Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/1ssj-0LThQBe5SisbWDMV_FVry8.roa
File: 1ssj-0LThQBe5SisbWDMV_FVry8.roa (raw, json)
Hash identifier: 92cFgiV0m0cLRkK24S4+kx9PAQ5poNN3sqMvE5LIIjI=
Subject key identifier: D6:CB:23:FB:42:D3:85:00:5E:E5:28:AC:6D:60:CC:57:F1:55:AF:2F
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018FB597E97C7655955884353DE3ABC0AB3D
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/1ssj-0LThQBe5SisbWDMV_FVry8.roa
Signing time: Sun 26 May 2024 15:49:42 +0000
ROA not before: Sun 26 May 2024 15:49:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216271
IP address blocks: 185.168.28.0/22 maxlen: 22
185.201.136.0/22 maxlen: 22
2a06:cac0::/29 maxlen: 29
2a0a:e2c0::/29 maxlen: 29
2a0f:d480::/29 maxlen: 29
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:7240::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a11:f140::/29 maxlen: 29
2a11:f240::/29 maxlen: 29
2a12:440::/29 maxlen: 29
2a12:1900::/29 maxlen: 29
2a12:6640::/29 maxlen: 29
2a12:6740::/29 maxlen: 29
2a12:6f40::/29 maxlen: 29
2a12:7740::/29 maxlen: 29
2a12:8ec0::/29 maxlen: 29
2a12:ccc0::/29 maxlen: 29
2a12:e240::/29 maxlen: 29
2a12:f0c0::/29 maxlen: 29
2a14:c0::/29 maxlen: 29
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
2a14:800::/29 maxlen: 29
2a14:f40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 29 May 2024 12:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b5:97:e9:7c:76:55:95:58:84:35:3d:e3:ab:c0:ab:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: May 26 15:49:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6cb23fb42d385005ee528ac6d60cc57f155af2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:36:ca:39:03:2b:b8:ad:96:65:82:ce:6e:
43:8b:77:cc:42:e5:39:76:bc:37:46:88:82:1a:15:
63:04:ab:20:d1:ef:84:2f:8c:3c:f4:03:5b:36:d2:
bc:d0:1b:55:a8:42:6d:98:37:93:fb:ee:f9:b2:d0:
72:32:18:fa:33:a3:4b:ce:a8:f7:5c:09:c8:5b:6e:
87:88:57:58:fe:06:46:82:37:15:02:09:d3:e4:ac:
91:b7:67:69:bc:b4:54:4a:1c:6a:98:19:8c:86:00:
bd:6d:a1:bd:b0:b4:1f:d7:ef:2d:86:94:15:79:5f:
66:0f:73:45:94:53:d4:7c:05:c3:d4:4f:89:8c:51:
5c:d5:e6:2b:c9:4f:d4:02:c6:df:3b:43:c1:93:74:
d5:85:15:e1:61:9c:6f:73:fd:9f:a9:a9:c9:5d:0c:
08:1c:47:f2:54:57:79:20:90:e4:2a:cd:3c:41:34:
93:5b:73:c1:df:dc:a6:f6:86:22:57:69:b4:71:c8:
f2:d6:70:ab:8d:d1:e4:9b:cc:73:aa:38:fd:e2:1f:
89:c9:ae:8b:55:de:7c:7c:b0:63:70:0d:eb:2b:39:
a6:3a:db:e0:e8:3a:36:b9:dc:fe:57:e4:07:ad:2e:
61:6c:93:4e:e0:56:33:45:65:79:29:f4:a0:6c:0d:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CB:23:FB:42:D3:85:00:5E:E5:28:AC:6D:60:CC:57:F1:55:AF:2F
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/1ssj-0LThQBe5SisbWDMV_FVry8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.28.0/22
185.201.136.0/22
IPv6:
2a06:cac0::/29
2a0a:e2c0::/29
2a0f:d480::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:7240::/29
2a11:9600::/29
2a11:f140::/29
2a11:f240::/29
2a12:440::/29
2a12:1900::/29
2a12:6640::/29
2a12:6740::/29
2a12:6f40::/29
2a12:7740::/29
2a12:8ec0::/29
2a12:ccc0::/29
2a12:e240::/29
2a12:f0c0::/29
2a14:c0::/29
2a14:140::/29
2a14:1c0::/29
2a14:800::/29
2a14:f40::/29
Signature Algorithm: sha256WithRSAEncryption
56:98:33:75:f6:fb:67:27:ab:56:c6:b5:fd:ed:56:c9:2d:3c:
b2:b9:6b:63:5e:8c:f1:14:b6:de:7a:a7:66:75:bf:aa:be:64:
48:6d:34:c6:19:04:10:c7:58:2b:12:35:15:57:cd:98:d8:25:
79:ac:30:ec:10:50:a8:f9:12:f2:cd:bb:70:6d:ba:57:dd:31:
04:0f:0e:af:c4:63:3c:d1:73:1f:d0:b3:e1:49:96:9c:c8:66:
8c:f4:42:d1:8c:6d:bd:49:8c:22:ae:25:84:a4:e7:80:fe:6c:
f9:25:38:d6:be:97:48:ff:1f:f7:3a:6e:46:de:c3:01:8f:71:
5f:86:12:5d:7b:52:a9:93:77:18:86:4d:8d:74:dc:0b:4e:da:
71:e6:56:ba:91:ad:e4:f5:c6:2f:07:88:ea:27:e6:fb:6d:8c:
95:7b:22:0e:7f:18:86:a3:f5:70:d9:91:af:d7:f0:90:a8:ed:
87:df:32:1d:84:69:6d:66:2a:28:6f:52:a5:7a:b1:04:3f:e8:
44:bc:df:04:7e:5d:80:f5:7c:74:06:12:a3:4c:f7:f0:c1:b8:
cb:6f:08:62:da:5b:3d:3d:45:f4:54:86:98:67:12:38:7f:9f:
89:4e:95:5c:ee:db:a6:2e:10:59:9f:b3:8a:bf:bc:94:fe:ec:
44:19:b6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:02 2024 by rpki-client on console-ams.rpki-client.org