Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/S7nhP2yQDXRAe76rAgLCNliL7k4.roa
File: S7nhP2yQDXRAe76rAgLCNliL7k4.roa (raw, json)
Hash identifier: BUTTzG+t6my+fXjst1Dj3Hubk9UJ7oDnUxCmLFeTYI4=
Subject key identifier: 4B:B9:E1:3F:6C:90:0D:74:40:7B:BE:AB:02:02:C2:36:58:8B:EE:4E
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018F48FE4E5846398546BC150659BDD77769
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/S7nhP2yQDXRAe76rAgLCNliL7k4.roa
Signing time: Sun 05 May 2024 13:42:56 +0000
ROA not before: Sun 05 May 2024 13:42:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 2a0a:e2c0::/29 maxlen: 29
2a0e:7780::/29 maxlen: 32
2a0f:e000::/29 maxlen: 32
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:7240::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a11:dcc0::/29 maxlen: 32
2a12:f0c0::/29 maxlen: 29
2a13:ba00::/29 maxlen: 32
2a13:dac0::/29 maxlen: 32
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
2a14:800::/29 maxlen: 29
2a14:f40::/29 maxlen: 29
2a14:7e00::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 08 May 2024 11:42:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:48:fe:4e:58:46:39:85:46:bc:15:06:59:bd:d7:77:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: May 5 13:42:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bb9e13f6c900d74407bbeab0202c236588bee4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:97:c6:90:59:e9:a4:0c:9e:ac:08:48:bc:
5e:94:00:aa:3a:fb:41:19:2a:c7:44:dd:64:d9:9d:
1f:97:9e:b3:4f:aa:01:3b:74:cf:02:bc:e9:cd:b6:
c5:1f:5a:9f:f1:8a:3a:12:fd:f6:54:0d:59:22:2a:
4d:dd:67:b5:d5:74:32:a1:67:2a:5e:a5:c4:06:df:
25:71:8e:ba:b8:77:0b:7c:07:f0:88:fc:70:cf:19:
e0:2c:49:28:88:80:b3:33:9b:cf:38:d9:d6:79:8f:
77:34:f4:a0:04:76:4b:73:cd:d6:d3:d1:9a:46:40:
a2:de:25:e9:bd:a9:c0:b2:61:1c:31:b5:6d:d4:63:
68:35:6d:ae:74:fb:32:ac:ab:9c:1a:31:05:b2:37:
2f:cf:9c:99:59:97:bc:c7:44:74:bc:7b:9a:2c:87:
1f:ac:b8:f7:80:3c:b8:58:11:6d:ac:6d:63:43:02:
5c:c8:09:ed:ee:32:d9:a2:6c:bb:34:d8:db:1a:b8:
a9:c5:8c:4b:a4:10:5f:16:7d:c5:94:c6:f0:de:15:
f0:c1:02:d0:7f:ad:49:3b:3d:d8:40:fe:c4:9b:de:
bb:be:e0:1a:fc:60:1a:65:41:f1:e8:4a:4c:29:90:
66:5b:ce:7e:d9:7c:69:4b:a9:1b:4b:a1:c0:e7:8e:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B9:E1:3F:6C:90:0D:74:40:7B:BE:AB:02:02:C2:36:58:8B:EE:4E
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/S7nhP2yQDXRAe76rAgLCNliL7k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:e2c0::/29
2a0e:7780::/29
2a0f:e000::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:7240::/29
2a11:9600::/29
2a11:dcc0::/29
2a12:f0c0::/29
2a13:ba00::/29
2a13:dac0::/29
2a14:140::/29
2a14:1c0::/29
2a14:800::/29
2a14:f40::/29
2a14:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
ba:54:4f:b8:06:d9:91:40:18:50:63:2c:50:59:8c:91:92:52:
d9:3b:92:e9:67:f2:f5:64:1d:49:24:19:93:b5:73:b2:24:c6:
f3:3f:17:ce:e2:cd:4e:dd:15:58:e0:69:e0:c0:7b:19:d2:ec:
bb:9d:30:5e:c8:f2:a7:4f:57:34:28:d8:4c:02:d2:3c:20:9e:
ff:46:6d:5c:74:92:9d:68:12:05:75:91:7a:62:65:c2:be:56:
b2:fe:bb:45:4d:93:87:23:49:a6:c2:a1:fd:c8:b9:83:06:73:
c8:18:03:44:9b:25:de:25:d0:55:b3:df:31:4a:ce:1a:f8:29:
b3:5d:12:5e:db:ad:9b:b1:39:0b:23:87:d5:c4:1b:25:a9:d6:
e5:19:92:41:73:f2:b3:61:37:93:18:19:9e:36:c5:cd:13:4e:
2d:03:d6:cf:fe:d7:be:55:7c:36:be:15:6c:1f:fa:f6:58:d9:
3b:a5:f5:3a:af:07:06:fa:1f:66:40:43:ec:6f:9c:ae:6e:e0:
c9:07:92:20:10:d1:f2:a6:f6:25:0a:b7:9e:a0:fc:d3:6f:9d:
75:53:79:3b:8f:0d:11:7e:78:9a:69:57:e4:e7:fb:93:71:1a:
d0:44:b4:72:6f:13:89:5a:db:9d:fd:98:ab:f3:6d:54:74:50:
50:f2:ab:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:02 2024 by rpki-client on console-ams.rpki-client.org