Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/xfHVT2xDl4GuNvd_PgfaSUsGFmY.roa
File: xfHVT2xDl4GuNvd_PgfaSUsGFmY.roa (raw, json)
Hash identifier: cPx+ZFiOe+oE/SEpYentx6hLqMdGBWj0U/1KcIXH3IQ=
Subject key identifier: C5:F1:D5:4F:6C:43:97:81:AE:36:F7:7F:3E:07:DA:49:4B:06:16:66
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019425FDA5BCCBFD319D8580EDF6CD79FCBA
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/xfHVT2xDl4GuNvd_PgfaSUsGFmY.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29244
IP address blocks: 85.118.192.0/21 maxlen: 21
85.118.192.0/24 maxlen: 24
85.118.194.0/24 maxlen: 24
85.118.196.0/24 maxlen: 24
85.118.197.0/24 maxlen: 24
87.120.79.0/24 maxlen: 24
91.92.8.0/24 maxlen: 24
91.92.9.0/24 maxlen: 24
91.92.10.0/24 maxlen: 24
91.92.11.0/24 maxlen: 24
91.92.12.0/24 maxlen: 24
91.92.13.0/24 maxlen: 24
91.92.14.0/24 maxlen: 24
91.92.15.0/24 maxlen: 24
93.123.88.0/21 maxlen: 24
94.156.136.0/21 maxlen: 24
149.62.192.0/18 maxlen: 18
149.62.204.0/24 maxlen: 24
149.62.205.0/24 maxlen: 24
149.62.206.0/24 maxlen: 24
149.62.207.0/24 maxlen: 24
149.62.208.0/24 maxlen: 24
149.62.209.0/24 maxlen: 24
193.193.171.0/24 maxlen: 24
193.193.182.0/24 maxlen: 24
193.194.147.0/24 maxlen: 24
193.194.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 11:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a5:bc:cb:fd:31:9d:85:80:ed:f6:cd:79:fc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5f1d54f6c439781ae36f77f3e07da494b061666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:26:3a:88:d4:d8:88:76:96:fd:4c:45:19:48:
09:82:a9:ec:6f:9d:55:6d:bd:d8:5d:dc:5d:c6:dd:
b5:5f:0e:a5:8a:2f:a4:03:c1:9b:8e:46:ae:95:f1:
6b:9c:43:a8:65:43:d3:bf:aa:6e:0c:8b:0c:31:93:
7c:24:f0:6d:a0:a4:81:ba:c2:d6:1d:0b:12:0a:5e:
ab:8b:61:a3:93:db:37:9a:6c:28:15:db:d2:13:b0:
82:5f:aa:75:25:18:3d:d4:80:d2:1f:3d:c3:ba:30:
d0:ba:a5:e2:7c:80:3f:b4:b3:bc:04:2d:32:23:1e:
7d:a1:1a:4e:12:61:d9:f5:d7:5c:aa:1c:36:18:d3:
58:f9:ae:e9:9a:0a:52:b7:9e:69:67:cf:90:52:c3:
fa:a3:6f:b9:a7:b7:4a:88:b5:18:0b:86:a7:1c:7f:
2e:99:75:38:94:9b:55:03:74:da:e8:ad:15:c2:9b:
2b:54:17:b0:22:07:3c:5a:5e:5b:a2:a9:d0:a2:15:
d7:e4:49:2c:73:ef:4d:1b:a8:3a:26:d0:f3:cb:f3:
16:91:67:d7:a2:2a:a5:f6:d5:4e:b6:fb:ab:05:04:
ca:13:30:ae:f8:4f:31:87:d4:7c:78:0b:87:19:41:
48:ac:19:ea:1c:a9:52:4c:2a:67:ae:bd:5c:6b:55:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F1:D5:4F:6C:43:97:81:AE:36:F7:7F:3E:07:DA:49:4B:06:16:66
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/xfHVT2xDl4GuNvd_PgfaSUsGFmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.192.0/21
87.120.79.0/24
91.92.8.0/21
93.123.88.0/21
94.156.136.0/21
149.62.192.0/18
193.193.171.0/24
193.193.182.0/24
193.194.147.0/24
193.194.155.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:12:96:8a:e9:94:5c:47:a2:23:25:8e:0e:e0:b0:aa:ae:e9:
9f:02:ed:56:b5:c5:c0:9e:b7:cf:a0:3e:6b:6e:50:85:cb:23:
d8:3e:17:51:7c:09:a4:ae:15:8d:ae:19:84:96:d5:ef:43:2e:
c0:20:9e:64:20:64:66:b5:58:42:40:b7:c9:77:98:11:79:70:
3b:c3:a4:37:8d:d5:a4:fb:59:40:a5:ac:bb:f7:5f:f3:ba:74:
9d:9c:85:26:ea:8c:48:22:76:4b:2e:25:22:03:bc:fd:be:f8:
50:4e:a6:af:e9:ab:39:6a:3d:ed:a5:a0:1d:35:41:f9:16:24:
0c:76:ef:66:eb:75:e9:07:c2:6d:f2:d5:9b:c4:94:33:42:bf:
fd:0d:ab:f5:29:41:a5:59:59:8f:9b:ed:d8:0b:22:5a:39:11:
3e:ff:61:91:fa:85:1b:42:f9:c1:db:bc:97:d1:1d:b5:bc:a3:
84:bc:e2:8f:89:de:1e:7f:8c:25:61:21:41:b2:c4:f4:ed:ee:
08:9a:a1:ac:81:8c:a7:83:a3:97:0f:da:e3:30:5a:f7:af:13:
4b:4e:20:7b:ba:45:e6:e6:25:97:82:19:05:c3:e9:a5:c6:7f:
0e:40:34:79:60:d6:e0:9b:b9:96:5b:b3:c0:13:f3:43:fa:88:
af:2a:42:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:37 2025 by rpki-client