Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/XGsZQucYArW7I86pH9gWSKZ6RKw.roa
File: XGsZQucYArW7I86pH9gWSKZ6RKw.roa (raw, json)
Hash identifier: +CM/AxSOAJG2+99Lwo2n/RdBhiDXsO6QpQuvvVxtm0k=
Subject key identifier: 5C:6B:19:42:E7:18:02:B5:BB:23:CE:A9:1F:D8:16:48:A6:7A:44:AC
Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial: 018DEF0AA3D60AF1E5EF5178C721003507E6
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/XGsZQucYArW7I86pH9gWSKZ6RKw.roa
Signing time: Wed 28 Feb 2024 09:27:48 +0000
ROA not before: Wed 28 Feb 2024 09:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44407
IP address blocks: 37.140.224.0/21 maxlen: 21
45.81.80.0/22 maxlen: 22
45.87.56.0/22 maxlen: 22
45.132.248.0/22 maxlen: 24
45.148.108.0/22 maxlen: 22
45.156.228.0/22 maxlen: 22
46.247.224.0/19 maxlen: 19
79.132.144.0/20 maxlen: 20
80.240.160.0/20 maxlen: 20
85.112.192.0/19 maxlen: 19
86.105.88.0/21 maxlen: 21
86.107.248.0/21 maxlen: 21
89.35.208.0/21 maxlen: 21
89.43.156.0/22 maxlen: 24
185.16.48.0/22 maxlen: 24
185.176.176.0/22 maxlen: 22
185.181.152.0/22 maxlen: 22
185.183.60.0/22 maxlen: 22
185.183.64.0/22 maxlen: 22
185.183.252.0/22 maxlen: 22
185.184.4.0/22 maxlen: 22
185.198.224.0/22 maxlen: 22
185.204.252.0/22 maxlen: 22
185.209.140.0/22 maxlen: 22
185.223.148.0/22 maxlen: 22
185.243.120.0/22 maxlen: 22
194.36.192.0/22 maxlen: 22
195.123.7.0/24 maxlen: 24
195.177.108.0/22 maxlen: 22
217.26.192.0/20 maxlen: 20
2a0a:1c80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 28 Feb 2024 15:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:0a:a3:d6:0a:f1:e5:ef:51:78:c7:21:00:35:07:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Validity
Not Before: Feb 28 09:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c6b1942e71802b5bb23cea91fd81648a67a44ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:bd:b5:55:f4:4e:ec:d6:98:98:0f:d6:bd:
35:73:9f:b4:f8:b7:49:99:5d:c1:0d:2f:4b:d6:38:
c1:2c:2d:14:9d:ab:b5:d5:4d:1f:98:95:77:19:ec:
34:b5:b9:c0:69:c5:82:a4:3f:08:a6:5c:93:aa:34:
2b:28:4b:f1:36:80:19:65:f0:f0:2d:4d:e3:d9:9b:
49:12:2e:2a:d0:04:1a:69:f6:12:5d:34:e3:f8:7e:
95:fe:35:ed:d8:2f:e2:13:1d:fb:07:30:c1:e5:97:
b0:33:70:84:5c:46:b0:e8:12:11:c3:4d:36:bb:37:
d2:95:a0:8e:89:8e:03:07:f6:44:01:96:b2:37:05:
f9:b1:c9:2d:e2:b7:5b:6d:32:5e:a9:8d:62:15:98:
85:34:b0:40:2f:0d:17:33:d9:ce:7f:5d:97:ec:01:
76:1b:13:12:a0:f6:89:75:0a:fa:fe:7c:04:37:a4:
13:19:c0:a6:33:8c:c8:87:12:16:81:f4:71:bc:92:
9c:c7:00:ad:98:99:af:52:83:ee:6e:bb:0e:31:cb:
19:9c:ba:6b:9b:b4:ea:9e:08:35:47:ef:cc:81:24:
4a:d5:45:f7:ee:d8:af:5c:92:ba:2c:28:64:66:49:
a5:f7:f2:a1:cc:ba:d9:76:d0:65:39:9f:e3:1c:95:
91:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6B:19:42:E7:18:02:B5:BB:23:CE:A9:1F:D8:16:48:A6:7A:44:AC
X509v3 Authority Key Identifier:
keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/XGsZQucYArW7I86pH9gWSKZ6RKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.224.0/21
45.81.80.0/22
45.87.56.0/22
45.132.248.0/22
45.148.108.0/22
45.156.228.0/22
46.247.224.0/19
79.132.144.0/20
80.240.160.0/20
85.112.192.0/19
86.105.88.0/21
86.107.248.0/21
89.35.208.0/21
89.43.156.0/22
185.16.48.0/22
185.176.176.0/22
185.181.152.0/22
185.183.60.0-185.183.67.255
185.183.252.0/22
185.184.4.0/22
185.198.224.0/22
185.204.252.0/22
185.209.140.0/22
185.223.148.0/22
185.243.120.0/22
194.36.192.0/22
195.123.7.0/24
195.177.108.0/22
217.26.192.0/20
IPv6:
2a0a:1c80::/29
Signature Algorithm: sha256WithRSAEncryption
3c:00:c9:5f:f5:ce:5f:1b:f3:96:8d:ca:42:2e:9f:a0:60:52:
6f:81:03:32:82:bc:f4:90:66:0a:e8:4e:80:a5:d2:89:33:3e:
26:36:8f:0e:46:9e:2e:fa:70:a2:5c:ff:bb:8d:48:c6:34:f4:
d6:dc:c7:63:79:c0:a8:07:dc:e7:ed:8c:4c:a9:b3:ee:17:7c:
d6:26:33:23:21:3e:a3:63:24:27:3e:71:82:53:72:ee:52:61:
2d:8f:fd:c9:4e:a7:fd:e4:31:a0:b1:18:89:d0:b8:10:ca:68:
12:bd:61:8a:eb:18:94:ec:7c:ab:57:71:71:83:c1:8a:ec:7a:
06:6c:34:42:95:21:b7:4f:38:dd:3d:99:a9:7b:91:1a:25:85:
d4:4a:2a:63:b2:51:73:74:9e:fa:9d:1c:d4:16:51:c1:03:e5:
75:c5:ef:1f:80:11:79:32:37:03:42:1a:16:b5:b8:41:78:03:
5e:77:5e:02:4f:0a:50:d5:cb:b4:2f:43:f7:fe:43:1f:81:f1:
11:b2:8e:0b:e1:38:09:8a:e1:99:bc:77:e7:9c:a5:d1:f0:fc:
c4:9a:93:8f:99:c2:42:64:19:38:12:1c:14:6a:87:6c:51:aa:
22:9f:97:a2:6c:2c:f6:b4:cf:ee:23:f3:3b:f3:0a:7c:b4:41:
83:26:fa:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:46 2024 by rpki-client on console-ams.rpki-client.org