Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XJNhCs41m5dRdmy0trG9ynnDt7I.roa
File: XJNhCs41m5dRdmy0trG9ynnDt7I.roa (raw, json)
Hash identifier: VzJBTSbN8SK8LJAc7XbibjOnJ5+9/7V4llllnt+/7fc=
Subject key identifier: 5C:93:61:0A:CE:35:9B:97:51:76:6C:B4:B6:B1:BD:CA:79:C3:B7:B2
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E74812748A27C485EDC63FB84EB2A6AF3
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XJNhCs41m5dRdmy0trG9ynnDt7I.roa
Signing time: Mon 25 Mar 2024 07:26:45 +0000
ROA not before: Mon 25 Mar 2024 07:26:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
146.19.125.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 19:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:81:27:48:a2:7c:48:5e:dc:63:fb:84:eb:2a:6a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 25 07:26:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c93610ace359b9751766cb4b6b1bdca79c3b7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ab:82:48:22:35:fc:26:99:56:1a:56:f0:26:
fd:4b:48:73:1f:db:80:79:db:d7:87:20:53:10:53:
b7:cd:ac:b5:c8:45:5e:a0:c4:4c:46:f3:74:ac:1e:
c4:89:31:ea:7e:6d:6c:78:6c:c8:23:95:24:b9:3d:
c6:38:04:88:bf:11:c4:3d:23:15:0a:e8:ff:98:8f:
eb:d1:01:83:01:58:0f:b1:a0:29:05:a8:61:c6:a6:
54:ec:9c:5a:3d:6d:0a:08:16:b2:1f:1e:67:0f:48:
cd:f9:bb:9a:27:7d:0b:69:1e:7e:e3:e7:55:38:91:
11:0e:af:31:15:97:55:43:51:e7:83:b3:a2:e6:b0:
d3:b5:be:44:d6:d1:e2:c7:c3:ed:d3:80:4b:e4:44:
d6:ac:8b:09:48:c7:46:64:d5:28:d9:1e:06:e3:c1:
ca:9a:a3:0e:b6:ca:45:b6:13:d9:ce:d4:7d:10:b9:
1d:af:ae:e7:4c:af:4f:3a:13:e8:d7:79:ca:d6:0c:
af:cd:74:de:e0:f5:7b:c0:2e:4c:3b:d6:49:ab:bd:
fa:b7:58:66:02:21:4c:57:04:b1:9d:46:1d:56:74:
ec:ad:28:4f:07:8a:d9:ce:cb:32:ba:c6:b4:1a:8d:
dc:2d:57:ef:33:cc:df:65:c9:3c:1c:bb:ce:99:fb:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:93:61:0A:CE:35:9B:97:51:76:6C:B4:B6:B1:BD:CA:79:C3:B7:B2
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/XJNhCs41m5dRdmy0trG9ynnDt7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
5.181.87.0/24
45.94.170.0/24
45.132.181.0/24
85.209.120.0/23
146.19.125.0/24
193.30.241.0/24
193.57.41.0/24
195.177.93.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
07:4e:a0:69:86:88:f8:09:0d:93:32:d6:cd:6c:87:3e:a1:19:
cf:e3:67:71:c0:3e:8a:a8:29:27:ee:c5:42:f2:48:d2:64:95:
10:da:14:38:27:60:0f:0f:8d:17:b7:c5:62:fd:64:c8:af:7e:
97:a8:75:f1:ec:a1:90:72:c4:23:65:4d:b0:47:fa:d9:ba:8e:
27:b0:9d:36:f5:d5:13:00:7c:32:1d:dc:a1:0c:ea:c2:db:2a:
05:89:92:43:fb:c2:05:4a:8d:9a:e2:9a:80:11:d9:d9:e0:54:
8b:14:4e:2b:5b:e2:6f:d1:e8:af:be:92:f7:aa:c6:b3:c6:84:
2f:20:12:02:ce:e9:09:3e:9d:59:40:e0:08:5e:e9:18:b6:41:
69:d7:9a:86:1b:9b:c2:bc:89:fa:15:92:c1:c7:b8:b6:13:3f:
40:41:76:7d:fa:d0:56:ec:27:5e:81:e7:f9:0c:2b:4f:e4:2d:
c7:32:f4:58:35:35:c4:de:8f:2e:49:02:42:1f:d7:0d:97:72:
63:bd:04:27:1a:aa:7b:81:37:96:7a:9a:d0:be:c7:4e:73:f6:
c1:4c:7d:19:e6:0c:35:8c:5c:46:08:ba:a8:6d:34:b8:e8:71:
87:cc:8e:2b:4a:be:b7:b1:cf:45:ca:82:31:e5:88:50:14:73:
5b:d6:58:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 21:47:54 2024 by rpki-client on console-ams.rpki-client.org