Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/XBEvUiNkLbLG_tfo2744QcgxsGw.roa
File: XBEvUiNkLbLG_tfo2744QcgxsGw.roa (raw, json)
Hash identifier: RSe2a42hTGtdkKobn66l1DMbNPK66niUc4iJKQcUvT0=
Subject key identifier: 5C:11:2F:52:23:64:2D:B2:C6:FE:D7:E8:DB:BE:38:41:C8:31:B0:6C
Certificate issuer: /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial: 019424B27F34AB64AFF28B7BDAE734370567
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/XBEvUiNkLbLG_tfo2744QcgxsGw.roa
Signing time: Thu 02 Jan 2025 01:47:45 +0000
ROA not before: Thu 02 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13030
IP address blocks: 37.17.232.0/21 maxlen: 21
45.80.136.0/22 maxlen: 22
77.74.80.0/21 maxlen: 21
77.109.128.0/18 maxlen: 18
77.109.128.0/19 maxlen: 19
77.109.160.0/19 maxlen: 19
80.253.88.0/21 maxlen: 21
81.6.32.0/20 maxlen: 20
82.197.160.0/19 maxlen: 19
82.197.160.0/20 maxlen: 20
82.197.176.0/20 maxlen: 20
85.195.192.0/20 maxlen: 20
85.195.208.0/20 maxlen: 20
85.195.224.0/19 maxlen: 19
85.195.224.0/20 maxlen: 20
85.195.240.0/20 maxlen: 20
109.202.192.0/19 maxlen: 19
141.195.80.0/20 maxlen: 20
185.72.64.0/22 maxlen: 22
185.72.67.0/24 maxlen: 24
185.137.172.0/22 maxlen: 22
185.183.192.0/22 maxlen: 22
185.201.248.0/22 maxlen: 22
185.246.104.0/22 maxlen: 22
193.47.153.0/24 maxlen: 24
193.223.80.0/20 maxlen: 20
195.134.128.0/19 maxlen: 19
212.51.128.0/19 maxlen: 19
212.51.128.0/20 maxlen: 20
212.51.144.0/20 maxlen: 20
213.144.128.0/19 maxlen: 19
213.144.128.0/20 maxlen: 20
213.144.144.0/20 maxlen: 20
217.118.192.0/21 maxlen: 21
217.118.200.0/22 maxlen: 22
2001:1620::/32 maxlen: 32
2a02:168::/30 maxlen: 30
2a02:168::/32 maxlen: 32
2a02:169::/32 maxlen: 32
2a07:600::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 11 Feb 2025 09:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:7f:34:ab:64:af:f2:8b:7b:da:e7:34:37:05:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Validity
Not Before: Jan 2 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c112f5223642db2c6fed7e8dbbe3841c831b06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:f6:cc:30:fe:05:7c:00:b3:5e:6b:e2:74:
3a:5c:03:6d:38:e6:85:02:99:ef:5c:8a:78:2a:2b:
35:28:9a:4e:8b:2e:df:81:ad:a0:43:4a:e3:5b:f4:
52:53:ab:22:4a:98:74:1e:06:c7:32:a4:cc:30:4b:
b7:23:4b:68:84:6d:34:d8:68:3d:13:04:8d:5d:ab:
b5:dd:fb:18:0e:7e:0c:5f:15:f9:aa:22:b7:05:e7:
17:26:34:18:f3:e7:31:ac:7a:34:8a:ca:8c:ba:79:
8e:2b:e6:f0:11:10:eb:16:38:16:69:a5:fb:2f:6e:
08:39:86:ee:51:2f:5c:15:04:19:d1:db:75:ae:1a:
3b:4d:76:8a:8b:e1:e5:e8:f1:ff:69:4f:e6:33:ed:
ff:f8:ab:58:84:cb:d2:4c:35:14:03:de:b5:3c:19:
be:a0:05:92:fe:62:f8:cf:34:61:9f:f1:10:86:36:
52:c1:a0:8c:df:d5:34:99:25:65:b3:f8:33:15:6e:
8e:8a:a6:2f:7b:21:eb:ec:15:0e:42:83:eb:e9:09:
6a:78:b4:e6:53:0d:18:02:5e:db:54:98:17:d5:1b:
fa:15:5f:20:b4:76:74:d2:9e:fe:88:f8:88:e2:31:
70:63:66:8a:8e:a1:c1:b3:d1:de:bf:90:c1:20:4d:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:11:2F:52:23:64:2D:B2:C6:FE:D7:E8:DB:BE:38:41:C8:31:B0:6C
X509v3 Authority Key Identifier:
keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/XBEvUiNkLbLG_tfo2744QcgxsGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.232.0/21
45.80.136.0/22
77.74.80.0/21
77.109.128.0/18
80.253.88.0/21
81.6.32.0/20
82.197.160.0/19
85.195.192.0/18
109.202.192.0/19
141.195.80.0/20
185.72.64.0/22
185.137.172.0/22
185.183.192.0/22
185.201.248.0/22
185.246.104.0/22
193.47.153.0/24
193.223.80.0/20
195.134.128.0/19
212.51.128.0/19
213.144.128.0/19
217.118.192.0-217.118.203.255
IPv6:
2001:1620::/32
2a02:168::/30
2a07:600::/29
Signature Algorithm: sha256WithRSAEncryption
bb:7b:71:06:49:50:b0:d7:cb:9f:ab:ad:a9:32:af:90:ca:e8:
25:05:3d:db:6a:63:03:7c:6e:e5:93:68:99:10:d2:a0:ce:62:
f1:ed:6f:d1:64:8c:69:36:f0:8c:a4:49:49:68:e6:fd:85:13:
e7:93:69:19:63:bd:e0:cb:2b:83:6b:e1:f7:5e:b5:4e:b6:43:
91:33:af:2f:fe:e8:af:db:0b:a3:2c:6a:3b:f8:80:9c:54:aa:
66:13:79:95:f7:16:ba:72:79:86:22:b0:18:ae:e6:e2:94:ee:
08:f7:5a:84:54:1b:34:93:1c:42:3c:73:04:07:ed:4b:06:29:
38:26:9b:25:8c:79:f3:5b:0e:b4:b7:e3:3e:01:4a:62:dd:ac:
ac:75:1c:be:54:b8:a4:57:f0:ce:99:32:7a:f9:6e:c9:ae:37:
b5:66:aa:51:d1:5e:f0:17:00:aa:71:6a:e0:67:75:a5:36:7f:
36:3f:3d:4e:34:1c:20:ee:37:43:bc:c3:3c:b8:1c:3a:1c:76:
f6:90:b1:8d:b1:7f:fd:38:dc:c7:7a:d2:a8:68:fa:90:0f:1c:
9b:18:e5:6e:95:62:16:e3:d6:f9:a5:72:9e:2f:54:77:a7:80:
a8:19:d4:cf:63:7c:0e:fe:2c:07:20:17:71:f6:ba:74:55:42:
7f:13:39:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:23:03 2025 by rpki-client