Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ELTAnrN_qCyNBXK5pFwnpYREJTY.roa
File: ELTAnrN_qCyNBXK5pFwnpYREJTY.roa (raw, json)
Hash identifier: huXfO8rks9dHLN6uV4jDb+9xpAAzmENRotepwwfyxUo=
Subject key identifier: 10:B4:C0:9E:B3:7F:A8:2C:8D:05:72:B9:A4:5C:27:A5:84:44:25:36
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018F73A0C003B1AE9722645C46880ACD6EA5
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ELTAnrN_qCyNBXK5pFwnpYREJTY.roa
Signing time: Mon 13 May 2024 20:24:25 +0000
ROA not before: Mon 13 May 2024 20:24:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216271
IP address blocks: 185.168.28.0/22 maxlen: 22
185.201.136.0/22 maxlen: 22
2a06:b440::/29 maxlen: 29
2a06:cac0::/29 maxlen: 29
2a0a:e2c0::/29 maxlen: 29
2a0f:d480::/29 maxlen: 29
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:7240::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a11:f140::/29 maxlen: 29
2a11:f240::/29 maxlen: 29
2a12:440::/29 maxlen: 29
2a12:28c0::/29 maxlen: 29
2a12:6640::/29 maxlen: 29
2a12:6740::/29 maxlen: 29
2a12:6f40::/29 maxlen: 29
2a12:7740::/29 maxlen: 29
2a12:8ec0::/29 maxlen: 29
2a12:ccc0::/29 maxlen: 29
2a12:e240::/29 maxlen: 29
2a12:f0c0::/29 maxlen: 29
2a14:c0::/29 maxlen: 29
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
2a14:800::/29 maxlen: 29
2a14:f40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 23 May 2024 15:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:73:a0:c0:03:b1:ae:97:22:64:5c:46:88:0a:cd:6e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: May 13 20:24:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10b4c09eb37fa82c8d0572b9a45c27a584442536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:5f:48:76:44:a5:6d:66:7b:3a:dc:ce:81:
cc:62:6c:90:57:7c:f6:c2:d2:29:46:86:1d:ae:a5:
7b:b3:bb:37:c3:6a:fc:d1:fa:c8:7e:fd:05:1b:d9:
cc:3b:71:8a:f1:0a:cf:d7:ed:5c:8d:43:43:65:22:
43:40:e6:95:7b:59:57:1b:e9:e7:d5:0d:a2:ab:bf:
86:80:cf:e3:43:07:00:5f:36:23:f7:2b:78:aa:af:
9b:1b:40:57:3f:1d:2b:9d:4e:d7:a7:a4:c5:12:ec:
48:ef:59:af:26:67:54:fe:77:df:b1:90:c2:eb:91:
87:3a:8a:72:7d:a6:2a:1b:9a:16:9f:eb:b8:02:01:
40:2f:ee:6e:90:bd:fa:cd:1d:68:f5:79:90:03:e5:
23:6b:64:80:62:e2:ca:e2:b9:4c:16:cc:ab:2f:35:
ff:81:03:a5:08:53:f3:37:16:b3:bd:cf:de:46:8f:
60:a3:bd:8a:e5:4c:14:6e:96:c1:8b:e3:e7:24:29:
5f:4d:a7:1d:fb:90:53:91:4a:7d:58:d5:bd:13:d1:
10:b4:67:33:fd:8f:e0:37:af:f3:56:fd:34:c3:e4:
15:c9:9e:4e:6e:f1:0f:1d:c0:47:1e:b2:0e:38:21:
3b:0a:73:74:e8:f8:71:8c:9c:f5:24:13:9a:31:e0:
1c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B4:C0:9E:B3:7F:A8:2C:8D:05:72:B9:A4:5C:27:A5:84:44:25:36
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ELTAnrN_qCyNBXK5pFwnpYREJTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.28.0/22
185.201.136.0/22
IPv6:
2a06:b440::/29
2a06:cac0::/29
2a0a:e2c0::/29
2a0f:d480::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:7240::/29
2a11:9600::/29
2a11:f140::/29
2a11:f240::/29
2a12:440::/29
2a12:28c0::/29
2a12:6640::/29
2a12:6740::/29
2a12:6f40::/29
2a12:7740::/29
2a12:8ec0::/29
2a12:ccc0::/29
2a12:e240::/29
2a12:f0c0::/29
2a14:c0::/29
2a14:140::/29
2a14:1c0::/29
2a14:800::/29
2a14:f40::/29
Signature Algorithm: sha256WithRSAEncryption
b1:2b:0c:ac:8e:68:b1:ae:a5:61:1e:33:6c:0c:e0:8f:76:d2:
57:e1:d3:5b:fe:70:20:b6:7f:22:0b:0c:8c:77:25:7b:0f:bf:
40:d5:50:24:34:c4:66:0a:85:73:8b:c0:14:b4:4f:06:39:0f:
e3:01:fe:30:c4:b2:1a:6e:17:76:a9:01:02:df:49:6c:64:0a:
6a:50:55:f9:b6:f7:f8:f9:f4:53:04:88:9d:fa:7e:7e:3a:a7:
80:38:7d:c8:4b:91:08:d2:8e:27:70:02:a0:19:a0:bb:c2:70:
11:3b:76:47:5f:7f:08:8d:29:17:32:08:9d:5d:3c:51:4f:81:
02:a8:92:fa:5a:40:e2:5c:f2:33:16:eb:aa:75:a7:77:de:24:
71:90:a6:2e:b5:61:a3:50:9c:bb:f9:e3:7a:c8:e6:09:ff:f4:
d1:3b:39:26:2f:d0:d4:38:52:3c:69:b1:4b:45:39:56:53:09:
81:42:a0:e0:65:58:b3:d9:36:28:e1:2f:9e:0d:7c:bd:fd:a1:
68:6f:4d:fc:1c:f7:57:ee:56:fd:11:6f:55:49:01:31:2d:7e:
25:3a:41:15:ea:81:d3:b4:06:42:73:82:35:8d:46:cd:4b:a5:
c4:0f:31:d7:54:70:26:a8:b3:0b:b7:33:e6:4e:ac:75:89:0c:
e3:09:35:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:02 2024 by rpki-client on console-ams.rpki-client.org