Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xhXjNwx1U_jBOsGIVddljsBktjA.roa
File: xhXjNwx1U_jBOsGIVddljsBktjA.roa (raw, json)
Hash identifier: 5uBgehhCePiu3XHABjYrX9rJDJPyimNmI9RiIoX0mo0=
Subject key identifier: C6:15:E3:37:0C:75:53:F8:C1:3A:C1:88:55:D7:65:8E:C0:64:B6:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 018CC8019C5222519BE4A967D582E51FDF6D
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xhXjNwx1U_jBOsGIVddljsBktjA.roa
Signing time: Tue 02 Jan 2024 02:29:57 +0000
ROA not before: Tue 02 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15967
IP address blocks: 77.55.208.0/20 maxlen: 20
77.55.224.0/20 maxlen: 20
77.55.240.0/23 maxlen: 23
77.55.242.0/23 maxlen: 23
77.55.246.0/24 maxlen: 24
77.55.248.0/22 maxlen: 22
77.55.252.0/23 maxlen: 23
77.55.247.0/24 maxlen: 24
77.55.152.0/24 maxlen: 24
77.55.159.0/24 maxlen: 24
77.55.158.0/24 maxlen: 24
77.55.153.0/24 maxlen: 24
77.55.156.0/23 maxlen: 23
77.55.155.0/24 maxlen: 24
77.55.154.0/24 maxlen: 24
77.55.166.0/24 maxlen: 24
77.55.160.0/23 maxlen: 23
77.55.160.0/20 maxlen: 20
77.55.164.0/23 maxlen: 23
77.55.162.0/23 maxlen: 23
77.55.172.0/23 maxlen: 23
77.55.167.0/24 maxlen: 24
77.55.170.0/23 maxlen: 23
77.55.168.0/23 maxlen: 23
77.55.174.0/23 maxlen: 23
77.55.178.0/24 maxlen: 24
77.55.177.0/24 maxlen: 24
77.55.176.0/23 maxlen: 23
77.55.176.0/24 maxlen: 24
77.55.176.0/21 maxlen: 21
77.55.179.0/24 maxlen: 24
77.55.186.0/23 maxlen: 23
77.55.181.0/24 maxlen: 24
77.55.180.0/23 maxlen: 23
77.55.184.0/23 maxlen: 23
77.55.182.0/23 maxlen: 23
77.55.192.0/20 maxlen: 20
77.55.188.0/23 maxlen: 23
77.55.190.0/23 maxlen: 23
77.55.0.0/18 maxlen: 18
77.55.0.0/16 maxlen: 16
31.172.170.0/23 maxlen: 23
31.172.169.0/24 maxlen: 24
31.172.168.0/24 maxlen: 24
31.172.168.0/22 maxlen: 22
77.55.96.0/22 maxlen: 22
77.55.104.0/23 maxlen: 23
77.55.100.0/22 maxlen: 22
77.55.112.0/23 maxlen: 23
77.55.108.0/22 maxlen: 22
77.55.106.0/23 maxlen: 23
77.55.118.0/23 maxlen: 23
77.55.116.0/23 maxlen: 23
77.55.114.0/23 maxlen: 23
77.55.122.0/23 maxlen: 23
77.55.121.0/24 maxlen: 24
77.55.120.0/24 maxlen: 24
77.55.125.0/24 maxlen: 24
77.55.124.0/24 maxlen: 24
77.55.126.0/24 maxlen: 24
77.55.128.0/20 maxlen: 20
77.55.127.0/24 maxlen: 24
77.55.144.0/21 maxlen: 21
77.55.64.0/22 maxlen: 22
77.55.68.0/22 maxlen: 22
77.55.76.0/23 maxlen: 23
77.55.78.0/23 maxlen: 23
77.55.72.0/22 maxlen: 22
77.55.84.0/22 maxlen: 22
77.55.90.0/23 maxlen: 23
77.55.88.0/23 maxlen: 23
85.128.160.0/19 maxlen: 19
85.128.192.0/18 maxlen: 18
85.128.130.0/24 maxlen: 24
85.128.129.0/24 maxlen: 24
85.128.128.0/24 maxlen: 24
85.128.128.0/17 maxlen: 17
85.128.132.0/23 maxlen: 23
85.128.131.0/24 maxlen: 24
85.128.136.0/22 maxlen: 22
85.128.135.0/24 maxlen: 24
85.128.134.0/24 maxlen: 24
85.128.144.0/20 maxlen: 20
85.128.143.0/24 maxlen: 24
85.128.142.0/24 maxlen: 24
85.128.140.0/23 maxlen: 23
2a01:6100:fe01::/48 maxlen: 48
2a01:6100:fe12::/48 maxlen: 48
2a01:6100::/32 maxlen: 32
2a01:6100:fe02::/48 maxlen: 48
2a01:6100:fe10::/48 maxlen: 48
2a01:6100::/48 maxlen: 48
2a01:6100:fe00::/48 maxlen: 48
2a01:6100:fe11::/48 maxlen: 48
2a01:6100:111::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 02 Feb 2024 07:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:9c:52:22:51:9b:e4:a9:67:d5:82:e5:1f:df:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Jan 2 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c615e3370c7553f8c13ac18855d7658ec064b630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a5:84:b8:74:27:7b:37:7f:7f:b7:15:99:5a:
7c:d4:1b:63:ce:59:31:7d:6e:25:26:2e:35:37:89:
6c:06:f2:4a:97:0f:98:a9:5e:08:e8:4c:4a:a4:97:
75:b0:3f:69:61:4c:e3:1a:cb:bd:ba:4c:7b:a5:f6:
f4:0f:0a:db:b8:4b:29:6f:45:7d:03:84:fe:0d:f0:
57:39:f7:b3:66:f0:9f:ec:59:df:ad:7c:73:99:98:
91:f8:dc:4b:5e:52:cc:9d:36:85:3c:e7:59:53:4c:
37:c2:a2:6f:c9:43:7b:16:ef:99:ea:5a:fd:b6:c0:
fa:21:f5:59:3e:1d:12:00:fc:cf:9a:fd:8b:a6:a9:
66:d2:36:0a:4c:5b:be:19:6b:6d:c3:25:d6:00:eb:
87:89:b3:0e:39:4b:f2:a8:1c:73:82:c8:50:29:fc:
60:45:73:cc:17:cf:02:6e:0b:4b:f3:fa:57:0c:69:
e4:cd:33:00:98:fa:6c:22:b7:25:ba:0e:ea:38:20:
f9:c5:45:c8:dc:cd:ba:d7:06:39:48:b8:9a:79:e1:
dc:ea:d3:6a:56:c9:b9:a5:94:fa:3b:e7:6b:9b:e0:
b8:50:e3:80:76:bc:fc:b7:3f:40:f8:31:a9:5c:e1:
d6:2b:eb:fa:8b:06:d8:be:d8:2f:e6:06:c0:30:9f:
c7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:15:E3:37:0C:75:53:F8:C1:3A:C1:88:55:D7:65:8E:C0:64:B6:30
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xhXjNwx1U_jBOsGIVddljsBktjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.168.0/22
77.55.0.0/16
85.128.128.0/17
IPv6:
2a01:6100::/32
Signature Algorithm: sha256WithRSAEncryption
a2:42:09:b3:e0:30:7f:e3:c2:58:93:f1:19:a0:ef:62:f3:e0:
f9:0a:b0:eb:51:14:c6:4e:19:d3:49:1c:42:00:b1:d1:2c:b9:
2e:1f:af:72:f8:bf:15:0e:cc:84:79:58:22:30:34:27:3b:69:
a5:61:6f:6c:54:d0:0c:6c:0f:a6:0d:13:88:55:fd:ac:9c:c6:
af:7a:12:7a:48:25:79:a1:70:7b:4b:a0:09:5b:a8:f3:5c:a2:
fb:22:56:71:5f:65:78:8f:62:27:f0:35:23:b4:30:2d:fe:e3:
3d:2b:f6:db:69:cc:18:0d:59:d5:f2:0c:68:e2:98:a6:c6:52:
13:d0:ab:b9:f5:5a:bc:fa:71:d1:4f:06:b3:c0:ba:f5:a5:12:
8c:f5:0f:95:3d:cd:54:d7:2b:7c:1d:3b:34:e9:c3:ad:b5:4d:
e3:a4:4f:03:bd:f4:c4:ed:b5:50:59:c6:b8:2b:08:31:57:d6:
2a:a3:e7:ca:e9:a0:a0:84:c8:86:23:73:f6:02:6b:73:f7:60:
ae:86:e9:94:4d:ea:e0:26:88:81:c2:a9:62:d6:e1:de:5f:45:
41:dd:c5:1f:17:06:65:ad:fd:5e:ef:05:0d:35:44:ab:ba:e7:
6c:56:9b:9a:43:e6:39:77:49:97:c9:da:6c:35:7a:78:0c:f0:
f8:db:6d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:10 2024 by rpki-client on console-ams.rpki-client.org