Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/WXR2erI0Z8xVPs2Vh5Y2jlhmhkM.roa
File: WXR2erI0Z8xVPs2Vh5Y2jlhmhkM.roa (raw, json)
Hash identifier: GxVjc1Ee2rXlXxDPc2rDaSb3HhldHd59NeVs0coDSuo=
Subject key identifier: 59:74:76:7A:B2:34:67:CC:55:3E:CD:95:87:96:36:8E:58:66:86:43
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018B70A5308677DB7B6FE8634E8EB0A9425E
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/WXR2erI0Z8xVPs2Vh5Y2jlhmhkM.roa
Signing time: Fri 27 Oct 2023 10:19:15 +0000
ROA not before: Fri 27 Oct 2023 10:19:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216271
IP address blocks: 185.201.136.0/22 maxlen: 22
2a12:ec0::/29 maxlen: 29
2a12:28c0::/29 maxlen: 29
2a0f:e000::/29 maxlen: 29
2a13:ba00::/29 maxlen: 29
2a12:1900::/29 maxlen: 29
2a11:f240::/29 maxlen: 29
2a12:6b80::/29 maxlen: 29
2a13:dac0::/29 maxlen: 29
2a0e:7780::/29 maxlen: 29
2a0a:e2c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 31 Oct 2023 09:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:a5:30:86:77:db:7b:6f:e8:63:4e:8e:b0:a9:42:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Oct 27 10:19:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5974767ab23467cc553ecd958796368e58668643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f2:11:c5:e6:31:fc:a5:17:47:89:0d:4d:80:
6a:3e:ff:2c:ef:00:e4:f1:23:aa:e3:72:7a:5d:4d:
02:75:f0:f0:23:84:a9:7b:21:40:25:68:e6:80:36:
e1:fb:25:a3:a5:08:c6:84:3d:ad:c2:c5:47:ba:d4:
12:eb:b0:e0:be:d2:c7:90:99:79:08:92:e0:48:f7:
74:83:f2:8a:77:ff:80:6e:74:25:47:a1:7e:24:5f:
5d:6c:bf:c0:e0:32:2b:8d:78:e2:6e:b6:99:a5:72:
bf:57:b2:8c:02:82:3b:4a:12:7d:d3:87:4e:d1:78:
99:ce:db:d5:db:a4:9a:e5:ef:44:87:39:11:7a:2e:
eb:ce:a1:ce:59:5a:56:8b:cd:e5:3a:5c:65:8f:f9:
11:4f:c3:21:95:8d:e3:94:50:13:5a:fa:69:93:b0:
bf:05:ba:5d:06:7a:57:84:68:19:fc:5a:90:e3:55:
ce:ce:9c:05:10:b8:2c:41:d8:d5:40:61:7a:1f:7d:
2a:4b:85:ea:42:f9:cd:e9:7e:ff:77:28:5a:ba:1d:
39:f4:62:a1:32:c0:1c:fd:a4:b6:7b:80:75:a6:3d:
31:41:08:32:14:c2:a5:e1:31:d5:b1:e6:0c:68:e7:
35:dd:15:c2:98:11:0a:58:de:de:12:55:a7:e9:f6:
82:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:74:76:7A:B2:34:67:CC:55:3E:CD:95:87:96:36:8E:58:66:86:43
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/WXR2erI0Z8xVPs2Vh5Y2jlhmhkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.136.0/22
IPv6:
2a0a:e2c0::/29
2a0e:7780::/29
2a0f:e000::/29
2a11:f240::/29
2a12:ec0::/29
2a12:1900::/29
2a12:28c0::/29
2a12:6b80::/29
2a13:ba00::/29
2a13:dac0::/29
Signature Algorithm: sha256WithRSAEncryption
08:89:35:92:b3:da:b8:c9:ab:a5:40:9e:0d:be:73:c7:c3:13:
a6:62:0f:6e:0a:1d:50:e7:1e:60:93:86:3a:ec:17:90:6e:8e:
1d:6a:50:64:47:67:7e:0d:52:19:22:a2:f8:7a:97:11:ae:11:
c3:7c:9e:15:dc:dd:95:8f:7e:03:95:d7:e5:c3:68:f8:40:91:
4d:10:29:87:bd:2a:6c:60:2c:24:80:92:66:e9:a5:1a:19:d5:
eb:f7:55:48:8b:30:c2:0f:09:30:5c:11:d1:4d:9e:3b:c1:cf:
bf:3d:03:c7:ad:03:17:a0:ac:22:29:cc:ff:a9:1c:15:5e:6a:
bd:67:14:9d:b3:42:9f:00:6c:b3:57:0a:25:9b:e2:1b:8f:bc:
23:eb:09:d7:b4:e8:a3:f4:b7:fc:39:53:66:35:e3:2c:5e:6e:
f6:d8:73:d1:33:91:1d:48:76:08:20:b9:44:1d:36:40:ba:80:
7a:43:04:64:c6:b8:aa:d3:3f:1f:cd:63:25:c3:19:d9:f0:2b:
0e:80:c0:be:b9:fe:6e:84:df:c5:49:00:ee:49:f1:66:e5:9f:
15:01:12:c1:d4:2b:2f:c6:97:23:01:b0:61:19:6d:23:05:ff:
81:dd:fa:5b:87:8b:b8:0b:51:bb:b4:35:48:4b:13:2a:e3:cc:
bd:d2:f5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:38 2024 by rpki-client on console-fra.rpki-client.org