Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/IoD6FxGqHna9TbTStk5M-EcxNbQ.roa
File: IoD6FxGqHna9TbTStk5M-EcxNbQ.roa (raw, json)
Hash identifier: MSIOL+RNF/7/UX0cD/xlAUluX6H9DbapaNgpGdpCfyM=
Subject key identifier: 22:80:FA:17:11:AA:1E:76:BD:4D:B4:D2:B6:4E:4C:F8:47:31:35:B4
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018DE7461CE49157CACABBB2F791D57940B0
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/IoD6FxGqHna9TbTStk5M-EcxNbQ.roa
Signing time: Mon 26 Feb 2024 21:15:48 +0000
ROA not before: Mon 26 Feb 2024 21:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216271
IP address blocks: 185.168.28.0/22 maxlen: 22
185.201.136.0/22 maxlen: 22
2a06:b3c0::/29 maxlen: 29
2a06:b440::/29 maxlen: 29
2a06:cac0::/29 maxlen: 29
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a12:440::/29 maxlen: 29
2a12:6640::/29 maxlen: 29
2a12:6740::/29 maxlen: 29
2a12:6f40::/29 maxlen: 29
2a12:7740::/29 maxlen: 29
2a12:d3c0::/29 maxlen: 29
2a12:e240::/29 maxlen: 29
2a14:c0::/29 maxlen: 29
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
2a14:800::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 27 Feb 2024 16:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e7:46:1c:e4:91:57:ca:ca:bb:b2:f7:91:d5:79:40:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Feb 26 21:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2280fa1711aa1e76bd4db4d2b64e4cf8473135b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:ab:de:79:b1:de:90:b4:10:0f:77:dc:f8:
31:99:0d:1c:43:87:e7:b1:b7:a8:17:98:8f:d7:a6:
c5:f9:47:f0:44:14:38:1f:38:5d:88:b9:11:f9:7f:
36:16:90:ed:f6:a3:33:92:2b:1c:5a:58:f5:70:d3:
5e:eb:a2:7c:f6:51:d1:a3:00:92:5a:74:81:4b:74:
06:f5:08:6a:ae:b3:2e:ad:76:df:e4:f4:9a:67:e3:
21:21:dc:1f:15:ba:1d:18:2f:77:e0:56:f3:da:f2:
56:55:75:ea:96:8b:1d:98:2e:e2:95:43:2d:27:60:
d8:72:fc:28:fb:b5:40:9e:a9:87:aa:d5:29:5c:de:
2d:95:15:68:6d:88:58:7b:3d:5b:67:e4:29:f9:bf:
d1:85:b8:5c:8a:79:41:cc:4d:18:85:a2:0e:7b:5a:
9c:9e:62:da:46:80:85:79:3e:4b:39:f1:b6:81:90:
ff:da:02:bf:38:d2:2a:4d:b6:e7:97:10:98:7e:9f:
64:98:6b:cf:82:aa:16:c7:68:40:8e:98:38:37:f8:
cb:ec:20:55:55:79:9b:c3:ad:74:81:55:3e:7a:42:
de:fb:92:dc:74:ad:07:71:19:66:df:59:96:f2:2d:
1c:ac:1b:17:8a:42:08:cc:79:10:6c:87:d8:14:f2:
3c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:80:FA:17:11:AA:1E:76:BD:4D:B4:D2:B6:4E:4C:F8:47:31:35:B4
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/IoD6FxGqHna9TbTStk5M-EcxNbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.28.0/22
185.201.136.0/22
IPv6:
2a06:b3c0::/29
2a06:b440::/29
2a06:cac0::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:9600::/29
2a12:440::/29
2a12:6640::/29
2a12:6740::/29
2a12:6f40::/29
2a12:7740::/29
2a12:d3c0::/29
2a12:e240::/29
2a14:c0::/29
2a14:140::/29
2a14:1c0::/29
2a14:800::/29
Signature Algorithm: sha256WithRSAEncryption
68:47:26:88:10:16:15:c5:93:d5:1b:cc:15:96:ad:ec:6a:cc:
1f:d3:5e:1d:35:e1:74:29:6b:d5:48:84:be:13:cd:47:b3:58:
d6:f7:fc:a8:46:cf:ed:e5:b6:6b:e3:a9:6b:1a:5a:d2:ee:39:
01:79:02:43:4b:52:f1:46:4a:b0:e8:e2:3c:0b:b0:d4:fc:56:
1a:4d:19:e9:7b:61:5a:b0:a8:a4:08:34:5f:2c:6f:1d:53:3a:
e8:13:20:8e:0e:27:39:24:04:48:fe:ac:d6:05:10:45:97:6a:
95:89:cf:76:86:4a:cc:4a:f7:ae:6b:96:1e:eb:6d:87:90:92:
d0:9d:ce:03:14:e5:cd:14:9b:cf:77:bd:fe:ec:da:b9:07:54:
b4:e4:52:5e:a7:05:6f:f1:b1:a8:b0:10:7e:f2:57:fa:c4:5e:
85:79:31:d9:be:08:a0:ef:0d:6d:fa:bb:ea:70:db:d8:d0:76:
b3:22:52:a4:5d:c2:b2:29:87:ed:95:9f:87:2f:f8:95:c6:95:
4f:31:f4:0f:88:b3:16:3e:df:f2:91:a0:36:00:bc:b3:fc:09:
71:7d:ea:d5:80:5f:bb:fb:63:fc:ab:83:9b:b1:00:62:d6:93:
87:43:71:d0:d1:28:5d:a8:cd:67:bb:5a:5c:be:14:1b:cc:56:
d2:58:82:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:37 2024 by rpki-client on console-fra.rpki-client.org