Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/4IiyBLwwOv7hncofLfaPyR25jkc.roa
File: 4IiyBLwwOv7hncofLfaPyR25jkc.roa (raw, json)
Hash identifier: VYMMjFsEt+IZEIdbfiKFBu15J0XA4TlVrZiECzBbD88=
Subject key identifier: E0:88:B2:04:BC:30:3A:FE:E1:9D:CA:1F:2D:F6:8F:C9:1D:B9:8E:47
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 01924907EB9DB0A7F0247070A1243CFE8FEE
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/4IiyBLwwOv7hncofLfaPyR25jkc.roa
Signing time: Tue 01 Oct 2024 17:01:48 +0000
ROA not before: Tue 01 Oct 2024 17:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63293
IP address blocks: 2a03:2887:ff02::/48 maxlen: 48
2a03:2887:ff03::/48 maxlen: 48
2a03:2887:ff04::/48 maxlen: 48
2a03:2887:ff05::/48 maxlen: 48
2a03:2887:ff06::/48 maxlen: 48
2a03:2887:ff07::/48 maxlen: 48
2a03:2887:ff09::/48 maxlen: 48
2a03:2887:ff18::/48 maxlen: 48
2a03:2887:ff19::/48 maxlen: 48
2a03:2887:ff1b::/48 maxlen: 48
2a03:2887:ff1c::/48 maxlen: 48
2a03:2887:ff1d::/48 maxlen: 48
2a03:2887:ff1e::/48 maxlen: 48
2a03:2887:ff1f::/48 maxlen: 48
2a03:2887:ff21::/48 maxlen: 48
2a03:2887:ff23::/48 maxlen: 48
2a03:2887:ff24::/48 maxlen: 48
2a03:2887:ff25::/48 maxlen: 48
2a03:2887:ff27::/48 maxlen: 48
2a03:2887:ff28::/48 maxlen: 48
2a03:2887:ff29::/48 maxlen: 48
2a03:2887:ff2a::/48 maxlen: 48
2a03:2887:ff2b::/48 maxlen: 48
2a03:2887:ff2e::/48 maxlen: 48
2a03:2887:ff2f::/48 maxlen: 48
2a03:2887:ff30::/48 maxlen: 48
2a03:2887:ff33::/48 maxlen: 48
2a03:2887:ff35::/48 maxlen: 48
2a03:2887:ff36::/48 maxlen: 48
2a03:2887:ff37::/48 maxlen: 48
2a03:2887:ff38::/48 maxlen: 48
2a03:2887:ff39::/48 maxlen: 48
2a03:2887:ff3a::/48 maxlen: 48
2a03:2887:ff3b::/48 maxlen: 48
2a03:2887:ff3f::/48 maxlen: 48
2a03:2887:ff40::/48 maxlen: 48
2a03:2887:ff41::/48 maxlen: 48
2a03:2887:ff42::/48 maxlen: 48
2a03:2887:ff43::/48 maxlen: 48
2a03:2887:ff44::/48 maxlen: 48
2a03:2887:ff45::/48 maxlen: 48
2a03:2887:ff48::/48 maxlen: 48
2a03:2887:ff49::/48 maxlen: 48
2a03:2887:ff4a::/48 maxlen: 48
2a03:2887:ff4b::/48 maxlen: 48
2a03:2887:ff4d::/48 maxlen: 48
2a03:2887:ff4e::/48 maxlen: 48
2a03:2887:ff4f::/48 maxlen: 48
2a03:2887:ff51::/48 maxlen: 48
2a03:2887:ff52::/48 maxlen: 48
2a03:2887:ff53::/48 maxlen: 48
2a03:2887:ff54::/48 maxlen: 48
2a03:2887:ff55::/48 maxlen: 48
2a03:2887:ff56::/48 maxlen: 48
2a03:2887:ff57::/48 maxlen: 48
2a03:2887:ff58::/48 maxlen: 48
2a03:2887:ff59::/48 maxlen: 48
2a03:2887:ff60::/48 maxlen: 48
2a03:2887:ff61::/48 maxlen: 48
2a03:2887:ff62::/48 maxlen: 48
2a03:2887:ff63::/48 maxlen: 48
2a03:2887:ff64::/48 maxlen: 48
2a03:2887:ff65::/48 maxlen: 48
2a03:2887:ff66::/48 maxlen: 48
2a03:2887:ff67::/48 maxlen: 48
2a03:2887:ff68::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 24 Oct 2024 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:49:07:eb:9d:b0:a7:f0:24:70:70:a1:24:3c:fe:8f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Oct 1 17:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e088b204bc303afee19dca1f2df68fc91db98e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:d4:7b:5b:e1:ee:86:51:5d:ff:1f:6f:27:
bf:55:ed:39:29:49:23:8f:c5:e6:4a:1c:d4:6d:82:
5c:50:e7:6a:03:d8:18:ee:7b:63:3d:a8:3a:61:01:
4d:25:4a:fe:14:10:8c:53:52:38:0f:3e:3c:63:41:
82:5e:7e:64:ca:ee:f7:aa:b3:ae:3f:b3:a6:56:61:
53:d3:1c:a3:6b:26:4c:82:e2:56:e1:e1:22:58:2b:
ff:a0:0d:7c:fd:42:83:9c:60:64:c8:85:ca:f1:e2:
c7:0a:3b:f9:9c:7d:13:13:c4:f5:0f:86:01:47:a1:
5a:a1:81:2c:12:9b:82:44:50:4c:26:fd:07:c5:3c:
06:b7:7e:b9:77:13:9c:f0:ee:4f:b4:f4:fc:c4:d9:
8e:f9:4c:aa:c2:28:c2:7d:fb:92:e6:fd:ce:45:55:
a8:7b:35:37:e1:9b:a3:7c:1f:18:09:c8:3d:4f:ae:
7d:ac:a7:0a:f2:08:6d:94:99:e7:c9:3a:29:0d:b7:
9c:ac:63:e8:aa:e7:67:f6:47:8b:53:bc:0d:5d:79:
fd:79:09:dd:fe:e2:76:09:33:25:c0:3a:51:5d:68:
e6:b6:48:8c:cb:08:d6:e5:d6:af:8b:b7:da:6d:31:
37:11:46:ec:27:21:dc:12:2c:76:16:2e:b6:33:f8:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:88:B2:04:BC:30:3A:FE:E1:9D:CA:1F:2D:F6:8F:C9:1D:B9:8E:47
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/4IiyBLwwOv7hncofLfaPyR25jkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff02::-2a03:2887:ff07:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff09::/48
2a03:2887:ff18::/47
2a03:2887:ff1b::-2a03:2887:ff1f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff21::/48
2a03:2887:ff23::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff33::/48
2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff3f::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff48::/46
2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff51::-2a03:2887:ff59:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff60::-2a03:2887:ff68:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8c:46:f4:9b:7d:d6:84:66:48:5a:f3:bc:06:8f:9b:c6:b4:4f:
09:a4:97:7d:6c:4a:d8:4f:bc:70:93:20:a6:8e:94:ed:02:86:
75:42:9f:96:36:4a:81:0f:dc:5f:45:8f:f7:48:70:c8:31:05:
38:98:fd:35:3d:53:81:4d:45:d4:6e:8d:1a:33:b3:3a:cd:9b:
d2:20:26:f7:2f:37:11:c4:4c:86:0c:c5:b2:d2:62:28:93:69:
94:a8:b3:d3:33:51:7b:bc:85:f8:53:9a:cc:d5:80:75:cf:26:
86:10:b2:d5:f6:91:fa:ce:36:21:f2:0b:9a:98:37:6f:c8:cf:
44:74:63:b6:13:a9:9e:b9:91:22:d6:be:dd:07:68:01:dc:ec:
05:e2:bd:b1:9e:b5:ba:db:e8:90:de:0a:45:4f:e9:1c:48:99:
65:3b:f5:95:7a:7f:fd:23:c7:51:92:28:09:b4:26:63:5a:c1:
ef:dd:02:c6:8c:50:4f:05:f0:f4:80:72:6e:4a:76:ed:41:c2:
cb:65:33:f7:14:7f:ea:ca:05:c6:bf:b5:21:4a:75:55:71:ed:
d9:c9:7b:5d:1f:d8:10:c5:db:ab:ff:cc:88:a4:ed:04:c1:ce:
f1:09:ac:3f:8a:8c:c5:c2:29:b4:40:c9:0e:ba:4a:1e:22:ba:
01:ca:e7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 22:21:55 2024 by rpki-client on console-ams.rpki-client.org