Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/5VF-IugSQvmHLutiQIm3SPCty6A.roa
File: 5VF-IugSQvmHLutiQIm3SPCty6A.roa (raw, json)
Hash identifier: QafCgW0xUE17HTOj6TXvb9hIHUQaonTjs3Y0TAo/zj0=
Subject key identifier: E5:51:7E:22:E8:12:42:F9:87:2E:EB:62:40:89:B7:48:F0:AD:CB:A0
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018FC5659F7E787D0AF797AB3CB24C72FD65
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/5VF-IugSQvmHLutiQIm3SPCty6A.roa
Signing time: Wed 29 May 2024 17:28:42 +0000
ROA not before: Wed 29 May 2024 17:28:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 2a0a:e2c0::/29 maxlen: 29
2a0e:7780::/29 maxlen: 32
2a0f:e000::/29 maxlen: 32
2a11:2f40::/29 maxlen: 29
2a11:7240::/29 maxlen: 29
2a11:dcc0::/29 maxlen: 32
2a12:f0c0::/29 maxlen: 29
2a14:c0::/29 maxlen: 29
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
2a14:800::/29 maxlen: 29
2a14:f40::/29 maxlen: 29
2a14:7e00::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 03 Jun 2024 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c5:65:9f:7e:78:7d:0a:f7:97:ab:3c:b2:4c:72:fd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: May 29 17:28:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5517e22e81242f9872eeb624089b748f0adcba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9a:f8:e8:f8:1b:31:09:1c:26:92:ba:fc:a2:
5e:85:b5:04:8f:6e:60:be:4f:6d:4f:f1:11:d7:cf:
06:93:f8:22:5d:aa:b0:4a:93:8b:bd:33:81:55:8d:
ec:ea:46:39:7b:83:84:5d:21:6b:86:1b:71:5e:c0:
25:88:c4:1d:e5:7d:35:82:fb:2f:d4:b9:0e:f9:e6:
4e:cb:ca:db:19:17:a2:73:34:1f:e3:36:a9:ee:d5:
52:0e:66:ff:53:42:1c:ed:9e:5f:3c:c7:85:7b:af:
66:a4:4d:69:53:21:79:4e:a7:5a:7d:5e:43:96:8a:
9e:57:7b:4b:f0:98:2b:45:c6:25:dc:54:ea:7a:18:
4e:cb:d4:4b:09:f5:56:30:15:7a:99:7e:0d:40:c1:
35:e1:33:34:bc:e0:d9:d6:1a:f8:a5:3d:ce:47:38:
6e:5d:a9:19:fa:02:c8:b1:b7:30:33:ab:f6:14:a1:
62:c6:d3:1f:b1:8e:76:f1:48:dc:d4:78:3a:cc:a3:
2b:07:e7:d5:70:51:80:32:db:60:9a:42:03:e6:b7:
bb:4e:1b:d7:11:27:0e:80:44:ec:e5:85:b0:fe:33:
86:b0:19:a1:b0:28:3a:c1:b7:88:fe:21:7f:54:17:
79:a7:96:c3:e0:79:39:48:e1:57:ac:95:66:00:af:
32:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:51:7E:22:E8:12:42:F9:87:2E:EB:62:40:89:B7:48:F0:AD:CB:A0
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/5VF-IugSQvmHLutiQIm3SPCty6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:e2c0::/29
2a0e:7780::/29
2a0f:e000::/29
2a11:2f40::/29
2a11:7240::/29
2a11:dcc0::/29
2a12:f0c0::/29
2a14:c0::/29
2a14:140::/29
2a14:1c0::/29
2a14:800::/29
2a14:f40::/29
2a14:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
5c:c5:a5:b5:f3:9e:cf:a3:bf:06:ae:7e:65:42:46:2f:64:9f:
af:9d:05:cb:fb:f1:d4:55:ee:07:b2:1f:45:3a:07:c3:84:cb:
5e:a0:a5:19:bb:65:f0:4b:d5:0c:d7:05:24:5c:53:15:ab:4f:
fa:3e:56:35:9f:22:da:8d:67:22:f9:5e:51:cc:90:b5:e4:fc:
c1:3f:70:72:eb:39:aa:77:cb:1e:84:62:12:5d:49:dd:e2:84:
cc:7d:74:5e:48:19:cf:44:27:0e:03:73:29:eb:12:65:45:47:
04:7c:c2:5a:d9:29:e5:c7:6a:47:cd:59:11:78:8e:c9:c7:aa:
55:29:02:d8:0d:0a:95:21:7b:ad:30:67:99:3d:1d:b1:57:9e:
c0:49:e9:43:51:01:ff:7b:05:8e:8e:21:a2:27:ed:28:6a:b2:
5b:01:e3:73:3f:88:d6:09:c8:ae:de:10:2b:77:4c:4e:4a:7e:
56:b4:48:82:c6:06:80:52:28:ce:31:12:21:96:aa:27:db:15:
62:2c:bd:1a:b1:e0:cd:74:23:d5:f4:6f:0d:d8:b8:28:d5:5f:
b5:60:1d:5d:ab:77:da:6e:77:90:01:93:2b:76:cd:2e:4d:db:
0a:aa:e7:e0:c8:44:2f:32:6b:26:bb:89:eb:bc:3a:52:75:fb:
cd:a7:d6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:02 2024 by rpki-client on console-ams.rpki-client.org