Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/faEZl9dDQqdbMUnHrepYzjDDHBo.roa
File: faEZl9dDQqdbMUnHrepYzjDDHBo.roa (raw, json)
Hash identifier: hXUIrXKQcYMpk/CSxnEoFEyF2Sn1FpjmceP2ETN23sE=
Subject key identifier: 7D:A1:19:97:D7:43:42:A7:5B:31:49:C7:AD:EA:58:CE:30:C3:1C:1A
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01918EB920BC1940292622FE1645D7C97176
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/faEZl9dDQqdbMUnHrepYzjDDHBo.roa
Signing time: Mon 26 Aug 2024 12:46:22 +0000
ROA not before: Mon 26 Aug 2024 12:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24810
IP address blocks: 81.22.200.0/24 maxlen: 24
81.22.201.0/24 maxlen: 24
81.22.202.0/24 maxlen: 24
81.22.203.0/24 maxlen: 24
81.22.204.0/24 maxlen: 24
81.22.205.0/24 maxlen: 24
81.22.206.0/24 maxlen: 24
81.22.207.0/24 maxlen: 24
81.22.208.0/24 maxlen: 24
81.22.209.0/24 maxlen: 24
81.22.210.0/24 maxlen: 24
81.22.211.0/24 maxlen: 24
81.22.212.0/24 maxlen: 24
81.22.213.0/24 maxlen: 24
81.22.214.0/24 maxlen: 24
81.22.215.0/24 maxlen: 24
81.23.144.0/24 maxlen: 24
81.23.145.0/24 maxlen: 24
81.23.147.0/24 maxlen: 24
81.23.148.0/24 maxlen: 24
81.23.149.0/24 maxlen: 24
81.23.156.0/24 maxlen: 24
81.23.158.0/24 maxlen: 24
81.23.159.0/24 maxlen: 24
87.117.160.0/24 maxlen: 24
87.117.161.0/24 maxlen: 24
87.117.162.0/24 maxlen: 24
87.117.164.0/24 maxlen: 24
87.117.165.0/24 maxlen: 24
87.117.166.0/24 maxlen: 24
87.117.167.0/24 maxlen: 24
87.117.168.0/24 maxlen: 24
87.117.170.0/24 maxlen: 24
87.117.171.0/24 maxlen: 24
87.117.177.0/24 maxlen: 24
87.117.183.0/24 maxlen: 24
87.117.184.0/24 maxlen: 24
87.117.188.0/24 maxlen: 24
87.117.190.0/24 maxlen: 24
89.248.112.0/24 maxlen: 24
89.248.122.0/24 maxlen: 24
89.248.123.0/24 maxlen: 24
89.248.124.0/24 maxlen: 24
178.20.128.0/21 maxlen: 21
178.20.128.0/24 maxlen: 24
178.20.129.0/24 maxlen: 24
178.20.134.0/24 maxlen: 24
178.20.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 10:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:b9:20:bc:19:40:29:26:22:fe:16:45:d7:c9:71:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 26 12:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7da11997d74342a75b3149c7adea58ce30c31c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:7a:c6:b1:5e:09:29:98:92:05:d3:51:c0:
77:b7:f6:38:f4:af:33:41:21:5d:5b:bd:b4:8f:0e:
c8:04:be:b6:54:9b:39:20:75:f8:3f:ef:39:d5:fd:
5f:94:d6:8e:f4:a7:97:07:a6:26:6f:1d:a2:d9:77:
c1:fc:07:90:23:1f:72:13:50:cb:bf:d6:90:7c:88:
db:09:04:c0:4f:32:20:7e:42:cc:de:fa:de:e1:f5:
42:f2:1f:b2:7f:26:47:6f:65:e0:cf:31:3c:26:c5:
34:e3:f9:09:b8:0f:60:77:30:db:4d:89:5d:67:c3:
de:9d:b5:b3:c7:52:3c:a7:b8:7d:b8:a0:ef:81:43:
ba:6e:6b:58:7f:ee:8d:3c:78:19:e7:1f:2e:35:1e:
e4:14:06:ef:5c:21:ad:64:bb:34:8b:ee:da:5f:af:
e5:00:bc:1b:af:c6:d2:64:a7:84:c8:26:b4:06:8d:
d0:25:f4:2f:3f:63:ef:35:3f:af:db:6e:9b:09:4f:
84:e7:9a:fb:bc:65:33:b9:c5:ec:35:8e:23:1f:22:
90:36:f2:ba:14:c3:ce:b1:1e:e9:f5:20:65:8e:c5:
4f:79:0a:f9:6d:b6:41:7e:42:4c:b1:66:a9:77:09:
ce:c2:4a:4f:6f:27:e0:0f:6b:33:78:c8:df:9b:16:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A1:19:97:D7:43:42:A7:5B:31:49:C7:AD:EA:58:CE:30:C3:1C:1A
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/faEZl9dDQqdbMUnHrepYzjDDHBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.200.0-81.22.215.255
81.23.144.0/23
81.23.147.0-81.23.149.255
81.23.156.0/24
81.23.158.0/23
87.117.160.0-87.117.162.255
87.117.164.0-87.117.168.255
87.117.170.0/23
87.117.177.0/24
87.117.183.0-87.117.184.255
87.117.188.0/24
87.117.190.0/24
89.248.112.0/24
89.248.122.0-89.248.124.255
178.20.128.0/21
Signature Algorithm: sha256WithRSAEncryption
24:14:dc:63:c5:46:7e:89:0f:34:5d:87:ed:0b:f2:42:69:ec:
e9:b2:f0:10:f8:4b:24:7a:00:40:85:11:0d:48:38:29:1e:5c:
75:cd:81:83:8e:fc:ba:38:e6:c6:0f:a8:fb:81:33:7b:0e:02:
2a:a6:02:20:38:71:87:2c:76:90:24:7a:7d:1a:58:49:f5:b9:
58:38:a0:82:0c:54:ae:31:4f:1d:0e:7f:7f:02:82:bf:71:14:
6a:ac:b0:34:8f:ce:d6:ef:83:86:21:16:5b:58:78:4e:4c:60:
e5:ea:4f:e9:85:80:b7:29:22:e6:ac:cf:0b:32:73:2c:06:26:
50:60:86:e1:09:33:c1:cf:f5:34:04:e0:f5:d3:cb:a8:36:87:
63:a1:74:5c:28:8b:42:46:7b:a8:a4:bc:5d:51:aa:64:72:cc:
08:a2:39:3e:44:c3:83:71:3a:61:33:e3:b9:c5:3c:87:88:ec:
81:5a:f3:90:13:6c:9e:18:90:63:82:02:51:6d:d9:90:fb:c8:
23:13:2b:27:aa:9f:06:8f:3c:11:b4:ed:9c:24:1b:59:12:37:
e1:02:3a:41:78:fe:50:ff:5e:cc:46:31:71:a1:81:bc:ba:68:
ea:44:e3:13:b5:37:5f:77:cf:9e:f2:0c:a4:b8:77:95:04:41:
74:ba:3d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:30:01 2025 by rpki-client