Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/kQvfeNXditpP9G_HtB108346uPY.roa
File: kQvfeNXditpP9G_HtB108346uPY.roa (raw, json)
Hash identifier: 7hsEM2jPvImiRSaTYeJBUOxA6mWgd05Ep0EGJZUb9lY=
Subject key identifier: 91:0B:DF:78:D5:DD:8A:DA:4F:F4:6F:C7:B4:1D:74:F3:7E:3A:B8:F6
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018FDFF330A5C0CA7F68DCC2A90A76316EDF
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/kQvfeNXditpP9G_HtB108346uPY.roa
Signing time: Mon 03 Jun 2024 21:13:27 +0000
ROA not before: Mon 03 Jun 2024 21:13:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216271
IP address blocks: 185.168.28.0/22 maxlen: 22
185.201.136.0/22 maxlen: 22
2a06:cac0::/29 maxlen: 29
2a0a:e2c0::/29 maxlen: 29
2a0e:7780::/29 maxlen: 29
2a0f:d480::/29 maxlen: 29
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:7240::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a11:f140::/29 maxlen: 29
2a11:f240::/29 maxlen: 29
2a12:440::/29 maxlen: 29
2a12:ec0::/29 maxlen: 29
2a12:1900::/29 maxlen: 29
2a12:6640::/29 maxlen: 29
2a12:6740::/29 maxlen: 29
2a12:6f40::/29 maxlen: 29
2a12:7740::/29 maxlen: 29
2a12:8ec0::/29 maxlen: 29
2a12:ccc0::/29 maxlen: 29
2a12:e240::/29 maxlen: 29
2a12:f0c0::/29 maxlen: 29
2a13:ba00::/29 maxlen: 29
2a13:dac0::/29 maxlen: 29
2a14:c0::/29 maxlen: 29
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
2a14:800::/29 maxlen: 29
2a14:f40::/29 maxlen: 29
2a14:7e00::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 06 Jun 2024 13:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:df:f3:30:a5:c0:ca:7f:68:dc:c2:a9:0a:76:31:6e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jun 3 21:13:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=910bdf78d5dd8ada4ff46fc7b41d74f37e3ab8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:f1:06:44:e8:40:10:47:88:07:9a:d7:50:
4d:d7:d1:1d:e8:d2:c1:2b:67:ce:72:2d:5f:f5:1d:
d0:fe:83:f1:14:61:65:43:9d:fc:33:e0:25:e1:cb:
9e:41:14:29:96:6f:04:cc:40:09:20:12:05:77:14:
5a:47:98:ad:77:d1:84:49:1a:62:71:5e:f9:a3:4c:
da:37:f8:a7:c4:67:6e:5e:a3:40:74:98:e0:52:e2:
7a:a7:00:52:e3:16:d0:74:25:9e:40:ca:b5:d4:62:
f8:fd:8c:1f:05:7c:32:5c:39:65:1f:ee:f1:da:71:
8f:16:27:1c:7e:76:2f:68:54:73:17:99:f7:8e:46:
17:f9:39:5f:a6:c6:55:29:fc:cf:25:f2:11:27:9f:
ca:a7:ea:f4:b2:b2:eb:17:1a:7c:42:1f:d5:46:e4:
f0:6d:92:4a:a9:37:d9:7f:ae:9b:2b:81:67:18:ce:
eb:a5:31:ba:73:ac:cd:ad:fd:b5:cd:e0:71:f1:5c:
eb:f0:8f:36:61:85:dc:16:3d:43:bf:e6:df:96:92:
5e:5d:18:dc:7f:cf:cb:3b:0f:08:3a:5e:c0:d7:f0:
ab:b3:6c:51:03:d9:ed:b7:0c:38:fd:f9:ba:ea:f7:
da:77:da:23:34:91:5d:ad:3a:ab:8d:a8:61:92:d0:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0B:DF:78:D5:DD:8A:DA:4F:F4:6F:C7:B4:1D:74:F3:7E:3A:B8:F6
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/kQvfeNXditpP9G_HtB108346uPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.28.0/22
185.201.136.0/22
IPv6:
2a06:cac0::/29
2a0a:e2c0::/29
2a0e:7780::/29
2a0f:d480::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:7240::/29
2a11:9600::/29
2a11:f140::/29
2a11:f240::/29
2a12:440::/29
2a12:ec0::/29
2a12:1900::/29
2a12:6640::/29
2a12:6740::/29
2a12:6f40::/29
2a12:7740::/29
2a12:8ec0::/29
2a12:ccc0::/29
2a12:e240::/29
2a12:f0c0::/29
2a13:ba00::/29
2a13:dac0::/29
2a14:c0::/29
2a14:140::/29
2a14:1c0::/29
2a14:800::/29
2a14:f40::/29
2a14:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
c9:13:f6:59:5e:8d:fd:b1:ae:c5:e0:60:a5:19:4f:97:1a:ff:
a0:6f:4e:e9:34:65:8a:c9:73:fa:bd:5f:b5:aa:36:1a:5e:c4:
57:d8:9d:0e:bb:2f:37:f2:81:b0:0a:ce:b3:5a:16:fb:c7:3e:
b9:82:0c:c5:d8:81:1a:d5:a3:01:82:30:6b:d5:d1:86:db:19:
c0:44:b4:ae:ea:1a:4e:b9:f7:ee:1d:a0:b9:14:34:1b:dc:02:
24:fb:ef:f9:7c:9d:d6:a0:d1:b1:d4:95:42:60:da:e1:96:67:
77:72:a8:20:f0:e8:c2:e7:cd:14:83:3a:bd:51:39:45:e0:37:
94:aa:8f:95:61:05:82:a9:21:bc:40:a8:0c:5d:d2:b6:7c:40:
1e:f2:de:68:fe:26:e3:51:e6:24:30:0b:7d:c0:c5:f2:ca:a8:
41:f7:15:5f:9d:aa:43:35:67:c8:88:93:2a:73:14:1f:28:7a:
79:65:52:14:62:09:3b:20:6a:ad:a5:f0:93:59:52:1f:eb:4c:
a3:e5:54:ac:3c:83:cc:ea:05:70:a3:77:cf:0c:aa:d3:3b:4e:
ad:0d:3c:b2:d7:a7:b9:10:9a:ea:42:88:1e:92:b4:2b:51:83:
02:a9:ac:84:9c:27:d7:06:66:c6:80:1e:e4:94:8a:9d:9d:77:
d3:35:f4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:02 2024 by rpki-client on console-ams.rpki-client.org