Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/chXR19-yw-4iczZoh-5WxrlwJrQ.roa
File: chXR19-yw-4iczZoh-5WxrlwJrQ.roa (raw, json)
Hash identifier: xzGpeg8Am/tsNqbWVN1BRi4EKHr0zDpAKYqBlrlnzmY=
Subject key identifier: 72:15:D1:D7:DF:B2:C3:EE:22:73:36:68:87:EE:56:C6:B9:70:26:B4
Certificate issuer: /CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Certificate serial: 018CC9BBF16F25D57CF1B83C4BDCDAE6D6F8
Authority key identifier: 1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/chXR19-yw-4iczZoh-5WxrlwJrQ.roa
Signing time: Tue 02 Jan 2024 10:33:06 +0000
ROA not before: Tue 02 Jan 2024 10:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7155
IP address blocks: 185.24.160.0/22 maxlen: 22
185.17.44.0/22 maxlen: 22
130.255.16.0/20 maxlen: 20
130.255.20.0/24 maxlen: 24
130.255.27.0/24 maxlen: 24
37.19.24.0/21 maxlen: 21
178.255.88.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 19 Apr 2024 13:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f1:6f:25:d5:7c:f1:b8:3c:4b:dc:da:e6:d6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Validity
Not Before: Jan 2 10:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7215d1d7dfb2c3ee2273366887ee56c6b97026b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1e:e1:80:f1:88:f0:59:e2:cf:8a:1b:48:c6:
79:8a:8e:09:d3:e0:41:15:a7:4d:ea:f2:f7:56:8b:
ef:35:44:3a:37:39:1e:d5:05:1f:e2:e1:c1:39:c5:
7a:ce:e4:a9:e5:93:48:22:b3:35:37:4d:42:53:4f:
24:b6:f6:90:23:e7:af:bf:e3:5d:c8:c8:34:a1:fc:
d2:8c:43:12:9f:fa:17:a2:8a:fd:ad:9f:02:07:33:
e1:40:e1:15:a3:e8:4e:62:7f:ef:20:52:cc:54:ae:
a5:16:5f:ab:1a:d5:df:18:0c:54:fa:3d:20:54:33:
f1:95:8b:33:5e:b0:03:2c:73:42:a6:bd:f6:54:12:
1a:7b:7f:6a:a8:f2:eb:9b:28:c0:10:5b:17:79:9f:
fd:89:05:df:3c:c7:e1:b1:8d:d2:4e:b7:08:cc:18:
1e:27:a6:23:a9:ae:bf:12:e5:ad:8b:75:12:cf:1f:
5e:b3:81:e1:da:6a:d9:77:de:89:b5:ec:38:ed:a5:
82:84:e9:b1:f9:8e:0f:6c:32:b1:00:12:7e:0d:f7:
be:68:52:1e:7b:1e:52:ce:8d:c1:ff:9d:06:22:69:
08:c3:67:12:73:14:7e:4c:cd:dc:ab:51:2a:fd:e5:
87:13:04:6e:38:1e:a8:12:5a:8f:08:2d:4d:67:f6:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:15:D1:D7:DF:B2:C3:EE:22:73:36:68:87:EE:56:C6:B9:70:26:B4
X509v3 Authority Key Identifier:
keyid:1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/chXR19-yw-4iczZoh-5WxrlwJrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.24.0/21
130.255.16.0/20
178.255.88.0/21
185.17.44.0/22
185.24.160.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:24:d1:ea:35:68:c3:37:cf:50:10:22:0e:04:be:a4:2f:7f:
bd:da:3f:0f:ba:66:ef:82:51:68:3d:0c:bb:2f:84:16:12:a7:
66:53:b8:dd:ff:72:cb:8f:54:15:9d:f9:79:b0:5c:c9:27:f2:
e3:b6:f2:de:a7:b9:65:2c:ad:53:05:ca:dc:8e:6e:0c:97:09:
ec:9a:14:50:17:7b:68:4d:85:89:80:38:41:c0:26:bc:52:d3:
a5:23:47:d6:20:c7:9f:eb:cb:ff:33:1d:35:c9:92:c8:86:be:
7b:c1:ec:c4:da:27:a8:7a:17:fa:2c:82:b3:a9:3b:fa:6b:c4:
d8:db:3f:e0:bf:63:36:64:82:73:46:e5:1a:82:ed:a0:c3:a9:
f3:2a:14:7a:e5:03:5e:9d:96:b8:88:cf:b8:ce:61:bd:cf:ab:
5d:dc:d5:39:37:b5:29:09:8b:b0:77:bd:b6:7a:bd:78:bf:4f:
ee:cb:f1:78:cf:e3:e8:f4:06:0d:93:64:e7:94:fa:54:8f:b8:
b7:01:23:9a:e9:99:47:42:6d:d1:b3:19:20:17:a0:f7:47:5c:
76:8d:dd:5d:89:db:2c:03:6f:e4:17:de:4e:16:9e:18:96:17:
f2:d4:66:b5:54:f0:e6:c5:46:db:9e:8e:ef:6a:b9:a5:69:73:
91:92:ad:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 16:37:49 2024 by rpki-client on console-fra.rpki-client.org