Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Xl-maREi2EJcisA293wkkbRP33k.roa
File: Xl-maREi2EJcisA293wkkbRP33k.roa (raw, json)
Hash identifier: X80lwHEm3sp/eKeLTGF2YiHMWNdZjxKtUDKDW4o44dA=
Subject key identifier: 5E:5F:A6:69:11:22:D8:42:5C:8A:C0:36:F7:7C:24:91:B4:4F:DF:79
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0190350A6F10F57F8C403A75120A0B92E1B8
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Xl-maREi2EJcisA293wkkbRP33k.roa
Signing time: Thu 20 Jun 2024 09:46:34 +0000
ROA not before: Thu 20 Jun 2024 09:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3301
IP address blocks: 192.36.96.0/24 maxlen: 24
192.121.40.0/24 maxlen: 24
192.121.50.0/23 maxlen: 23
192.121.52.0/24 maxlen: 24
192.121.115.0/24 maxlen: 24
192.121.229.0/24 maxlen: 24
192.165.12.0/24 maxlen: 24
192.165.31.0/24 maxlen: 24
192.165.95.0/24 maxlen: 24
192.165.173.0/24 maxlen: 24
192.165.180.0/24 maxlen: 24
192.165.229.0/24 maxlen: 24
192.176.33.0/24 maxlen: 24
192.176.124.0/24 maxlen: 24
193.180.7.0/24 maxlen: 24
193.180.175.0/24 maxlen: 24
193.180.176.0/24 maxlen: 24
193.181.72.0/24 maxlen: 24
193.181.73.0/24 maxlen: 24
193.181.74.0/24 maxlen: 24
193.182.107.0/24 maxlen: 24
193.182.126.0/24 maxlen: 24
193.182.152.0/23 maxlen: 23
193.182.152.0/24 maxlen: 24
193.182.153.0/24 maxlen: 24
193.182.190.0/24 maxlen: 24
193.183.228.0/23 maxlen: 23
193.183.230.0/23 maxlen: 23
193.183.236.0/23 maxlen: 23
193.234.184.0/24 maxlen: 24
193.234.185.0/24 maxlen: 24
193.235.48.0/24 maxlen: 24
194.14.154.0/24 maxlen: 24
194.14.155.0/24 maxlen: 24
194.14.156.0/24 maxlen: 24
194.14.245.0/24 maxlen: 24
194.68.72.0/22 maxlen: 22
194.68.76.0/23 maxlen: 23
194.68.79.0/24 maxlen: 24
194.68.127.0/24 maxlen: 24
194.103.240.0/20 maxlen: 20
194.103.240.0/21 maxlen: 21
194.103.249.0/24 maxlen: 24
194.103.250.0/23 maxlen: 23
194.103.252.0/22 maxlen: 22
194.132.95.0/24 maxlen: 24
194.132.188.0/23 maxlen: 23
194.132.190.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 23 Aug 2024 09:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:0a:6f:10:f5:7f:8c:40:3a:75:12:0a:0b:92:e1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 20 09:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e5fa6691122d8425c8ac036f77c2491b44fdf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:bf:c9:57:ec:52:32:52:d1:f6:55:9f:2a:
88:23:2f:39:d0:e2:a5:b9:b2:cb:17:36:a4:6f:31:
70:a2:58:09:a6:6a:eb:57:27:52:ec:a8:15:0e:a7:
ad:98:d1:86:40:2d:7c:88:8b:9a:6d:76:bf:d9:1b:
c5:b3:da:6a:cf:fb:74:2d:53:5b:3c:08:05:99:2b:
3e:70:ee:3e:d3:1b:76:e6:66:d6:4a:4b:75:15:d2:
27:14:a6:b3:64:f6:79:99:4f:9b:76:a1:14:75:d2:
b3:ff:1b:aa:14:6c:23:ba:e8:6f:92:14:39:fc:b9:
28:6f:07:9b:9f:18:7e:0b:a1:18:00:bf:dd:32:a8:
b5:1d:92:22:0e:b6:d6:17:53:28:c3:26:24:d7:4f:
8c:80:93:ff:aa:67:20:d9:f9:21:e3:96:f1:56:56:
73:77:48:c0:ef:6a:05:2c:73:86:50:d8:bf:da:29:
71:8d:9d:d1:f3:28:32:c1:6f:ed:3f:af:a2:ca:ba:
af:9c:45:b0:41:30:5a:82:ff:07:f0:30:da:18:b4:
a3:90:83:9a:5d:37:cf:09:fe:70:14:dc:85:58:80:
2a:ef:bf:97:60:19:f1:bf:0e:bc:e5:36:14:12:28:
f2:7d:90:3a:7c:58:30:c2:48:ab:ee:50:52:ca:b2:
99:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5F:A6:69:11:22:D8:42:5C:8A:C0:36:F7:7C:24:91:B4:4F:DF:79
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Xl-maREi2EJcisA293wkkbRP33k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.96.0/24
192.121.40.0/24
192.121.50.0-192.121.52.255
192.121.115.0/24
192.121.229.0/24
192.165.12.0/24
192.165.31.0/24
192.165.95.0/24
192.165.173.0/24
192.165.180.0/24
192.165.229.0/24
192.176.33.0/24
192.176.124.0/24
193.180.7.0/24
193.180.175.0-193.180.176.255
193.181.72.0-193.181.74.255
193.182.107.0/24
193.182.126.0/24
193.182.152.0/23
193.182.190.0/24
193.183.228.0/22
193.183.236.0/23
193.234.184.0/23
193.235.48.0/24
194.14.154.0-194.14.156.255
194.14.245.0/24
194.68.72.0-194.68.77.255
194.68.79.0/24
194.68.127.0/24
194.103.240.0/20
194.132.95.0/24
194.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
79:bf:4e:26:fc:ed:08:40:80:aa:a1:61:a8:a5:e9:a9:6e:f2:
06:b3:aa:a5:e6:14:88:cd:9e:66:12:48:60:bc:74:22:77:96:
fc:0c:86:82:6c:82:88:ad:d1:e7:e2:63:7f:27:1f:33:b0:96:
e7:ee:fc:a7:41:aa:8b:d7:54:0d:ca:35:e8:54:1a:51:fd:78:
be:a8:00:ac:04:78:27:c6:96:65:cd:90:00:77:90:e6:0a:27:
92:45:0b:a9:34:c4:5d:dc:c3:38:c6:62:49:d5:17:b1:ef:df:
06:d3:77:1a:ac:bb:46:ca:26:38:4f:8d:1d:b1:56:00:eb:7f:
07:a2:a7:57:00:fb:15:79:2d:53:03:d0:79:42:21:ce:3e:38:
14:f2:4b:ee:dc:b0:7f:61:6c:90:f9:5b:7a:9a:a4:c7:9c:0e:
90:a8:7f:e5:d0:55:0c:d1:e9:82:3a:eb:17:01:a3:31:4f:3b:
c1:56:bf:4c:b2:15:06:d3:ec:58:40:52:bb:e2:29:2a:21:3b:
eb:72:69:47:c9:aa:b6:67:72:83:23:94:e5:51:ff:a4:a5:8d:
70:a1:ca:d6:9f:ab:8d:f5:e7:d1:04:2a:49:57:a1:5e:8c:c4:
5f:09:e3:58:ff:dd:41:61:5a:41:6c:6f:41:47:ca:d7:9b:6c:
75:1b:a4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:58 2025 by rpki-client