Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/jgK0roJChRh5yVMZqY_ixaedoZQ.roa
File: jgK0roJChRh5yVMZqY_ixaedoZQ.roa (raw, json)
Hash identifier: vptXGCg4rWd/m3F3Grt/OS0QDacPWfqFKlmbsTW/D3E=
Subject key identifier: 8E:02:B4:AE:82:42:85:18:79:C9:53:19:A9:8F:E2:C5:A7:9D:A1:94
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018E3D7B2248702DA74C35AADE4D262CBA25
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/jgK0roJChRh5yVMZqY_ixaedoZQ.roa
Signing time: Thu 14 Mar 2024 15:01:03 +0000
ROA not before: Thu 14 Mar 2024 15:01:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216271
IP address blocks: 185.168.28.0/22 maxlen: 22
185.201.136.0/22 maxlen: 22
2a06:b3c0::/29 maxlen: 29
2a06:b440::/29 maxlen: 29
2a06:cac0::/29 maxlen: 29
2a0f:d480::/29 maxlen: 29
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:7240::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a12:440::/29 maxlen: 29
2a12:28c0::/29 maxlen: 29
2a12:6640::/29 maxlen: 29
2a12:6740::/29 maxlen: 29
2a12:6b80::/29 maxlen: 29
2a12:6f40::/29 maxlen: 29
2a12:7740::/29 maxlen: 29
2a12:8ec0::/29 maxlen: 29
2a12:ccc0::/29 maxlen: 29
2a12:d3c0::/29 maxlen: 29
2a12:e240::/29 maxlen: 29
2a12:f0c0::/29 maxlen: 29
2a14:c0::/29 maxlen: 29
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
2a14:800::/29 maxlen: 29
2a14:f40::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 13 Apr 2024 18:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:7b:22:48:70:2d:a7:4c:35:aa:de:4d:26:2c:ba:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Mar 14 15:01:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e02b4ae8242851879c95319a98fe2c5a79da194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:a9:16:47:fb:26:0d:7c:e8:5d:a1:49:fe:
5a:0e:f6:12:ad:43:60:f2:82:4c:b7:6a:97:a4:84:
9c:6f:f7:5f:2e:b3:6c:98:aa:22:fb:e3:41:b2:da:
65:5a:ec:44:6a:82:cc:ee:28:09:b0:14:ef:57:0d:
37:c2:70:40:54:64:ec:28:11:86:0b:46:d4:67:a5:
d4:ee:cb:b9:d6:49:c5:8a:04:d8:4c:ce:e9:57:17:
be:38:bb:5b:d5:c5:3a:42:a7:63:02:eb:9e:e2:04:
12:d6:ae:ef:16:99:bd:52:83:ba:a4:7d:b9:b6:e6:
20:ab:81:da:40:e6:49:2b:a8:48:81:b3:b9:a7:d0:
b5:7c:a8:89:0d:82:0d:6e:67:78:83:f6:80:fd:9c:
93:19:20:67:fa:9e:5d:f3:73:0c:ba:59:76:0f:8f:
6e:7d:e0:d3:09:0c:2c:5a:41:eb:4d:88:b8:ab:f1:
8f:15:36:d9:33:5e:2d:9f:53:db:02:2b:4a:0e:89:
ba:3c:d0:bc:bf:75:de:38:53:90:36:dd:af:4c:a1:
2e:71:4b:19:dc:54:ce:66:c0:ae:ab:84:0e:38:83:
63:15:0a:87:72:eb:63:44:51:b8:aa:7d:51:8d:c5:
de:58:38:30:20:95:a9:0e:2c:19:ef:73:2e:ae:ee:
e8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:02:B4:AE:82:42:85:18:79:C9:53:19:A9:8F:E2:C5:A7:9D:A1:94
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/jgK0roJChRh5yVMZqY_ixaedoZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.28.0/22
185.201.136.0/22
IPv6:
2a06:b3c0::/29
2a06:b440::/29
2a06:cac0::/29
2a0f:d480::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:7240::/29
2a11:9600::/29
2a12:440::/29
2a12:28c0::/29
2a12:6640::/29
2a12:6740::/29
2a12:6b80::/29
2a12:6f40::/29
2a12:7740::/29
2a12:8ec0::/29
2a12:ccc0::/29
2a12:d3c0::/29
2a12:e240::/29
2a12:f0c0::/29
2a14:c0::/29
2a14:140::/29
2a14:1c0::/29
2a14:800::/29
2a14:f40::/29
Signature Algorithm: sha256WithRSAEncryption
11:80:c6:71:8d:a4:b0:55:7d:8d:f9:ec:06:af:c7:88:56:c1:
d9:8d:80:97:50:da:e1:ce:72:53:78:58:61:76:5a:12:ec:34:
c0:5d:70:36:15:5e:7e:fa:72:b3:a9:0a:79:19:87:85:84:76:
e3:cb:15:ce:57:2e:1a:1a:f4:67:8d:0f:59:fb:4a:14:e3:90:
f9:57:11:b2:3e:22:e1:c3:ad:15:31:15:2d:e6:f5:35:4f:be:
a1:51:7d:ec:e8:b8:86:12:0b:c9:fa:76:1b:b5:4e:7c:30:03:
2a:80:39:e3:98:35:e2:3e:e8:99:94:3a:d4:95:f9:03:e8:e7:
f6:1c:00:5a:2f:44:d5:bc:71:4d:92:c6:bd:d5:c2:32:94:55:
37:94:cc:6b:76:fd:38:29:2f:21:5e:7c:51:f1:47:a8:31:5c:
46:2a:6e:86:be:61:19:fd:80:59:3b:11:88:e1:7a:cd:93:51:
f6:b4:fb:68:4a:e6:a8:be:36:a3:38:62:fc:68:c9:bf:1e:10:
58:81:40:eb:e3:8f:2d:d5:ea:72:56:6a:34:68:e6:52:aa:3f:
25:4d:5b:2b:72:8d:f0:b6:f5:8c:30:8d:62:cb:4d:de:56:0a:
f1:cd:14:b5:bf:4f:91:ea:7d:33:5c:61:ea:3f:73:13:7e:12:
63:ef:2f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:02 2024 by rpki-client on console-ams.rpki-client.org