Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/xUWZ0MA0sIrqIH1g2zRcEK5pkIs.roa
File: xUWZ0MA0sIrqIH1g2zRcEK5pkIs.roa (raw, json)
Hash identifier: BRF2sVYxfVMopuwvSFvunidDmwf5zMFM1czO95xm0+g=
Subject key identifier: C5:45:99:D0:C0:34:B0:8A:EA:20:7D:60:DB:34:5C:10:AE:69:90:8B
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0190C10C69686E2698EDB91C5C7B404BD085
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/xUWZ0MA0sIrqIH1g2zRcEK5pkIs.roa
Signing time: Wed 17 Jul 2024 14:15:34 +0000
ROA not before: Wed 17 Jul 2024 14:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50261
IP address blocks: 37.220.128.0/20 maxlen: 20
77.111.112.0/21 maxlen: 21
77.111.112.0/22 maxlen: 22
77.111.120.0/21 maxlen: 21
77.111.124.0/22 maxlen: 22
80.64.64.0/21 maxlen: 21
80.64.72.0/21 maxlen: 21
109.74.48.0/20 maxlen: 20
2a02:d400::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 01 Aug 2024 13:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c1:0c:69:68:6e:26:98:ed:b9:1c:5c:7b:40:4b:d0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jul 17 14:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c54599d0c034b08aea207d60db345c10ae69908b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:e5:9a:d4:91:75:72:bc:89:12:d1:9a:c6:
27:6f:12:83:3c:62:e7:1f:b5:f9:46:79:25:80:0a:
e5:3f:62:b1:56:47:c0:07:e8:8e:aa:82:ed:59:c0:
2b:5e:2d:bb:0c:f3:a8:52:0c:5b:9c:d9:f1:c5:e2:
ab:3e:63:e1:e5:41:65:2c:e8:74:f0:23:5a:cd:b3:
4c:15:95:94:d1:02:9e:0e:f1:50:b1:3c:3a:73:24:
a8:ff:e1:9b:28:3c:a5:9d:1c:e8:7a:d1:08:4f:ab:
1d:07:0c:62:23:5e:2a:6c:e6:e2:3e:37:71:49:b5:
1f:77:ec:06:44:a6:40:ba:4a:66:37:3a:99:47:8d:
22:1c:9a:0b:35:30:cd:1f:a3:f9:73:d2:98:2a:2c:
46:89:ea:09:52:a8:b5:bc:c1:91:65:e2:4f:20:73:
11:a6:20:d7:b7:a9:1d:15:af:33:89:ec:67:47:ac:
ee:2d:d0:6e:26:23:c7:64:a6:3f:12:b7:98:8b:83:
86:db:4a:2d:a4:8d:ea:fd:2a:94:e6:7a:3d:5d:51:
0f:2f:75:08:b6:6d:7d:64:f9:80:04:ac:b8:fb:9a:
2a:a4:0c:02:0d:51:68:75:c6:6f:df:65:d2:5a:ca:
e5:9e:97:d9:7e:9a:43:5f:28:bc:d8:dc:7b:4f:92:
12:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:45:99:D0:C0:34:B0:8A:EA:20:7D:60:DB:34:5C:10:AE:69:90:8B
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/xUWZ0MA0sIrqIH1g2zRcEK5pkIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.128.0/20
77.111.112.0/20
80.64.64.0/20
109.74.48.0/20
IPv6:
2a02:d400::/29
Signature Algorithm: sha256WithRSAEncryption
21:2e:ac:fd:54:f4:77:c8:72:2d:ac:4b:6f:dd:fd:52:ae:43:
fd:33:75:53:98:fb:0e:2d:cb:5e:9f:80:c2:8f:28:66:e5:d4:
03:ea:91:13:e1:1f:f9:0a:71:b8:ff:6d:61:7f:82:c3:4d:d0:
2c:ca:cd:ed:f2:e5:2e:96:e9:72:58:57:1e:4a:81:d9:d1:c5:
ea:a2:ef:9e:14:e2:76:a7:2d:af:15:7f:e5:3d:92:8d:39:b0:
8c:d3:67:56:80:15:66:17:90:87:33:12:c2:6f:98:a1:55:8d:
9c:06:20:cc:41:b2:73:33:3b:ae:45:75:bb:56:9b:58:69:b3:
1a:84:37:78:5f:21:79:1e:46:f8:73:a6:db:41:94:2f:37:6d:
48:35:ba:d5:5e:6b:1d:31:53:07:4f:5d:9e:82:28:20:ea:dc:
42:a6:ee:02:cf:92:53:6f:5b:e2:8d:5e:1d:cf:0a:dc:98:2e:
e2:fd:e7:ef:0e:20:f2:f5:1b:86:1a:f0:46:a3:db:04:a7:fe:
a7:21:19:9e:dd:85:44:17:ed:0c:45:94:68:71:ee:8a:9e:18:
ff:51:4c:b1:86:d9:d2:bf:6e:15:28:79:8c:98:6c:0d:73:77:
0c:d4:cf:8a:04:ae:0e:1e:73:85:59:99:9d:6a:f8:11:a8:9d:
a8:6c:29:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 16:21:28 2024 by rpki-client on console-ams.rpki-client.org