Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/XMrrnUvWhSJZRqVCWbtuqUnO7j4.roa
File: XMrrnUvWhSJZRqVCWbtuqUnO7j4.roa (raw, json)
Hash identifier: dncYkPBbIvhAEolo+YTL2i2KSDetlMQb2to8LGWuxu8=
Subject key identifier: 5C:CA:EB:9D:4B:D6:85:22:59:46:A5:42:59:BB:6E:A9:49:CE:EE:3E
Certificate issuer: /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial: 018F8059484AE1FE6D76138FFAF63985BE1A
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/XMrrnUvWhSJZRqVCWbtuqUnO7j4.roa
Signing time: Thu 16 May 2024 07:41:25 +0000
ROA not before: Thu 16 May 2024 07:41:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25176
IP address blocks: 80.88.96.0/19 maxlen: 19
81.8.128.0/17 maxlen: 17
81.8.142.0/24 maxlen: 24
81.8.143.0/24 maxlen: 24
81.8.204.0/24 maxlen: 24
81.8.226.0/24 maxlen: 24
85.194.128.0/18 maxlen: 18
2a01:4040::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:59:48:4a:e1:fe:6d:76:13:8f:fa:f6:39:85:be:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Validity
Not Before: May 16 07:41:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ccaeb9d4bd685225946a54259bb6ea949ceee3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f1:a6:99:b1:4c:c7:52:a5:0c:1a:66:16:97:
85:46:26:fa:fe:6c:ac:09:26:b4:5c:3c:5d:2e:e9:
34:9a:d9:b4:0d:d4:27:4c:20:43:28:a0:1a:e8:cd:
b0:c9:d5:20:39:b3:53:4a:d2:e8:61:75:f5:cd:d1:
57:81:84:36:01:09:56:40:21:24:5f:c9:c8:c5:83:
19:be:ec:6a:e3:a5:1e:9a:3c:ea:71:1c:a3:e8:a4:
c9:bd:4f:f2:83:ea:3b:cb:58:ec:69:01:70:0c:35:
09:a4:ba:39:39:1f:a3:bd:cb:5b:23:0a:19:98:c0:
6e:c2:f1:99:92:da:7c:3f:4f:78:47:f6:96:c7:d8:
30:76:5d:0e:e4:57:e4:e0:c3:39:6b:5a:62:ca:c2:
17:14:03:77:a0:e9:01:fa:7b:5f:1a:bb:b1:20:5b:
c4:02:ab:24:a3:48:41:8f:e0:54:d6:01:d1:ed:55:
e9:ea:da:38:42:82:f2:7b:1d:52:3d:dd:26:05:58:
c0:e5:2d:48:8f:01:d9:6e:80:7a:24:d9:8a:af:03:
bd:e0:23:d0:04:a3:9c:7e:37:99:f1:54:df:dd:ca:
67:a2:66:f2:28:29:5a:93:58:a1:e3:fa:18:e5:40:
6b:d2:34:c7:90:3f:9d:ba:6c:14:7d:c1:f2:29:58:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CA:EB:9D:4B:D6:85:22:59:46:A5:42:59:BB:6E:A9:49:CE:EE:3E
X509v3 Authority Key Identifier:
keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/XMrrnUvWhSJZRqVCWbtuqUnO7j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.88.96.0/19
81.8.128.0/17
85.194.128.0/18
IPv6:
2a01:4040::/32
Signature Algorithm: sha256WithRSAEncryption
5c:c5:44:00:22:71:bc:8b:c2:66:9c:03:f1:86:84:b5:c5:18:
d8:64:ee:da:26:f7:2b:73:4d:11:4f:b7:3b:e0:65:ce:5a:f3:
ad:e0:15:e6:5b:fd:a9:2c:61:77:b6:36:32:eb:37:b2:40:58:
55:c2:26:f1:26:a6:03:15:61:0d:fb:9f:b1:8c:5c:d5:2f:51:
89:b0:76:8b:17:fd:96:c0:20:80:06:b2:37:0b:20:15:58:bf:
ee:41:d9:d0:fb:45:a1:b4:7b:4f:c3:ec:45:e4:7f:25:f0:1f:
3e:40:25:5f:42:e4:8b:60:ec:60:44:00:a2:13:1b:83:dd:f3:
05:04:7d:eb:80:0d:70:05:d9:64:7d:53:1d:ea:78:98:bd:e4:
f9:e0:2c:9e:8a:cd:a6:cc:15:e1:e0:9e:0f:fd:79:fa:72:59:
e6:4f:fc:9b:fc:42:66:2f:18:b9:13:02:2a:b2:5c:c3:62:d6:
8d:24:94:6e:18:8d:eb:69:53:61:b6:78:10:13:34:2c:d3:8b:
39:ea:42:53:70:37:80:27:68:fd:1f:68:98:f6:53:82:91:8f:
26:f5:5f:5e:2c:68:4e:3f:00:47:de:15:8d:74:e6:a9:81:fa:
62:33:22:4b:71:24:8c:84:89:af:fd:b2:45:57:b4:13:b4:1b:
e7:a3:2f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:52 2025 by rpki-client