Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/kJxwIkq0csZW9aPve6hB1wzDbjo.roa
File: kJxwIkq0csZW9aPve6hB1wzDbjo.roa (raw, json)
Hash identifier: oOPUocMq0/RmDJSBYgLiE9elIXy40eHH97EqYn7hJhE=
Subject key identifier: 90:9C:70:22:4A:B4:72:C6:56:F5:A3:EF:7B:A8:41:D7:0C:C3:6E:3A
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 019128A31ECA427F56FC9F7D6D8D7B904ACD
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/kJxwIkq0csZW9aPve6hB1wzDbjo.roa
Signing time: Tue 06 Aug 2024 17:01:04 +0000
ROA not before: Tue 06 Aug 2024 17:01:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63293
IP address blocks: 2a03:2887:ff02::/48 maxlen: 48
2a03:2887:ff03::/48 maxlen: 48
2a03:2887:ff04::/48 maxlen: 48
2a03:2887:ff05::/48 maxlen: 48
2a03:2887:ff06::/48 maxlen: 48
2a03:2887:ff07::/48 maxlen: 48
2a03:2887:ff18::/48 maxlen: 48
2a03:2887:ff19::/48 maxlen: 48
2a03:2887:ff1b::/48 maxlen: 48
2a03:2887:ff1c::/48 maxlen: 48
2a03:2887:ff1d::/48 maxlen: 48
2a03:2887:ff1e::/48 maxlen: 48
2a03:2887:ff1f::/48 maxlen: 48
2a03:2887:ff21::/48 maxlen: 48
2a03:2887:ff23::/48 maxlen: 48
2a03:2887:ff24::/48 maxlen: 48
2a03:2887:ff25::/48 maxlen: 48
2a03:2887:ff27::/48 maxlen: 48
2a03:2887:ff28::/48 maxlen: 48
2a03:2887:ff29::/48 maxlen: 48
2a03:2887:ff2a::/48 maxlen: 48
2a03:2887:ff2b::/48 maxlen: 48
2a03:2887:ff2e::/48 maxlen: 48
2a03:2887:ff2f::/48 maxlen: 48
2a03:2887:ff30::/48 maxlen: 48
2a03:2887:ff33::/48 maxlen: 48
2a03:2887:ff35::/48 maxlen: 48
2a03:2887:ff36::/48 maxlen: 48
2a03:2887:ff37::/48 maxlen: 48
2a03:2887:ff38::/48 maxlen: 48
2a03:2887:ff39::/48 maxlen: 48
2a03:2887:ff3a::/48 maxlen: 48
2a03:2887:ff3b::/48 maxlen: 48
2a03:2887:ff3f::/48 maxlen: 48
2a03:2887:ff40::/48 maxlen: 48
2a03:2887:ff41::/48 maxlen: 48
2a03:2887:ff42::/48 maxlen: 48
2a03:2887:ff43::/48 maxlen: 48
2a03:2887:ff44::/48 maxlen: 48
2a03:2887:ff45::/48 maxlen: 48
2a03:2887:ff48::/48 maxlen: 48
2a03:2887:ff49::/48 maxlen: 48
2a03:2887:ff4a::/48 maxlen: 48
2a03:2887:ff4b::/48 maxlen: 48
2a03:2887:ff4d::/48 maxlen: 48
2a03:2887:ff4e::/48 maxlen: 48
2a03:2887:ff4f::/48 maxlen: 48
2a03:2887:ff51::/48 maxlen: 48
2a03:2887:ff52::/48 maxlen: 48
2a03:2887:ff53::/48 maxlen: 48
2a03:2887:ff54::/48 maxlen: 48
2a03:2887:ff55::/48 maxlen: 48
2a03:2887:ff56::/48 maxlen: 48
2a03:2887:ff57::/48 maxlen: 48
2a03:2887:ff58::/48 maxlen: 48
2a03:2887:ff59::/48 maxlen: 48
2a03:2887:ff60::/48 maxlen: 48
2a03:2887:ff61::/48 maxlen: 48
2a03:2887:ff62::/48 maxlen: 48
2a03:2887:ff63::/48 maxlen: 48
2a03:2887:ff64::/48 maxlen: 48
2a03:2887:ff65::/48 maxlen: 48
2a03:2887:ff66::/48 maxlen: 48
2a03:2887:ff67::/48 maxlen: 48
2a03:2887:ff68::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Oct 2024 17:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:28:a3:1e:ca:42:7f:56:fc:9f:7d:6d:8d:7b:90:4a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Aug 6 17:01:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=909c70224ab472c656f5a3ef7ba841d70cc36e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:1d:52:9d:2a:cd:28:27:3e:13:d0:44:19:
53:47:a8:7d:44:4b:1f:0f:ef:96:52:2e:54:c4:4d:
ef:2f:f2:b0:f4:f4:6f:5d:a1:c5:35:88:c2:b9:06:
99:16:c0:53:13:1f:c1:69:3f:a1:8e:e7:57:d5:be:
29:9e:cd:a6:60:05:f0:82:04:dc:80:6a:44:e1:4c:
b1:99:ae:34:d0:76:fd:fe:22:de:98:ed:a7:a4:89:
00:8e:2b:f2:8c:58:77:3b:ca:e1:26:83:70:c9:8a:
75:53:26:6e:cf:61:ea:6e:75:21:5f:ff:35:24:61:
0d:f2:7b:49:f4:eb:86:17:7d:d3:74:a0:26:ac:b1:
3c:fd:9c:1c:65:fa:77:87:75:42:8e:1b:2b:8a:23:
51:1d:e4:6b:27:29:53:06:fd:09:d9:57:3f:db:c1:
43:8d:e2:ac:73:6f:94:a0:ef:b5:da:d0:78:61:e2:
93:d1:b9:44:6b:85:7b:0e:39:78:b5:1f:c5:6b:04:
33:d5:a7:4c:4d:ef:0f:5e:f8:c0:ee:d7:cc:b2:cf:
13:18:30:72:bd:bf:0b:e8:55:b8:0e:bc:92:e4:1a:
d6:a5:1f:7c:d1:2b:46:e6:2b:64:ef:de:70:d8:06:
de:8e:fa:6e:87:f4:31:8d:fd:21:b7:53:55:be:81:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9C:70:22:4A:B4:72:C6:56:F5:A3:EF:7B:A8:41:D7:0C:C3:6E:3A
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/kJxwIkq0csZW9aPve6hB1wzDbjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff02::-2a03:2887:ff07:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff18::/47
2a03:2887:ff1b::-2a03:2887:ff1f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff21::/48
2a03:2887:ff23::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff33::/48
2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff3f::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff48::/46
2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff51::-2a03:2887:ff59:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff60::-2a03:2887:ff68:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
55:46:ec:4b:18:78:ca:d9:28:a7:20:36:c4:80:60:0e:5a:3a:
db:4d:a9:e7:ad:d4:9e:87:26:25:34:f1:18:74:f2:a1:d0:5d:
8c:da:4c:bc:94:bd:35:5e:75:a6:e4:3e:5b:37:d6:4d:d5:2e:
64:c5:a7:98:10:f0:6c:f3:5f:55:46:03:a4:e1:c5:e0:f0:e4:
56:ae:e7:44:e2:28:08:a4:d3:09:8b:7d:2b:0d:b8:99:91:09:
3d:15:ac:62:04:5a:b8:a8:cd:37:19:44:b4:87:3a:15:00:3b:
6c:25:81:fe:20:e9:ee:f2:36:24:2a:0f:b5:5b:75:cf:12:18:
cc:fc:e6:de:43:31:c3:11:d1:45:d1:a7:b9:0b:8c:9b:ed:ff:
4a:7e:f3:93:4b:de:0e:7c:38:a1:37:1d:5b:9c:be:e2:de:5e:
f2:1b:4e:4f:b4:dd:fe:85:a5:0a:52:b3:af:8d:be:53:b3:b2:
fa:bd:6e:98:cd:81:71:a7:c1:17:33:3d:15:b8:47:72:db:44:
68:83:3f:10:06:c2:b3:d2:25:b2:2a:32:13:6f:d8:af:0d:77:
ac:8e:18:0f:4d:62:a9:4c:e3:39:26:63:eb:d0:ca:ed:29:32:
dc:ff:84:9c:53:70:64:9d:b1:23:da:a7:17:c6:a0:86:96:c9:
19:7e:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 20:01:20 2024 by rpki-client on console-fra.rpki-client.org