Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/Mb34SB0qPgfaYnGt2fkafmO815g.roa
File: Mb34SB0qPgfaYnGt2fkafmO815g.roa (raw, json)
Hash identifier: 4YUiKz5zqGlmd20t32SVOPhsCljsUGH22zrDprN7CCI=
Subject key identifier: 31:BD:F8:48:1D:2A:3E:07:DA:62:71:AD:D9:F9:1A:7E:63:BC:D7:98
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 018DC7CF7C4B0EF70735EE4F89335B9B87A4
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/Mb34SB0qPgfaYnGt2fkafmO815g.roa
Signing time: Tue 20 Feb 2024 18:38:00 +0000
ROA not before: Tue 20 Feb 2024 18:38:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63293
IP address blocks: 2a03:2887:ff02::/48 maxlen: 48
2a03:2887:ff03::/48 maxlen: 48
2a03:2887:ff04::/48 maxlen: 48
2a03:2887:ff18::/48 maxlen: 48
2a03:2887:ff19::/48 maxlen: 48
2a03:2887:ff1b::/48 maxlen: 48
2a03:2887:ff1c::/48 maxlen: 48
2a03:2887:ff1d::/48 maxlen: 48
2a03:2887:ff1e::/48 maxlen: 48
2a03:2887:ff1f::/48 maxlen: 48
2a03:2887:ff21::/48 maxlen: 48
2a03:2887:ff23::/48 maxlen: 48
2a03:2887:ff24::/48 maxlen: 48
2a03:2887:ff25::/48 maxlen: 48
2a03:2887:ff27::/48 maxlen: 48
2a03:2887:ff28::/48 maxlen: 48
2a03:2887:ff29::/48 maxlen: 48
2a03:2887:ff2a::/48 maxlen: 48
2a03:2887:ff2b::/48 maxlen: 48
2a03:2887:ff2e::/48 maxlen: 48
2a03:2887:ff2f::/48 maxlen: 48
2a03:2887:ff30::/48 maxlen: 48
2a03:2887:ff35::/48 maxlen: 48
2a03:2887:ff36::/48 maxlen: 48
2a03:2887:ff37::/48 maxlen: 48
2a03:2887:ff38::/48 maxlen: 48
2a03:2887:ff39::/48 maxlen: 48
2a03:2887:ff3a::/48 maxlen: 48
2a03:2887:ff3b::/48 maxlen: 48
2a03:2887:ff3f::/48 maxlen: 48
2a03:2887:ff40::/48 maxlen: 48
2a03:2887:ff41::/48 maxlen: 48
2a03:2887:ff43::/48 maxlen: 48
2a03:2887:ff44::/48 maxlen: 48
2a03:2887:ff45::/48 maxlen: 48
2a03:2887:ff48::/48 maxlen: 48
2a03:2887:ff49::/48 maxlen: 48
2a03:2887:ff4a::/48 maxlen: 48
2a03:2887:ff4b::/48 maxlen: 48
2a03:2887:ff4d::/48 maxlen: 48
2a03:2887:ff4e::/48 maxlen: 48
2a03:2887:ff4f::/48 maxlen: 48
2a03:2887:ff51::/48 maxlen: 48
2a03:2887:ff52::/48 maxlen: 48
2a03:2887:ff53::/48 maxlen: 48
2a03:2887:ff54::/48 maxlen: 48
2a03:2887:ff55::/48 maxlen: 48
2a03:2887:ff56::/48 maxlen: 48
2a03:2887:ff57::/48 maxlen: 48
2a03:2887:ff58::/48 maxlen: 48
2a03:2887:ff59::/48 maxlen: 48
2a03:2887:ff60::/48 maxlen: 48
2a03:2887:ff61::/48 maxlen: 48
2a03:2887:ff62::/48 maxlen: 48
2a03:2887:ff63::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 03 Apr 2024 17:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:cf:7c:4b:0e:f7:07:35:ee:4f:89:33:5b:9b:87:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Feb 20 18:38:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31bdf8481d2a3e07da6271add9f91a7e63bcd798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:fb:eb:4c:66:01:bc:e6:8d:0f:e0:d8:1c:
54:16:49:e6:ce:77:32:5b:d4:e6:09:06:44:f1:e9:
26:34:5b:f4:40:bd:7b:8d:67:2c:48:50:e3:36:92:
63:1d:b2:71:da:92:dd:9f:06:a3:87:d1:8d:8b:68:
d8:2b:b6:e7:25:54:f6:0b:36:66:83:15:27:ef:9a:
2a:79:35:cb:0d:c5:ca:10:19:d6:37:19:71:82:00:
2a:23:ec:84:4d:b7:a9:e5:ea:cc:7f:29:68:e5:68:
62:8c:c8:16:1b:ea:30:3c:b5:b5:eb:ab:05:5b:47:
5f:f5:cb:5e:36:4a:fd:85:42:cb:75:15:64:de:5a:
8e:dc:60:5e:d1:61:57:9c:89:10:94:85:4b:80:57:
6e:b9:45:db:02:81:9e:bb:a9:4a:2a:37:e8:88:70:
2a:2a:77:5b:f2:0a:7d:43:22:8f:db:c8:56:ed:35:
5b:91:bf:65:48:65:a2:ef:2a:08:a5:02:95:bf:11:
75:08:2f:99:b5:d8:05:b5:5c:56:59:4f:b6:a3:c3:
1d:16:89:0b:ee:b8:ed:56:b7:28:d2:74:2a:a4:24:
26:78:02:cb:e1:16:20:ad:5f:73:31:22:c3:41:33:
69:b1:fc:48:a3:eb:1c:d0:4a:17:03:0a:dd:51:77:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BD:F8:48:1D:2A:3E:07:DA:62:71:AD:D9:F9:1A:7E:63:BC:D7:98
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/Mb34SB0qPgfaYnGt2fkafmO815g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff02::-2a03:2887:ff04:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff18::/47
2a03:2887:ff1b::-2a03:2887:ff1f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff21::/48
2a03:2887:ff23::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff3f::-2a03:2887:ff41:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff43::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff48::/46
2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff51::-2a03:2887:ff59:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff60::/46
Signature Algorithm: sha256WithRSAEncryption
03:d3:a9:d1:75:54:dc:2b:74:66:03:3e:ca:2a:ec:17:bd:cf:
eb:bc:c1:f8:bf:5a:35:6d:84:d0:77:4e:2a:1b:90:b1:f5:bc:
87:45:aa:f1:3d:fa:43:fd:03:b4:ee:10:29:c9:dd:76:a6:01:
01:9b:ff:94:5b:61:35:88:0d:6d:ca:46:e5:27:76:0c:35:6d:
e5:23:6a:eb:40:a9:dd:54:ff:e2:43:09:56:d2:15:73:d9:17:
6c:ea:af:2b:6e:47:5e:ba:4f:b8:4e:ab:0a:53:c2:31:41:82:
68:61:b4:95:be:e0:53:73:2b:38:84:05:d5:d9:d7:1f:72:55:
8e:0b:1a:9f:03:cc:a9:69:ab:7c:c0:ad:91:f4:b7:b9:a2:a4:
be:2e:e4:a7:7c:63:38:12:8f:fc:4f:88:26:7c:38:61:c0:3a:
56:33:b9:d9:14:c7:2e:da:0c:e5:94:bc:36:04:1e:31:3a:af:
1b:79:3b:9f:b3:cb:f1:d8:1c:1e:e1:a2:84:15:52:5b:bf:2b:
80:7a:34:a6:b8:bd:17:98:4b:ab:26:a4:c9:40:bd:ea:ea:a3:
bc:ff:19:09:1b:90:4e:f8:25:ab:f5:62:30:b6:5f:9e:c0:8b:
80:c5:b0:9f:4b:52:4b:62:f8:3e:f0:fa:fe:fc:95:59:e7:75:
0e:79:3e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:09 2024 by rpki-client on console-ams.rpki-client.org