Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/B28eNgThjYYt3-dH163s-Gpgbo8.roa
File: B28eNgThjYYt3-dH163s-Gpgbo8.roa (raw, json)
Hash identifier: ROUux9AxW+D/nk7ovqzMCOwmLGtETdPSnzpsgUuHQfQ=
Subject key identifier: 07:6F:1E:36:04:E1:8D:86:2D:DF:E7:47:D7:AD:EC:F8:6A:60:6E:8F
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01916016A6A988C96A1444D15C8FB44F7366
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/B28eNgThjYYt3-dH163s-Gpgbo8.roa
Signing time: Sat 17 Aug 2024 11:26:22 +0000
ROA not before: Sat 17 Aug 2024 11:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216271
IP address blocks: 185.168.28.0/22 maxlen: 22
185.201.136.0/22 maxlen: 22
2a06:cac0::/29 maxlen: 29
2a0a:e2c0::/29 maxlen: 29
2a0e:7780::/29 maxlen: 29
2a0f:d480::/29 maxlen: 29
2a0f:e000::/29 maxlen: 29
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:7240::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a11:dcc0::/29 maxlen: 29
2a11:f140::/29 maxlen: 29
2a12:440::/29 maxlen: 29
2a12:ec0::/29 maxlen: 29
2a12:1900::/29 maxlen: 29
2a12:28c0::/29 maxlen: 29
2a12:6640::/29 maxlen: 29
2a12:6740::/29 maxlen: 29
2a12:6b80::/29 maxlen: 29
2a12:6f40::/29 maxlen: 29
2a12:8ec0::/29 maxlen: 29
2a12:ccc0::/29 maxlen: 29
2a12:e240::/29 maxlen: 29
2a12:f0c0::/29 maxlen: 29
2a13:ba00::/29 maxlen: 29
2a13:dac0::/29 maxlen: 29
2a14:c0::/29 maxlen: 29
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
2a14:800::/29 maxlen: 29
2a14:f40::/29 maxlen: 29
2a14:7e00::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 23 Aug 2024 09:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:60:16:a6:a9:88:c9:6a:14:44:d1:5c:8f:b4:4f:73:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Aug 17 11:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=076f1e3604e18d862ddfe747d7adecf86a606e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:05:41:69:e7:b4:e4:cb:2d:5e:51:98:93:
b2:3b:ff:ce:3d:bf:43:55:69:18:6b:03:b9:51:9b:
89:7d:d4:0b:97:37:3c:2d:bf:8f:07:df:c7:ef:b5:
31:35:bd:39:32:f9:90:9c:7f:c0:a0:24:96:ad:fa:
de:f0:70:8d:63:04:63:a7:8e:ec:da:70:9a:5e:81:
7d:a1:76:58:c4:be:a1:07:65:52:d7:dc:bc:7e:e1:
63:8f:3f:2e:0f:94:51:3f:81:a5:fa:ff:0e:33:4d:
90:a6:e2:e7:79:89:48:94:cc:73:1c:b4:6f:2c:de:
a5:0a:07:98:4d:a8:98:64:36:f3:7c:b8:f5:4a:0d:
f4:7b:58:b0:12:9a:2a:c7:02:16:3b:a3:d9:39:c2:
7e:6e:87:ea:85:64:62:8e:2e:6f:fb:25:bf:67:01:
4b:c3:df:c6:2b:dc:f0:03:65:30:28:12:a8:6b:e6:
69:ab:1c:ad:2b:80:4a:ca:e7:b6:5c:4f:b4:a9:42:
af:1e:a6:ba:58:c3:88:4d:54:b0:a5:c9:2f:29:4f:
16:c8:54:ec:5d:e8:ac:9f:e7:2c:17:49:d4:23:80:
7e:79:de:65:60:b4:46:a0:90:99:89:e2:cd:d0:63:
be:c3:8f:cd:5c:bd:fc:a0:c1:cd:66:0b:ef:b4:44:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6F:1E:36:04:E1:8D:86:2D:DF:E7:47:D7:AD:EC:F8:6A:60:6E:8F
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/B28eNgThjYYt3-dH163s-Gpgbo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.28.0/22
185.201.136.0/22
IPv6:
2a06:cac0::/29
2a0a:e2c0::/29
2a0e:7780::/29
2a0f:d480::/29
2a0f:e000::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:7240::/29
2a11:9600::/29
2a11:dcc0::/29
2a11:f140::/29
2a12:440::/29
2a12:ec0::/29
2a12:1900::/29
2a12:28c0::/29
2a12:6640::/29
2a12:6740::/29
2a12:6b80::/29
2a12:6f40::/29
2a12:8ec0::/29
2a12:ccc0::/29
2a12:e240::/29
2a12:f0c0::/29
2a13:ba00::/29
2a13:dac0::/29
2a14:c0::/29
2a14:140::/29
2a14:1c0::/29
2a14:800::/29
2a14:f40::/29
2a14:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
09:09:9b:9b:ec:ca:24:15:ad:8b:07:b6:eb:44:41:29:79:1d:
01:73:a6:bc:39:bc:3b:6b:25:3e:89:65:8b:9f:f0:bd:d7:84:
28:c0:d3:a0:24:c7:20:61:20:9c:e0:d4:32:9a:36:d0:67:d8:
85:e8:e1:52:17:b6:c8:a8:36:fa:d1:a1:8f:cc:2a:30:8b:70:
be:3e:60:cf:d6:8d:a4:59:75:85:89:64:4c:fb:0c:f0:89:11:
af:36:98:7e:65:ee:70:ee:59:70:0a:ad:58:cc:3c:9c:ba:e9:
3d:8e:91:6f:98:70:0f:5c:89:27:36:62:61:82:b4:f6:ed:1d:
3d:0e:7a:40:45:77:c6:56:e3:e9:ae:9c:4e:55:a7:9d:65:2b:
71:6f:09:e2:70:e6:43:3f:12:04:54:2a:fb:38:ad:e8:3d:c4:
0a:1f:2b:49:b9:53:a4:ee:c5:47:bb:8b:00:2c:ce:77:7b:bb:
6d:00:21:b6:22:74:66:cc:63:85:18:fd:c1:43:62:5f:d3:28:
0c:b0:44:d8:0b:d3:40:29:81:be:f6:31:85:0b:3e:6b:71:d4:
b1:ef:37:e6:8c:8b:df:8f:7e:d0:46:5c:84:7b:be:e7:39:e8:
58:17:d4:3f:bb:48:40:49:bc:d4:d2:39:3f:de:8d:a6:8a:ed:
d3:fe:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:49 2024 by rpki-client on console-fra.rpki-client.org