Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/yHfVqlQwX04mYMgDfe_gBNRfecc.roa
File: yHfVqlQwX04mYMgDfe_gBNRfecc.roa (raw, json)
Hash identifier: a4bBAlZNP1zP872ac2wbpiRimOD5fNJDsIxMMPtO99o=
Subject key identifier: C8:77:D5:AA:54:30:5F:4E:26:60:C8:03:7D:EF:E0:04:D4:5F:79:C7
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 018EA4E8D12B0A4516506B89DD70C5D557C3
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/yHfVqlQwX04mYMgDfe_gBNRfecc.roa
Signing time: Wed 03 Apr 2024 17:01:45 +0000
ROA not before: Wed 03 Apr 2024 17:01:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63293
IP address blocks: 2a03:2887:ff02::/48 maxlen: 48
2a03:2887:ff03::/48 maxlen: 48
2a03:2887:ff04::/48 maxlen: 48
2a03:2887:ff18::/48 maxlen: 48
2a03:2887:ff19::/48 maxlen: 48
2a03:2887:ff1b::/48 maxlen: 48
2a03:2887:ff1c::/48 maxlen: 48
2a03:2887:ff1d::/48 maxlen: 48
2a03:2887:ff1e::/48 maxlen: 48
2a03:2887:ff1f::/48 maxlen: 48
2a03:2887:ff21::/48 maxlen: 48
2a03:2887:ff23::/48 maxlen: 48
2a03:2887:ff24::/48 maxlen: 48
2a03:2887:ff25::/48 maxlen: 48
2a03:2887:ff27::/48 maxlen: 48
2a03:2887:ff28::/48 maxlen: 48
2a03:2887:ff29::/48 maxlen: 48
2a03:2887:ff2a::/48 maxlen: 48
2a03:2887:ff2b::/48 maxlen: 48
2a03:2887:ff2e::/48 maxlen: 48
2a03:2887:ff2f::/48 maxlen: 48
2a03:2887:ff30::/48 maxlen: 48
2a03:2887:ff35::/48 maxlen: 48
2a03:2887:ff36::/48 maxlen: 48
2a03:2887:ff37::/48 maxlen: 48
2a03:2887:ff38::/48 maxlen: 48
2a03:2887:ff39::/48 maxlen: 48
2a03:2887:ff3a::/48 maxlen: 48
2a03:2887:ff3b::/48 maxlen: 48
2a03:2887:ff3f::/48 maxlen: 48
2a03:2887:ff40::/48 maxlen: 48
2a03:2887:ff41::/48 maxlen: 48
2a03:2887:ff43::/48 maxlen: 48
2a03:2887:ff44::/48 maxlen: 48
2a03:2887:ff45::/48 maxlen: 48
2a03:2887:ff48::/48 maxlen: 48
2a03:2887:ff49::/48 maxlen: 48
2a03:2887:ff4a::/48 maxlen: 48
2a03:2887:ff4b::/48 maxlen: 48
2a03:2887:ff4d::/48 maxlen: 48
2a03:2887:ff4e::/48 maxlen: 48
2a03:2887:ff4f::/48 maxlen: 48
2a03:2887:ff51::/48 maxlen: 48
2a03:2887:ff52::/48 maxlen: 48
2a03:2887:ff53::/48 maxlen: 48
2a03:2887:ff54::/48 maxlen: 48
2a03:2887:ff55::/48 maxlen: 48
2a03:2887:ff56::/48 maxlen: 48
2a03:2887:ff57::/48 maxlen: 48
2a03:2887:ff58::/48 maxlen: 48
2a03:2887:ff59::/48 maxlen: 48
2a03:2887:ff60::/48 maxlen: 48
2a03:2887:ff61::/48 maxlen: 48
2a03:2887:ff62::/48 maxlen: 48
2a03:2887:ff63::/48 maxlen: 48
2a03:2887:ff64::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 23 Apr 2024 17:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a4:e8:d1:2b:0a:45:16:50:6b:89:dd:70:c5:d5:57:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Apr 3 17:01:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c877d5aa54305f4e2660c8037defe004d45f79c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b6:8f:0e:8a:e0:4c:f5:0a:fd:83:95:47:f6:
41:d6:aa:22:25:d2:cd:56:72:d7:15:0f:11:57:67:
b1:03:b5:6c:df:98:2c:28:75:5d:2c:24:ed:b7:d7:
1e:5e:fa:66:c3:5e:68:ad:ed:0c:96:6f:84:54:4f:
78:b6:fa:9e:5a:3f:34:72:85:2a:9d:2c:55:24:8d:
b4:8f:0e:2f:68:49:b3:26:f7:39:e9:02:21:70:d1:
6d:3e:10:20:8b:42:79:b4:17:9c:ce:18:90:43:f0:
40:86:66:68:2d:38:1b:8c:3a:6b:5f:70:d5:33:ee:
92:59:64:80:38:00:42:8c:8b:5e:1a:56:8f:63:db:
4b:98:90:47:4a:f3:7b:df:26:fb:1a:6f:6a:88:1d:
91:b0:49:1f:ff:ff:b8:69:8e:79:e2:fa:eb:e6:17:
6c:75:59:60:46:51:f6:73:97:1e:19:96:08:8a:da:
5c:50:29:1e:fc:8e:84:5f:6e:50:74:77:5d:9b:7b:
ed:10:34:d9:1b:5e:26:d4:c4:70:4e:6b:30:b3:dc:
62:96:7c:87:0d:81:99:07:3d:eb:22:9d:3f:a1:9c:
a4:c8:81:a6:9f:7b:a7:b7:c1:c0:1b:29:6f:ff:c1:
e8:1f:b4:d6:74:d2:d0:c8:61:0f:1c:85:50:36:9a:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:77:D5:AA:54:30:5F:4E:26:60:C8:03:7D:EF:E0:04:D4:5F:79:C7
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/yHfVqlQwX04mYMgDfe_gBNRfecc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff02::-2a03:2887:ff04:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff18::/47
2a03:2887:ff1b::-2a03:2887:ff1f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff21::/48
2a03:2887:ff23::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff3f::-2a03:2887:ff41:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff43::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff48::/46
2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff51::-2a03:2887:ff59:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff60::-2a03:2887:ff64:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1f:7a:17:ea:c6:74:0a:4c:0e:c0:a3:f6:58:16:96:ba:30:9d:
d3:89:f9:db:f4:5b:c4:fc:7a:58:fa:f9:20:46:54:24:27:08:
fc:4f:69:10:73:fd:87:2c:23:fd:c0:71:e5:d6:95:2c:d0:c9:
60:d0:25:88:9d:08:8f:05:19:6c:92:cc:27:76:48:e3:ca:68:
f1:7a:85:99:73:d8:7a:28:f4:f1:ac:c9:da:af:f1:67:c8:05:
91:d0:ea:a6:98:c4:54:f9:65:d2:e9:aa:a1:ba:5e:d7:ac:4b:
05:d8:c0:6e:42:79:6d:ce:81:f6:29:8e:be:69:97:db:6f:aa:
38:3f:b9:71:a0:2d:08:34:3a:f8:79:b5:be:18:b3:93:d9:0e:
57:89:c0:72:0b:39:09:c4:88:2a:fc:d3:c1:76:6a:5d:49:4e:
7d:ae:9f:ee:da:93:fa:d4:15:d8:66:ec:b1:0e:6a:e0:43:66:
88:a5:a9:60:31:6e:65:09:d5:a5:bc:a4:a4:17:7f:40:a7:ee:
0b:41:5b:fc:f5:d2:12:c1:00:bb:3c:07:28:aa:55:8a:27:26:
9a:52:42:9b:67:36:31:03:fb:96:24:a6:e2:fd:d5:83:fa:dd:
bb:16:f1:ac:18:c3:b1:cf:be:f4:eb:46:0e:e5:fd:8f:03:54:
db:b6:cc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:57 2024 by rpki-client on console-fra.rpki-client.org