Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/A1EyEoohO70WDUbC4qa2oHLng-4.roa
File: A1EyEoohO70WDUbC4qa2oHLng-4.roa (raw, json)
Hash identifier: tFjRFCKNRHTDSgMDBlKnejTXNF67TBz0GoJSV81S5FQ=
Subject key identifier: 03:51:32:12:8A:21:3B:BD:16:0D:46:C2:E2:A6:B6:A0:72:E7:83:EE
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01907F814E63FA08789617A63ED5E38B24BC
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/A1EyEoohO70WDUbC4qa2oHLng-4.roa
Signing time: Thu 04 Jul 2024 20:48:18 +0000
ROA not before: Thu 04 Jul 2024 20:48:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216271
IP address blocks: 185.168.28.0/22 maxlen: 22
185.201.136.0/22 maxlen: 22
2a06:cac0::/29 maxlen: 29
2a0a:e2c0::/29 maxlen: 29
2a0e:7780::/29 maxlen: 29
2a0f:d480::/29 maxlen: 29
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:7240::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a11:dcc0::/29 maxlen: 29
2a12:440::/29 maxlen: 29
2a12:ec0::/29 maxlen: 29
2a12:1900::/29 maxlen: 29
2a12:28c0::/29 maxlen: 29
2a12:6640::/29 maxlen: 29
2a12:6740::/29 maxlen: 29
2a12:6f40::/29 maxlen: 29
2a12:7740::/29 maxlen: 29
2a12:8ec0::/29 maxlen: 29
2a12:ccc0::/29 maxlen: 29
2a12:e240::/29 maxlen: 29
2a12:f0c0::/29 maxlen: 29
2a13:ba00::/29 maxlen: 29
2a13:dac0::/29 maxlen: 29
2a14:c0::/29 maxlen: 29
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
2a14:800::/29 maxlen: 29
2a14:f40::/29 maxlen: 29
2a14:7e00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 08 Jul 2024 08:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7f:81:4e:63:fa:08:78:96:17:a6:3e:d5:e3:8b:24:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jul 4 20:48:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=035132128a213bbd160d46c2e2a6b6a072e783ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6c:f3:96:36:dd:5e:0c:b1:bb:70:d1:0b:78:
fb:34:aa:c7:4e:19:34:34:e9:dd:60:bd:54:5b:02:
1d:ac:2a:6d:cf:fc:fe:b0:15:d6:ef:0f:d6:d8:1b:
54:42:1f:fe:ac:ea:58:ac:cb:32:d2:a0:b3:10:2d:
d9:65:03:25:4f:09:40:21:20:83:7b:3a:6e:7f:6d:
67:71:ec:19:d9:b5:1e:dd:1c:97:57:5f:e5:6e:9d:
ed:e4:1c:23:76:1d:54:10:19:37:57:5a:ab:33:4e:
da:ba:42:b4:4a:e5:45:c3:7e:db:2e:87:21:cb:fa:
ed:cc:b2:30:36:89:50:f1:7a:32:4e:a2:6b:c5:b0:
0b:6a:44:58:67:51:c3:3c:ce:87:6a:61:00:97:3f:
07:28:cd:78:d3:45:25:3f:02:3a:27:b1:a2:ca:ff:
0d:cc:ce:c6:93:01:0b:73:e9:e1:fe:81:19:2d:53:
ee:be:17:18:15:fb:50:b2:b6:90:b2:a5:56:1f:df:
c3:9c:60:f1:4e:da:cc:51:dd:9e:c8:bd:e7:e2:93:
bf:68:f5:52:10:fb:53:6c:64:3f:cc:1a:96:3b:98:
5e:0e:19:12:9c:5b:39:0a:01:00:53:b5:fd:9c:f5:
d3:35:47:1a:a6:67:bb:4f:95:61:8c:c4:87:6e:1c:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:51:32:12:8A:21:3B:BD:16:0D:46:C2:E2:A6:B6:A0:72:E7:83:EE
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/A1EyEoohO70WDUbC4qa2oHLng-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.28.0/22
185.201.136.0/22
IPv6:
2a06:cac0::/29
2a0a:e2c0::/29
2a0e:7780::/29
2a0f:d480::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:7240::/29
2a11:9600::/29
2a11:dcc0::/29
2a12:440::/29
2a12:ec0::/29
2a12:1900::/29
2a12:28c0::/29
2a12:6640::/29
2a12:6740::/29
2a12:6f40::/29
2a12:7740::/29
2a12:8ec0::/29
2a12:ccc0::/29
2a12:e240::/29
2a12:f0c0::/29
2a13:ba00::/29
2a13:dac0::/29
2a14:c0::/29
2a14:140::/29
2a14:1c0::/29
2a14:800::/29
2a14:f40::/29
2a14:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
81:fd:88:ae:67:32:48:74:42:b5:60:18:cf:bb:b7:cb:0b:0c:
34:f8:15:86:82:92:bf:86:a3:5c:99:22:19:f9:76:7a:08:91:
b0:fe:60:68:9e:ea:5b:28:b2:22:48:7e:07:3e:31:b6:22:4e:
f2:75:c2:73:41:3a:0c:84:ba:4d:a5:11:a9:7e:8f:3d:29:74:
26:3f:06:0a:92:63:03:c6:88:91:eb:82:ea:90:28:32:11:8f:
37:be:16:38:48:1f:66:0a:9e:91:f5:b6:b8:26:a3:bb:6a:64:
b3:d2:ae:c6:da:69:d0:0d:f3:ca:e1:52:01:78:f6:5c:0b:d6:
fd:77:4a:f4:df:26:ed:e4:25:b7:84:64:f1:51:9c:89:3f:37:
81:a5:ae:a9:c3:66:f3:41:af:6e:8f:78:d8:e1:ee:39:59:bf:
b8:e8:86:14:f2:bc:6e:eb:c9:b2:68:aa:39:af:85:20:1c:df:
29:f0:57:69:f8:ad:a0:d1:9a:25:89:76:2a:f8:4a:28:a9:da:
3d:a7:80:58:60:e2:b8:97:44:7f:b4:16:4c:4d:84:4d:75:31:
82:87:13:a0:ba:bb:80:e1:c8:03:34:5a:f5:ac:9a:21:00:4a:
54:f6:d9:41:f5:8d:74:05:c7:5d:c1:b5:ef:5a:3e:5d:5e:96:
12:79:3a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 10:02:27 2024 by rpki-client on console-fra.rpki-client.org