Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/X5NHDmcW9y6NCY_0lr9R9EEsLcU.roa
File: X5NHDmcW9y6NCY_0lr9R9EEsLcU.roa (raw, json)
Hash identifier: WypN9uRQoW6bcYF5n3aQ9deZTV0Cgsu/FDkXAtOHLVA=
Subject key identifier: 5F:93:47:0E:67:16:F7:2E:8D:09:8F:F4:96:BF:51:F4:41:2C:2D:C5
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 018CC94E0B817BEDE1D3874216CC66A8EA76
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/X5NHDmcW9y6NCY_0lr9R9EEsLcU.roa
Signing time: Tue 02 Jan 2024 08:33:04 +0000
ROA not before: Tue 02 Jan 2024 08:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61333
IP address blocks: 94.228.108.0/24 maxlen: 24
94.228.107.0/24 maxlen: 24
94.228.110.0/24 maxlen: 24
94.228.96.0/24 maxlen: 24
94.228.96.0/20 maxlen: 24
94.228.98.0/24 maxlen: 24
94.228.100.0/24 maxlen: 24
94.228.104.0/24 maxlen: 24
94.228.105.0/24 maxlen: 24
149.126.64.0/24 maxlen: 24
149.126.64.0/21 maxlen: 24
149.126.65.0/24 maxlen: 24
149.126.67.0/24 maxlen: 24
149.126.66.0/24 maxlen: 24
149.126.70.0/24 maxlen: 24
194.169.198.0/24 maxlen: 24
185.251.52.0/24 maxlen: 24
185.251.54.0/24 maxlen: 24
185.251.53.0/24 maxlen: 24
193.200.249.0/24 maxlen: 24
2a00:e30:64::/64 maxlen: 64
2a00:e30:80::/41 maxlen: 64
2a00:e30:a00::/40 maxlen: 48
2a00:e30:ed00::/41 maxlen: 48
2a00:e30:6900::/41 maxlen: 41
2a00:e30:3000::/41 maxlen: 41
2a00:e30:2100::/41 maxlen: 41
2a00:e30:280::/41 maxlen: 41
2a00:e30::/41 maxlen: 41
Validation: Failed, certificate revoked on Mon 29 Jan 2024 14:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:0b:81:7b:ed:e1:d3:87:42:16:cc:66:a8:ea:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Jan 2 08:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f93470e6716f72e8d098ff496bf51f4412c2dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:75:ce:83:90:b6:db:2c:cc:40:88:16:eb:18:
0b:38:50:b3:2f:5c:a7:34:79:c9:2a:91:fa:19:2f:
7a:62:7e:f2:8b:01:34:a8:b1:d0:db:81:23:8c:4e:
e0:a8:6e:04:63:29:0f:9c:25:06:96:5e:60:52:bc:
88:4d:8d:b1:78:a0:56:02:18:e8:a6:cf:4c:17:9f:
73:d2:a3:6c:b9:d3:3b:e8:69:f6:8e:ba:f7:8f:e9:
ef:4e:69:6d:bb:12:f5:34:29:7c:8d:a8:fd:0f:1a:
e1:8a:49:9a:2a:0f:2c:b8:bc:7e:8a:9a:5b:6e:83:
80:77:2d:43:65:37:f0:ef:5a:ba:09:91:37:fe:a0:
25:7e:15:a1:63:fb:64:85:86:2a:57:89:f2:8b:2f:
93:04:65:c3:55:b0:bd:cd:23:d5:4a:5e:81:6c:87:
cd:80:4a:19:73:95:59:af:bf:29:61:57:b8:87:8b:
5e:c0:c5:d0:47:62:3e:e1:47:6c:ab:2c:4e:0f:71:
63:b3:05:12:e3:db:cd:74:c8:18:e8:c3:00:83:f4:
0d:85:dd:05:b2:b9:22:f0:7b:25:a3:f6:7a:c9:dc:
2b:7a:53:cf:4d:51:1c:a5:f2:d2:11:6a:a5:72:e6:
16:5e:16:68:1c:08:d8:b5:40:6a:5d:a0:c2:b7:55:
c5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:93:47:0E:67:16:F7:2E:8D:09:8F:F4:96:BF:51:F4:41:2C:2D:C5
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/X5NHDmcW9y6NCY_0lr9R9EEsLcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.96.0/20
149.126.64.0/21
185.251.52.0-185.251.54.255
193.200.249.0/24
194.169.198.0/24
IPv6:
2a00:e30::/40
2a00:e30:280::/41
2a00:e30:a00::/40
2a00:e30:2100::/41
2a00:e30:3000::/41
2a00:e30:6900::/41
2a00:e30:ed00::/41
Signature Algorithm: sha256WithRSAEncryption
7d:6e:a1:16:cd:c0:cf:dd:0d:ce:c9:d9:3b:6b:55:44:f0:a0:
6d:43:a4:e5:86:04:9d:95:5d:87:51:87:6c:20:1e:48:bf:07:
78:8c:4e:76:f7:a8:6f:90:f1:99:a8:cf:f7:61:5b:b7:06:8e:
47:5e:b7:b0:4d:8a:5d:11:3b:bc:ce:0e:3d:68:94:fe:d6:07:
be:c5:cc:c4:92:9d:01:fa:08:2e:3b:dc:3b:84:c2:3b:6d:8f:
40:6c:c0:33:71:fa:dc:af:94:74:4f:ab:b8:71:a4:2e:ba:f2:
70:d4:eb:ab:14:17:5c:5b:fe:8b:77:9d:e0:ac:a3:96:8e:3f:
96:43:4d:05:7a:bf:81:05:51:94:1a:d4:0c:72:9e:53:44:6d:
e7:f7:ca:80:20:b3:81:b2:cd:08:bb:47:43:8c:2a:78:9e:82:
49:61:b0:b9:d4:85:74:14:60:3b:9f:03:b9:3a:88:38:f3:f8:
7c:75:1f:d8:4f:4b:2b:f5:c0:13:e0:65:17:d4:b9:c2:1f:cd:
a3:0a:e9:57:d7:97:2e:3b:a9:a6:c6:a5:54:29:1d:0d:48:ed:
d3:94:35:8c:69:38:1e:e4:b3:91:cd:82:d9:5f:fd:f3:96:70:
29:ed:fa:f8:99:7b:15:dc:04:01:a7:25:e4:dd:4c:d0:15:ce:
96:2f:db:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:03 2024 by rpki-client on console-fra.rpki-client.org