Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/XzrGqHHgj5-F1aXpllxeZ0wbY3g.roa
File: XzrGqHHgj5-F1aXpllxeZ0wbY3g.roa (raw, json)
Hash identifier: +fEPqev7VE/HwP4E/e6/Y8q309nWZwzN3lfKLLvoEiM=
Subject key identifier: 5F:3A:C6:A8:71:E0:8F:9F:85:D5:A5:E9:96:5C:5E:67:4C:1B:63:78
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018D9265678800B9863490CFE2BA9501E72D
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/XzrGqHHgj5-F1aXpllxeZ0wbY3g.roa
Signing time: Sat 10 Feb 2024 09:42:15 +0000
ROA not before: Sat 10 Feb 2024 09:42:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216050
IP address blocks: 37.49.146.0/24 maxlen: 24
109.203.162.0/24 maxlen: 24
109.203.164.0/24 maxlen: 24
109.203.165.0/24 maxlen: 24
109.203.167.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 12:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:92:65:67:88:00:b9:86:34:90:cf:e2:ba:95:01:e7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Feb 10 09:42:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f3ac6a871e08f9f85d5a5e9965c5e674c1b6378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:27:14:ca:f3:b1:d2:2c:47:29:13:d8:6e:
09:6d:e8:d6:62:25:17:fc:49:ec:12:b9:9f:74:a1:
87:32:39:bd:b4:5f:35:de:67:f4:34:3f:29:29:4e:
1e:a5:7f:23:75:fc:30:23:6e:23:27:f1:10:f2:9c:
9d:4e:5f:b5:08:0f:33:00:50:a3:4a:84:90:66:bc:
3a:20:f3:c0:99:ad:6b:be:83:41:aa:ea:c1:64:df:
17:30:86:ca:4f:68:45:bb:de:2f:ca:27:29:de:61:
f7:07:36:90:de:84:60:81:0d:b0:46:18:e2:ae:f1:
95:85:5a:9d:af:9f:32:29:fb:da:f9:10:c7:01:fa:
14:5a:42:00:00:c2:28:18:37:62:ab:b2:6f:01:3c:
16:69:7e:71:9a:e3:36:aa:35:31:1c:3a:c2:cc:28:
1c:e4:77:4f:3f:6f:70:ff:a9:0f:58:8e:08:33:7d:
21:c4:2a:fc:f5:8f:34:b0:45:94:e9:e9:18:0e:1a:
0e:8c:f8:75:40:d2:05:43:cd:94:61:00:13:53:d7:
d6:8b:d0:15:d7:b3:a0:7b:b0:9c:b8:24:62:e7:09:
e6:ec:3c:29:c0:d9:6e:17:03:35:b6:79:92:48:ee:
a8:46:9c:60:e5:44:85:a0:9e:4b:17:6d:fa:38:97:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3A:C6:A8:71:E0:8F:9F:85:D5:A5:E9:96:5C:5E:67:4C:1B:63:78
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/XzrGqHHgj5-F1aXpllxeZ0wbY3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.146.0/24
109.203.162.0/24
109.203.164.0/23
109.203.167.0/24
176.46.128.0/24
176.46.131.0/24
Signature Algorithm: sha256WithRSAEncryption
87:18:f6:45:6c:44:77:cb:d2:3e:47:18:bf:6b:30:1b:2f:f2:
3f:85:f8:3a:c9:b7:09:8f:d1:a8:28:57:8f:f9:bf:01:cb:70:
a0:36:d4:84:bc:64:92:db:72:b9:70:4f:2c:84:5e:22:e6:6c:
29:f6:6f:4f:d1:e5:d6:41:72:7a:72:aa:ab:2d:b3:9f:f2:33:
fb:67:59:17:a7:09:5b:96:04:6d:36:c7:59:7e:a4:11:69:51:
fc:61:63:05:68:35:54:63:05:32:26:6c:91:91:46:b8:28:7c:
72:2f:aa:22:67:50:e4:fc:d8:c8:4d:3a:7d:2c:d9:85:bb:fb:
be:06:9d:cd:42:2b:af:93:4e:d9:bf:6b:05:b4:a5:6a:27:84:
5f:c1:8e:6f:ef:85:e4:73:38:6f:d1:ad:69:69:b7:c0:99:f4:
95:66:d3:ad:f8:83:f8:ff:c5:de:33:69:69:5c:e4:50:10:e3:
27:55:4a:ca:86:f4:fe:f1:68:8a:af:e6:d6:78:af:3f:7a:cc:
94:ac:37:a9:8c:3c:55:43:16:60:bf:4c:d2:d7:ad:d0:cb:05:
9b:e6:0e:c5:1f:7a:87:aa:c6:f8:f8:79:a8:88:a9:51:aa:7b:
2f:22:d7:87:e6:3e:e9:77:75:92:5a:16:9f:36:02:b5:d9:4d:
b2:91:08:18
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAY2SZWeIALmGNJDP4rqVAectMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjQwMjEwMDk0MjE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjNhYzZhODcxZTA4ZjlmODVkNWE1ZTk5NjVjNWU2NzRjMWI2Mzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJEnFMrzsdIsRykT2G4JbejWYiUX
/EnsErmfdKGHMjm9tF813mf0ND8pKU4epX8jdfwwI24jJ/EQ8pydTl+1CA8zAFCj
SoSQZrw6IPPAma1rvoNBqurBZN8XMIbKT2hFu94vyicp3mH3BzaQ3oRggQ2wRhji
rvGVhVqdr58yKfva+RDHAfoUWkIAAMIoGDdiq7JvATwWaX5xmuM2qjUxHDrCzCgc
5HdPP29w/6kPWI4IM30hxCr89Y80sEWU6ekYDhoOjPh1QNIFQ82UYQATU9fWi9AV
17Oge7CcuCRi5wnm7DwpwNluFwM1tnmSSO6oRpxg5USFoJ5LF236OJftOQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFF86xqhx4I+fhdWl6ZZcXmdMG2N4MB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvWHpyR3FISGdqNS1GMWFYcGxseGVaMHdiWTNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAJTGSAwQA
bcuiAwQBbcukAwQAbcunAwQAsC6AAwQAsC6DMA0GCSqGSIb3DQEBCwUAA4IBAQCH
GPZFbER3y9I+Rxi/azAbL/I/hfg6ybcJj9GoKFeP+b8By3CgNtSEvGSS23K5cE8s
hF4i5mwp9m9P0eXWQXJ6cqqrLbOf8jP7Z1kXpwlblgRtNsdZfqQRaVH8YWMFaDVU
YwUyJmyRkUa4KHxyL6oiZ1Dk/NjITTp9LNmFu/u+Bp3NQiuvk07Zv2sFtKVqJ4Rf
wY5v74Xkczhv0a1pabfAmfSVZtOt+IP4/8XeM2lpXORQEOMnVUrKhvT+8WiKr+bW
eK8/esyUrDepjDxVQxZgv0zS163QywWb5g7FH3qHqsb4+HmoiKlRqnsvIteH5j7p
d3WSWhafNgK12U2ykQgY
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:30 2025 by rpki-client