Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/lG8kSgAP9VQ9zG5F0KlT5oG4OT4.roa
File: lG8kSgAP9VQ9zG5F0KlT5oG4OT4.roa (raw, json)
Hash identifier: SnjswGpRdrNcaQc4AjTuHSQmhdT11Xc8o+6of7Ud4Xs=
Subject key identifier: 94:6F:24:4A:00:0F:F5:54:3D:CC:6E:45:D0:A9:53:E6:81:B8:39:3E
Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial: 018E32FF7065B7BDC1F385A17CB98D323EF5
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/lG8kSgAP9VQ9zG5F0KlT5oG4OT4.roa
Signing time: Tue 12 Mar 2024 14:09:45 +0000
ROA not before: Tue 12 Mar 2024 14:09:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199326
IP address blocks: 2a13:7705::/48 maxlen: 48
2a13:7705:a::/48 maxlen: 48
2a13:7705:10::/48 maxlen: 48
2a13:7705:80::/48 maxlen: 48
2a13:7705:90::/48 maxlen: 48
2a13:7705:ff00::/40 maxlen: 40
2a13:7705:ff00::/48 maxlen: 48
2a13:7705:ff01::/48 maxlen: 48
2a13:7705:ff04::/48 maxlen: 48
2a13:7705:ff08::/48 maxlen: 48
2a13:7705:ff10::/48 maxlen: 48
2a13:7705:ff14::/48 maxlen: 48
2a13:7705:ff18::/48 maxlen: 48
2a13:7705:ff1c::/48 maxlen: 48
2a13:7705:ff20::/48 maxlen: 48
2a13:7705:ff24::/48 maxlen: 48
2a13:7705:ff28::/48 maxlen: 48
2a13:7705:ff2c::/48 maxlen: 48
2a13:7705:ff30::/48 maxlen: 48
2a13:7705:ff34::/48 maxlen: 48
2a13:7705:ff38::/48 maxlen: 48
2a13:7705:ff3c::/48 maxlen: 48
2a13:7705:ff40::/48 maxlen: 48
2a13:7705:ff44::/48 maxlen: 48
2a13:7705:ff4c::/48 maxlen: 48
2a13:7705:ff50::/48 maxlen: 48
2a13:7705:ff54::/48 maxlen: 48
2a13:7705:ff58::/48 maxlen: 48
2a13:7705:ff5c::/48 maxlen: 48
2a13:7705:ff60::/48 maxlen: 48
2a13:7705:ff64::/48 maxlen: 48
2a13:7705:ff68::/48 maxlen: 48
2a13:7705:ff6c::/48 maxlen: 48
2a13:7705:ff70::/48 maxlen: 48
2a13:7705:ff74::/48 maxlen: 48
2a13:7705:ff78::/48 maxlen: 48
2a13:7705:ff7c::/48 maxlen: 48
2a13:7705:ff80::/48 maxlen: 48
2a13:7705:ff84::/48 maxlen: 48
2a13:7705:ff88::/48 maxlen: 48
2a13:7705:ff8c::/48 maxlen: 48
2a13:7705:ff90::/48 maxlen: 48
2a13:7705:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 17 Apr 2024 18:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:ff:70:65:b7:bd:c1:f3:85:a1:7c:b9:8d:32:3e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Validity
Not Before: Mar 12 14:09:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=946f244a000ff5543dcc6e45d0a953e681b8393e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:3a:6f:c5:d3:13:a5:c0:f5:44:48:90:cf:
08:f4:80:03:ed:fa:63:a6:4d:83:89:96:db:65:bc:
d1:3c:cf:f3:9c:09:83:89:d8:da:e9:26:54:46:9d:
2a:9a:80:39:0c:a2:42:9e:f3:6b:ea:9a:4e:04:9a:
b3:8d:b0:4f:7a:6d:bb:7b:e3:31:68:85:7e:a9:5f:
c1:ce:2b:34:7e:6e:39:ad:c9:b0:23:ee:6c:e4:eb:
4f:85:78:4a:af:64:b7:2b:45:3c:ab:de:b8:e1:7d:
ed:f1:33:c6:bf:81:05:b4:2c:49:7b:07:bd:46:32:
0f:4d:fa:1d:a6:95:d4:76:be:f1:8d:98:17:98:6d:
da:ee:bb:7c:37:4f:a9:07:2a:3a:50:37:ad:c1:51:
08:0a:b9:d1:52:3f:0d:fc:33:53:e0:01:36:d9:e0:
3a:4a:23:0f:5f:98:f8:62:74:6f:8a:c6:97:a1:70:
4a:59:b4:fe:38:e9:97:0f:69:33:3c:56:da:26:0a:
73:6e:7f:75:8e:e9:4c:d4:8e:6e:a4:0e:67:c6:05:
9e:0f:c8:7a:52:c7:5d:cd:5d:cf:cf:7c:48:70:ac:
47:4e:19:6f:1f:47:cc:4e:a8:80:0b:97:35:9f:ea:
cb:bc:42:58:9a:ae:12:08:6f:b0:ec:bf:2f:d0:59:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6F:24:4A:00:0F:F5:54:3D:CC:6E:45:D0:A9:53:E6:81:B8:39:3E
X509v3 Authority Key Identifier:
keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/lG8kSgAP9VQ9zG5F0KlT5oG4OT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7705::/48
2a13:7705:a::/48
2a13:7705:10::/48
2a13:7705:80::/48
2a13:7705:90::/48
2a13:7705:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
82:26:ce:1b:b5:05:61:37:26:10:a2:28:f8:5f:b5:36:36:f1:
9a:27:37:ce:69:7c:54:8d:2e:f4:5a:d1:d6:37:62:ae:67:68:
a6:60:bd:b1:3c:88:93:44:3f:44:87:ed:f8:b5:f1:ff:3a:99:
65:b8:c1:fb:e0:b9:5d:56:6d:17:9e:24:2c:61:39:93:4c:fa:
a3:53:f9:2e:cb:78:af:20:72:e8:b4:53:3c:64:93:b8:57:c8:
11:71:7b:b4:d5:fc:7b:54:74:b1:1a:f8:84:0a:dd:2f:a1:15:
02:df:35:44:44:f0:2c:47:5f:63:6b:85:84:0a:47:2f:85:89:
f0:4e:eb:fc:50:0f:99:3d:2a:42:0d:e7:6d:0f:4b:51:0f:0f:
d8:d2:25:17:52:67:a6:61:8a:70:94:cd:51:60:ee:5d:8a:cd:
f2:df:20:0a:d1:98:02:85:0c:83:0c:6b:f7:75:90:16:10:cf:
41:7c:2a:6e:83:0e:7f:af:a7:d5:89:eb:8d:42:95:3e:be:70:
6b:89:a5:15:ad:79:ca:60:5e:fe:da:f6:c3:92:6a:db:93:13:
f2:5d:83:8d:e1:ab:c1:45:64:a4:c5:a9:7f:69:de:33:7d:cb:
88:ab:44:c3:8c:a2:e4:bd:6a:14:2b:1f:5b:7d:f4:7b:1d:98:
2c:7e:0e:e3
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAY4y/3Blt73B84WhfLmNMj71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNmMyOTU4MTQ1ZjQ1ZmFkNWRhZWViMzhiNzViNTJjMDk2
NjEwNDYwHhcNMjQwMzEyMTQwOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDZmMjQ0YTAwMGZmNTU0M2RjYzZlNDVkMGE5NTNlNjgxYjgzOTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIw6b8XTE6XA9URIkM8I9IAD7fpj
pk2DiZbbZbzRPM/znAmDidja6SZURp0qmoA5DKJCnvNr6ppOBJqzjbBPem27e+Mx
aIV+qV/Bzis0fm45rcmwI+5s5OtPhXhKr2S3K0U8q9644X3t8TPGv4EFtCxJewe9
RjIPTfodppXUdr7xjZgXmG3a7rt8N0+pByo6UDetwVEICrnRUj8N/DNT4AE22eA6
SiMPX5j4YnRvisaXoXBKWbT+OOmXD2kzPFbaJgpzbn91julM1I5upA5nxgWeD8h6
UsddzV3Pz3xIcKxHThlvH0fMTqiAC5c1n+rLvEJYmq4SCG+w7L8v0Fk0tQIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFJRvJEoAD/VUPcxuRdCpU+aBuDk+MB8GA1UdIwQY
MBaAFD1sKVgUX0X61drus4t1tSwJZhBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFd3cFdCUmZSZnJWMnU2emkzVzFMQWxtRUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yYTU1NzQtN2IxMi00ZGEyLWEwNjQt
NWUxYjA3ODg5MjNiLzEvbEc4a1NnQVA5VlE5ekc1RjBLbFQ1b0c0T1Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yYTU1NzQtN2IxMi00ZGEyLWEwNjQtNWUxYjA3ODg5MjNi
LzEvUFd3cFdCUmZSZnJWMnU2emkzVzFMQWxtRUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTA7BAIAAjA1AwcAKhN3BQAA
AwcAKhN3BQAKAwcAKhN3BQAQAwcAKhN3BQCAAwcAKhN3BQCQAwYAKhN3Bf8wDQYJ
KoZIhvcNAQELBQADggEBAIImzhu1BWE3JhCiKPhftTY28ZonN85pfFSNLvRa0dY3
Yq5naKZgvbE8iJNEP0SH7fi18f86mWW4wfvguV1WbReeJCxhOZNM+qNT+S7LeK8g
cui0Uzxkk7hXyBFxe7TV/HtUdLEa+IQK3S+hFQLfNURE8CxHX2NrhYQKRy+FifBO
6/xQD5k9KkIN520PS1EPD9jSJRdSZ6ZhinCUzVFg7l2KzfLfIArRmAKFDIMMa/d1
kBYQz0F8Km6DDn+vp9WJ641ClT6+cGuJpRWtecpgXv7a9sOSatuTE/Jdg43hq8FF
ZKTFqX9p3jN9y4irRMOMouS9ahQrH1t99HsdmCx+DuM=
-----END CERTIFICATE-----
Generated at Wed Apr 17 19:40:32 2024 by rpki-client on console-fra.rpki-client.org