Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/XltK7EffJb1OZfMuZqyFX7Ub3TA.roa
File: XltK7EffJb1OZfMuZqyFX7Ub3TA.roa (raw, json)
Hash identifier: kUcufmUaz5nTk0V6OoY9yHzt64p0eP2zTCQU8U+aePw=
Subject key identifier: 5E:5B:4A:EC:47:DF:25:BD:4E:65:F3:2E:66:AC:85:5F:B5:1B:DD:30
Certificate issuer: /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial: 01921EAA951DEDF2F84EFD4FD8BDB8512A66
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/XltK7EffJb1OZfMuZqyFX7Ub3TA.roa
Signing time: Mon 23 Sep 2024 11:35:48 +0000
ROA not before: Mon 23 Sep 2024 11:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16154
IP address blocks: 80.95.28.0/22 maxlen: 24
88.213.194.0/23 maxlen: 24
88.213.204.0/22 maxlen: 24
217.79.64.0/22 maxlen: 24
217.79.72.0/21 maxlen: 24
217.79.80.0/20 maxlen: 24
2a02:7900::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1e:aa:95:1d:ed:f2:f8:4e:fd:4f:d8:bd:b8:51:2a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Validity
Not Before: Sep 23 11:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e5b4aec47df25bd4e65f32e66ac855fb51bdd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:23:69:c3:05:37:e7:e9:d3:83:b4:a9:8f:
ef:55:26:18:15:2b:6a:3d:83:f3:75:a7:7f:4d:36:
6e:1d:9e:8c:0c:52:e9:ae:94:0d:14:d2:ce:44:74:
b3:2e:03:00:2e:b0:2c:20:1b:19:a3:02:60:de:fa:
9d:a8:9d:0d:ea:23:54:42:76:68:50:90:a6:3a:63:
2c:15:a2:f2:56:fb:6a:f7:3c:b0:2f:e0:fe:15:08:
7c:d6:23:59:e7:b9:03:0c:ee:ac:e3:f6:3f:0b:73:
e2:da:58:35:ba:90:9d:e8:2f:bc:c7:62:2c:e1:05:
7b:18:89:df:81:15:98:d7:a7:ae:71:00:f6:88:91:
97:d6:36:23:fa:95:8e:42:0c:89:14:09:35:33:0f:
c6:92:64:39:7b:49:f1:62:42:65:b0:48:6f:c2:cc:
20:ab:4b:f8:ba:71:51:6c:25:44:46:c7:9e:e5:eb:
ab:82:85:fd:21:1c:c2:ff:ff:9f:79:70:8e:a7:d4:
9e:28:98:c3:24:0d:1d:20:9a:85:bc:c0:4e:a1:d5:
93:48:9b:17:7b:de:41:49:f8:79:42:8f:20:13:fb:
ac:d5:85:d2:5a:5a:0e:9d:12:b2:52:d6:8a:5e:f1:
b4:03:20:d9:e7:2d:6a:5b:08:5f:96:f9:32:1b:62:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5B:4A:EC:47:DF:25:BD:4E:65:F3:2E:66:AC:85:5F:B5:1B:DD:30
X509v3 Authority Key Identifier:
keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/XltK7EffJb1OZfMuZqyFX7Ub3TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.28.0/22
88.213.194.0/23
88.213.204.0/22
217.79.64.0/22
217.79.72.0-217.79.95.255
IPv6:
2a02:7900::/32
Signature Algorithm: sha256WithRSAEncryption
b1:5d:59:01:75:5c:d1:18:30:89:b8:8e:24:5a:91:b6:b2:85:
94:df:00:74:41:11:f5:e0:46:9a:58:5b:10:ea:f9:fb:a9:aa:
a7:be:2c:e2:44:45:ba:7b:40:5c:33:29:86:a4:0f:e5:04:72:
e6:f7:36:7e:d1:5b:7a:e3:df:b4:72:3f:fc:b0:af:73:cb:47:
2b:49:3e:97:e4:76:ae:4c:41:49:b9:37:60:5f:ba:ab:f0:6a:
e8:f1:5f:29:bf:38:71:11:ee:e0:60:47:08:74:4c:39:42:15:
49:b5:f3:b4:bb:f8:ee:4b:0d:56:3a:93:77:46:3c:c5:e2:ea:
84:c8:1f:5d:4f:8c:7b:a5:f0:26:1b:5e:36:14:b8:40:86:b1:
84:f5:d7:b5:92:78:57:6e:ab:de:3f:a1:e9:db:91:ce:f8:5a:
70:72:74:41:2e:52:b5:71:9c:44:a1:75:ea:58:99:10:2d:60:
6d:6b:43:93:29:e0:27:5f:a9:6f:13:00:0d:bf:23:f2:38:74:
4c:7f:83:cb:bd:6a:22:4b:6e:06:05:7f:e1:c8:c5:8a:17:b8:
d7:d3:ef:f3:f6:6a:10:6d:c9:c8:e7:4e:ba:0b:12:c6:46:14:
42:5a:44:7a:b0:25:39:0f:a3:4f:9e:05:64:8d:af:e6:52:c1:
8f:92:c9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:40 2025 by rpki-client