Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/xtA55i4YdqvsFb_uRSKnnL3T-jc.roa
File: xtA55i4YdqvsFb_uRSKnnL3T-jc.roa (raw, json)
Hash identifier: 4LpzE/3l+6AbY/SU4pHooTnkADA6ixR2SamQ5olziTk=
Subject key identifier: C6:D0:39:E6:2E:18:76:AB:EC:15:BF:EE:45:22:A7:9C:BD:D3:FA:37
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 0190FDFE600B1B27BC7B7676445473AFEBC8
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/xtA55i4YdqvsFb_uRSKnnL3T-jc.roa
Signing time: Mon 29 Jul 2024 10:17:04 +0000
ROA not before: Mon 29 Jul 2024 10:17:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50597
IP address blocks: 167.160.5.0/24 maxlen: 24
185.98.157.0/24 maxlen: 24
185.181.52.0/23 maxlen: 24
185.181.55.0/24 maxlen: 24
192.161.6.0/24 maxlen: 24
192.161.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Aug 2024 12:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:fe:60:0b:1b:27:bc:7b:76:76:44:54:73:af:eb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Jul 29 10:17:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6d039e62e1876abec15bfee4522a79cbdd3fa37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:d6:6d:35:ec:0d:6c:a2:f1:2b:59:c7:9e:
58:34:c4:d3:32:15:d4:80:07:5a:93:5e:8d:5a:d1:
02:ae:fe:30:27:42:bd:4a:68:85:17:de:2c:d1:bf:
0a:91:86:ca:da:76:07:39:01:47:f3:68:b9:df:0c:
51:e9:db:92:38:01:ba:96:fc:07:5b:ae:e5:89:3d:
22:0e:bb:0d:0f:76:dd:3b:5f:f9:33:ea:9e:d3:fd:
30:bf:96:81:39:92:d9:5f:e2:7b:d2:40:4e:2e:f8:
68:d2:ee:89:f8:74:96:e1:aa:5a:38:94:c9:4c:a2:
50:ed:e5:a1:a8:63:da:07:55:ac:b9:6d:ca:c8:74:
ce:fa:93:65:6d:76:b6:6f:37:2b:f2:a5:51:f0:4e:
5f:4e:61:65:8c:dc:68:a7:92:4b:6d:bb:25:ac:ef:
93:90:ea:66:9e:ea:23:9f:29:23:e6:b4:39:8c:29:
a7:89:bd:dc:44:56:03:98:ae:e6:29:7e:27:72:dc:
07:c3:3f:97:75:c0:01:1e:80:b6:1b:8a:f9:48:a4:
fd:47:53:7e:bb:06:86:68:a8:c5:62:f9:8b:99:ec:
73:66:3d:8b:67:33:6a:79:bb:74:b9:cc:04:f8:52:
e6:7e:ed:b4:5a:4c:cc:99:75:8d:9f:49:32:a7:6c:
f5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D0:39:E6:2E:18:76:AB:EC:15:BF:EE:45:22:A7:9C:BD:D3:FA:37
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/xtA55i4YdqvsFb_uRSKnnL3T-jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.160.5.0/24
185.98.157.0/24
185.181.52.0/23
185.181.55.0/24
192.161.6.0/23
Signature Algorithm: sha256WithRSAEncryption
94:a9:ef:c1:2b:1a:dc:75:e6:b5:15:bd:bb:a9:be:c9:33:17:
8d:59:df:9c:3f:db:4c:87:42:87:9d:3c:75:22:93:cd:5b:02:
d4:73:89:9f:0b:c3:ca:6b:ab:e1:e2:70:99:8c:7e:80:20:9d:
73:02:f6:5a:28:27:aa:1b:a9:1d:ad:53:47:1d:1b:b1:e5:ae:
4f:fc:f5:6f:6a:de:d2:31:75:8a:10:95:07:e2:2c:2e:0f:99:
08:8a:8a:7e:ca:93:64:a2:9c:88:69:b9:ed:4c:43:33:96:05:
ab:27:28:32:eb:78:93:0c:47:02:71:b6:00:c7:96:a3:6d:92:
57:20:29:35:5a:a0:ce:6e:bf:22:e1:d7:cf:7a:d7:79:db:53:
f1:38:33:43:5a:81:a4:7b:e6:1c:f9:d2:ff:08:43:e8:f7:79:
da:eb:16:96:79:b2:77:70:da:56:09:b9:3c:bf:83:1b:b1:84:
84:8b:38:ec:9f:bb:aa:7a:b4:a2:20:1a:83:79:84:a6:ea:64:
ce:cb:11:4f:99:62:bc:5a:3c:66:ab:d2:e2:ef:8d:4d:47:8b:
95:5d:10:21:4f:a0:66:92:68:7f:e1:04:15:a9:fb:a7:85:07:
3a:d5:f5:c7:f6:e3:c4:60:d4:bd:f5:1f:5e:82:55:0e:09:f7:
3f:3e:b8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:01:19 2025 by rpki-client