Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/StggurXkmFJrXmTf0rK50cj4O9Q.roa
File: StggurXkmFJrXmTf0rK50cj4O9Q.roa (raw, json)
Hash identifier: Msm4Xc4wU7aBX0lLXDEwKOAtJ7X5MMw5Xet6hgzW02Q=
Subject key identifier: 4A:D8:20:BA:B5:E4:98:52:6B:5E:64:DF:D2:B2:B9:D1:C8:F8:3B:D4
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 019074C88DF7169467A6BE413734259687D1
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/StggurXkmFJrXmTf0rK50cj4O9Q.roa
Signing time: Tue 02 Jul 2024 18:50:18 +0000
ROA not before: Tue 02 Jul 2024 18:50:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 2a06:b440::/29 maxlen: 29
2a0e:7780::/29 maxlen: 30
2a0f:e000::/29 maxlen: 29
2a11:f140::/29 maxlen: 29
2a12:ec0::/29 maxlen: 32
2a12:6740::/29 maxlen: 30
2a12:8ec0::/29 maxlen: 30
2a12:ccc0::/29 maxlen: 30
2a12:d3c0::/29 maxlen: 30
2a12:e240::/29 maxlen: 30
Validation: Failed, certificate revoked on Mon 29 Jul 2024 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:74:c8:8d:f7:16:94:67:a6:be:41:37:34:25:96:87:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jul 2 18:50:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ad820bab5e498526b5e64dfd2b2b9d1c8f83bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4a:1f:01:79:e6:5c:03:92:6d:32:9e:98:ea:
88:ab:3b:7c:28:d8:94:d6:d4:e0:38:96:99:7d:3e:
2a:af:3e:09:f0:d5:66:48:fe:5e:d7:85:61:9f:f4:
80:52:4b:bf:5b:d8:e7:28:83:6a:8f:97:82:8b:df:
55:f1:f4:8f:35:e4:1e:0a:1b:2e:f5:d9:d5:39:21:
2c:68:5d:f1:b5:f2:83:76:55:bc:24:07:51:fe:2f:
8a:46:fc:b8:e2:14:b9:61:33:94:9e:c1:ab:86:07:
06:5f:47:c6:89:b5:06:92:0a:4b:47:73:b7:25:79:
a4:48:92:fb:3f:59:e0:2b:f2:cd:02:cb:bc:15:e4:
c7:80:a6:36:da:cd:66:ef:66:a7:99:52:7e:e9:c6:
98:6b:3b:28:50:a9:32:73:55:85:64:14:90:70:2e:
5c:6b:53:43:11:7a:e1:12:40:e6:63:25:ae:27:a4:
89:8d:b1:a1:5b:eb:f8:36:2b:31:d2:c0:c9:0b:fe:
5e:fe:8a:89:80:ec:ce:93:58:2d:58:00:eb:ab:0b:
33:bd:74:5b:2e:2c:91:f9:ac:41:c9:d1:52:fc:fa:
99:a2:85:33:aa:04:c2:dd:25:d0:e2:c2:de:24:63:
42:ad:f8:f6:59:c7:a8:5d:70:6f:85:6e:78:dd:a2:
e0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D8:20:BA:B5:E4:98:52:6B:5E:64:DF:D2:B2:B9:D1:C8:F8:3B:D4
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/StggurXkmFJrXmTf0rK50cj4O9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b440::/29
2a0e:7780::/29
2a0f:e000::/29
2a11:f140::/29
2a12:ec0::/29
2a12:6740::/29
2a12:8ec0::/29
2a12:ccc0::/29
2a12:d3c0::/29
2a12:e240::/29
Signature Algorithm: sha256WithRSAEncryption
59:1f:19:f5:b4:fd:96:78:7f:54:74:35:6b:97:1b:f7:34:97:
98:a1:05:46:ea:1a:24:ac:fc:05:c3:73:08:06:cf:98:ce:c4:
33:15:70:d7:c7:13:71:e3:69:44:93:15:7d:2d:bc:33:67:a5:
a0:ff:9c:e1:6f:8b:44:24:34:c7:e3:79:a1:6e:64:9b:71:40:
73:be:51:5d:4d:2e:ae:e3:c1:bb:5c:8a:4f:b7:ab:dd:8d:2c:
ff:fe:df:9c:ba:b4:1a:05:da:8d:6a:ec:ff:70:47:d2:96:30:
9f:0a:ab:db:01:0d:87:ce:f8:20:59:5c:00:85:63:06:ee:f0:
f5:fc:9f:7c:ee:20:13:0a:74:4f:5d:17:f5:15:3a:55:2c:d2:
80:f4:78:ee:26:57:41:ba:e0:00:b5:6d:2b:c3:25:e6:2d:6e:
e0:3b:ec:c5:0f:c3:ad:ca:69:9e:33:03:af:fd:26:d2:cf:f9:
e4:3d:89:3e:22:d8:52:d8:47:3c:6d:2b:88:f6:50:e7:68:b8:
87:c8:a6:07:b6:ca:3d:c0:96:b7:ce:d3:4b:0f:6d:2c:76:7f:
25:6d:d1:5d:62:4f:20:a9:1a:09:16:cf:bd:dc:47:98:a0:1c:
60:fd:4a:9c:94:88:32:fb:44:52:81:01:cc:4b:60:9e:52:95:
54:e1:db:2f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZB0yI33FpRnpr5BNzQllofRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz
Mjc2ZTMwHhcNMjQwNzAyMTg1MDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWQ4MjBiYWI1ZTQ5ODUyNmI1ZTY0ZGZkMmIyYjlkMWM4ZjgzYmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUofAXnmXAOSbTKemOqIqzt8KNiU
1tTgOJaZfT4qrz4J8NVmSP5e14Vhn/SAUku/W9jnKINqj5eCi99V8fSPNeQeChsu
9dnVOSEsaF3xtfKDdlW8JAdR/i+KRvy44hS5YTOUnsGrhgcGX0fGibUGkgpLR3O3
JXmkSJL7P1ngK/LNAsu8FeTHgKY22s1m72anmVJ+6caYazsoUKkyc1WFZBSQcC5c
a1NDEXrhEkDmYyWuJ6SJjbGhW+v4Nisx0sDJC/5e/oqJgOzOk1gtWADrqwszvXRb
LiyR+axBydFS/PqZooUzqgTC3SXQ4sLeJGNCrfj2WceoXXBvhW543aLgWQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFErYILq15JhSa15k39KyudHI+DvUMB8GA1UdIwQY
MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt
YTJhNGM2YTYyMWNkLzEvU3RnZ3VyWGttRkpyWG1UZjBySzUwY2o0TzlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk
LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAAjBGAwUDKga0QAMF
AyoOd4ADBQMqD+AAAwUDKhHxQAMFAyoSDsADBQMqEmdAAwUDKhKOwAMFAyoSzMAD
BQMqEtPAAwUDKhLiQDANBgkqhkiG9w0BAQsFAAOCAQEAWR8Z9bT9lnh/VHQ1a5cb
9zSXmKEFRuoaJKz8BcNzCAbPmM7EMxVw18cTceNpRJMVfS28M2eloP+c4W+LRCQ0
x+N5oW5km3FAc75RXU0uruPBu1yKT7er3Y0s//7fnLq0GgXajWrs/3BH0pYwnwqr
2wENh874IFlcAIVjBu7w9fyffO4gEwp0T10X9RU6VSzSgPR47iZXQbrgALVtK8Ml
5i1u4DvsxQ/DrcppnjMDr/0m0s/55D2JPiLYUthHPG0riPZQ52i4h8imB7bKPcCW
t87TSw9tLHZ/JW3RXWJPIKkaCRbPvdxHmKAcYP1KnJSIMvtEUoEBzEtgnlKVVOHb
Lw==
-----END CERTIFICATE-----
Generated at Mon Jul 29 17:58:36 2024 by rpki-client on console-fra.rpki-client.org