Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/1vL9kzwlqVaWS1ZDHUyQFggNWOU.roa
File: 1vL9kzwlqVaWS1ZDHUyQFggNWOU.roa (raw, json)
Hash identifier: Fdje7pAfGgOVyE0Eue5qo3ocBZRZBuPG3B1WbBbLUNw=
Subject key identifier: D6:F2:FD:93:3C:25:A9:56:96:4B:56:43:1D:4C:90:16:08:0D:58:E5
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 0191D8923F32A4C2A14F40CAB511BED09788
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/1vL9kzwlqVaWS1ZDHUyQFggNWOU.roa
Signing time: Mon 09 Sep 2024 20:55:48 +0000
ROA not before: Mon 09 Sep 2024 20:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216271
IP address blocks: 185.168.28.0/22 maxlen: 22
185.201.136.0/22 maxlen: 22
2a06:b3c0::/29 maxlen: 29
2a06:b440::/29 maxlen: 29
2a06:cac0::/29 maxlen: 29
2a0e:7780::/29 maxlen: 29
2a0f:d480::/29 maxlen: 29
2a0f:e000::/29 maxlen: 29
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:7240::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a11:dcc0::/29 maxlen: 29
2a11:f140::/29 maxlen: 29
2a12:440::/29 maxlen: 29
2a12:1900::/29 maxlen: 29
2a12:28c0::/29 maxlen: 29
2a12:6640::/29 maxlen: 29
2a12:6740::/29 maxlen: 29
2a12:6b80::/29 maxlen: 29
2a12:6f40::/29 maxlen: 29
2a12:8ec0::/29 maxlen: 29
2a12:ccc0::/29 maxlen: 29
2a12:e240::/29 maxlen: 29
2a12:f0c0::/29 maxlen: 29
2a13:ba00::/29 maxlen: 29
2a13:dac0::/29 maxlen: 29
2a14:c0::/29 maxlen: 29
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
2a14:800::/29 maxlen: 29
2a14:f40::/29 maxlen: 29
2a14:7e00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 24 Sep 2024 07:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d8:92:3f:32:a4:c2:a1:4f:40:ca:b5:11:be:d0:97:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Sep 9 20:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6f2fd933c25a956964b56431d4c9016080d58e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:cd:f7:f0:9e:e8:81:11:f1:71:b2:7d:db:
78:e6:80:2a:12:46:ef:3c:63:8c:aa:b5:ce:b2:60:
5a:ae:59:d7:c4:a9:ee:f2:d5:f2:99:11:66:86:f6:
96:5d:82:11:fe:7f:17:9e:47:2d:dd:e0:87:a8:aa:
c4:8e:54:c3:c4:cd:71:2c:ad:3b:03:32:6d:fa:b4:
3d:2b:41:89:15:14:2b:50:e6:20:ed:dd:8f:3a:9e:
51:cb:ec:17:70:22:53:65:b5:eb:85:a1:50:7f:ed:
0e:b2:4c:57:3f:85:5c:d1:cb:c1:9c:0c:dd:bf:f0:
c0:4b:ca:eb:7a:d7:5f:79:06:6d:71:87:11:c3:d4:
aa:8d:1d:f9:2c:5f:b7:41:4f:21:da:0f:a8:9f:a3:
42:2c:c6:7f:89:2b:41:5b:6a:ad:52:93:c0:dd:73:
2d:b2:37:ad:c2:5e:92:07:be:97:b0:7b:e3:48:f2:
e4:17:49:f1:a2:28:d2:b6:d0:8d:19:65:44:76:56:
e2:79:d2:47:fb:48:3e:e1:34:2c:19:72:66:7b:80:
38:39:db:3e:67:c3:73:ff:10:c4:37:62:e5:46:8e:
2e:1a:ed:f3:7e:ce:b4:bd:72:c7:0f:15:38:45:65:
d5:e5:b8:f1:9e:13:53:f1:f5:ff:63:66:11:d2:81:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F2:FD:93:3C:25:A9:56:96:4B:56:43:1D:4C:90:16:08:0D:58:E5
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/1vL9kzwlqVaWS1ZDHUyQFggNWOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.28.0/22
185.201.136.0/22
IPv6:
2a06:b3c0::/29
2a06:b440::/29
2a06:cac0::/29
2a0e:7780::/29
2a0f:d480::/29
2a0f:e000::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:7240::/29
2a11:9600::/29
2a11:dcc0::/29
2a11:f140::/29
2a12:440::/29
2a12:1900::/29
2a12:28c0::/29
2a12:6640::/29
2a12:6740::/29
2a12:6b80::/29
2a12:6f40::/29
2a12:8ec0::/29
2a12:ccc0::/29
2a12:e240::/29
2a12:f0c0::/29
2a13:ba00::/29
2a13:dac0::/29
2a14:c0::/29
2a14:140::/29
2a14:1c0::/29
2a14:800::/29
2a14:f40::/29
2a14:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
16:40:59:13:44:39:34:f1:ba:a6:89:90:5d:28:1c:bd:31:0f:
dc:71:e5:f4:fb:7d:93:e2:c0:62:52:aa:4a:13:78:9f:6a:c0:
16:0e:c3:2e:f9:79:37:c5:39:60:a2:a2:aa:4f:47:f3:fb:24:
5d:37:54:62:58:d3:49:66:bf:78:8f:b7:22:13:d4:51:cb:0c:
53:e4:a5:65:06:cc:bf:b8:23:1b:3d:09:05:a4:a8:c7:9e:8f:
10:62:38:11:f9:cb:b4:81:ce:0c:ab:35:08:41:2b:96:11:df:
0f:1e:57:93:fe:d2:1e:28:6f:ee:4b:00:81:1d:8f:62:09:6e:
ab:94:02:9e:ab:bf:1f:07:61:fc:49:88:34:16:b2:fc:c0:f4:
a8:9a:20:87:e2:65:7b:54:74:8b:b1:d4:a5:35:34:e9:a9:3a:
e1:33:b2:c6:00:55:45:1a:3a:93:40:09:1f:53:57:8c:ff:a3:
ad:1a:09:c2:9f:95:23:e9:6b:5f:72:1d:27:17:94:2c:f9:bf:
c7:dc:16:48:7c:fe:c1:a7:e2:2a:20:fe:68:59:fa:a0:22:c7:
ea:b1:70:71:17:c6:14:3e:3a:53:4a:0a:cf:30:91:c2:a0:ee:
8b:6d:86:7d:ed:ab:f7:c1:9f:df:a0:2f:4a:5f:0d:8d:1d:94:
0f:9a:2d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 09:10:19 2024 by rpki-client on console-fra.rpki-client.org