Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/XOHP5kwhABCXIyczJDRl8YcmJoY.roa
File: XOHP5kwhABCXIyczJDRl8YcmJoY.roa (raw, json)
Hash identifier: 2p50mauRE2To09x2gKJHtCef8a+76QBpVyfR12+lr5w=
Subject key identifier: 5C:E1:CF:E6:4C:21:00:10:97:23:27:33:24:34:65:F1:87:26:26:86
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 01887D2C930EDC6FECE8B99BBC7D2759A9D1
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/XOHP5kwhABCXIyczJDRl8YcmJoY.roa
Signing time: Fri 02 Jun 2023 17:34:13 +0000
ROA not before: Fri 02 Jun 2023 17:34:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202
IP address blocks: 2a03:5000:162::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:1::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Jun 2023 11:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:2c:93:0e:dc:6f:ec:e8:b9:9b:bc:7d:27:59:a9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jun 2 17:34:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ce1cfe64c21001097232733243465f187262686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:59:a8:c0:55:af:c5:1f:e6:72:76:89:90:d9:
b5:37:70:b4:eb:4a:30:2a:00:b1:b6:bb:0e:61:cb:
71:c0:0a:08:3e:39:f2:33:0c:d2:64:c7:d2:b2:c7:
3b:23:cb:db:6a:86:18:0e:ca:49:a0:5a:d7:6f:8b:
e4:4a:dd:0a:e5:03:cd:65:07:9c:aa:12:91:a3:51:
c6:6b:87:4f:bd:60:a1:18:43:8d:11:f1:8e:a7:22:
d0:84:6a:2c:b3:62:e9:8f:e8:f7:e8:40:83:a8:b5:
50:65:ef:ec:e9:6e:5a:4c:53:5c:20:b8:07:b7:7e:
b0:95:1e:70:9b:91:9d:c5:07:53:20:de:31:a1:e3:
a1:b9:00:a3:a2:68:c4:26:90:f6:d3:6b:02:0b:e2:
d7:db:85:03:de:78:19:79:f9:7a:aa:c1:2f:e8:35:
e1:65:c5:7c:44:b3:26:74:54:89:53:21:41:3a:22:
47:0c:6a:6b:82:e1:fd:ba:f7:8d:53:dd:55:99:48:
cd:39:25:14:64:30:7b:5d:a4:5d:20:7e:d7:63:28:
c6:73:a4:48:bb:0c:6c:84:9c:aa:db:64:74:5a:4e:
51:47:81:16:43:3a:62:21:01:b7:f9:18:33:48:2b:
de:d7:56:07:68:27:33:bf:21:25:1c:c2:33:32:8d:
1a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E1:CF:E6:4C:21:00:10:97:23:27:33:24:34:65:F1:87:26:26:86
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/XOHP5kwhABCXIyczJDRl8YcmJoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:21::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:31::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::/48
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
01:76:84:1e:0b:75:1b:4b:ea:6d:72:92:f3:b6:16:b9:b7:17:
28:7c:de:fd:7f:a0:b7:2b:2c:ef:46:8f:12:6c:f4:b6:08:6e:
71:61:f1:3a:e3:5c:99:2b:28:36:7d:f8:6b:60:38:56:a2:e2:
a0:c3:e5:c5:3e:b8:72:c3:ba:7d:5f:21:e7:2a:63:7d:09:a4:
b0:5b:07:91:47:e0:e5:69:b2:89:b7:9e:6d:6e:1a:e7:06:ae:
fa:02:67:d9:01:07:a4:51:23:e0:38:d6:42:1f:5f:fd:af:5f:
c8:1b:05:a6:b3:1c:b1:0e:74:06:57:7e:6a:a8:19:53:10:8a:
55:1a:b0:75:d3:01:c6:fc:ca:d0:c0:d8:6d:22:55:01:74:99:
04:57:c8:99:9e:1b:68:51:39:f6:ba:d6:ef:c4:bc:8a:19:fd:
b3:ac:64:c0:e6:20:a3:f1:29:07:86:24:87:7f:5e:42:3b:79:
6d:c9:8b:82:c6:52:f7:7e:56:20:93:1e:44:2e:51:14:0a:5d:
4a:96:ce:7c:a9:9d:58:29:5f:b6:8f:3f:2f:01:a6:a0:de:bc:
a2:f2:39:de:3f:eb:95:cb:08:cf:dd:09:05:6d:de:5b:f6:8b:
34:79:6d:7c:c0:68:ae:59:76:c2:d5:cb:2a:46:95:74:e6:8b:
65:a0:b3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:18 2024 by rpki-client on console-ams.rpki-client.org