7e:c5:f3:90:ec:8c:12:44:9c:b9:
ec:cb:67:a1:45:28:1a:14:70:aa:59:ab:3d:01:00:70:14:fc:
98:73:66:2b:37:78:86:9a:ad:bc:f8:69:32:f6:cf:e7:ed:ed:
de:df:81:52:76:2c:7b:76:fa:10:f2:c9:83:67:81:d0:cb:fd:
00:62:71:09:03:5b:19:b7:43:86:3c:d3:22:42:fe:dc:5f:cb:
19:ea:17:01:99:22:14:ab:47:25:fc:e4:7b:fc:c9:82:bf:22:
6c:10:75:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:59 2025 by rpki-client