Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/w1Ey0ubgu3kxSJP71Mo0QZxkvc8.roa
File: w1Ey0ubgu3kxSJP71Mo0QZxkvc8.roa (raw, json)
Hash identifier: cgEoUawy9drokMT5xkC7A4CP5z+a/vsNiCSEvkAmkb4=
Subject key identifier: C3:51:32:D2:E6:E0:BB:79:31:48:93:FB:D4:CA:34:41:9C:64:BD:CF
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018DC19D358A261E97A00558314754D294C1
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/w1Ey0ubgu3kxSJP71Mo0QZxkvc8.roa
Signing time: Mon 19 Feb 2024 13:45:22 +0000
ROA not before: Mon 19 Feb 2024 13:45:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 2a06:b3c0::/29 maxlen: 29
2a06:b440::/29 maxlen: 29
2a06:cac0::/29 maxlen: 29
2a0a:e2c0::/29 maxlen: 32
2a0e:7780::/29 maxlen: 32
2a0f:e000::/29 maxlen: 32
2a11:3b40::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a11:dcc0::/29 maxlen: 29
2a12:6b80::/29 maxlen: 32
2a13:ba00::/29 maxlen: 32
2a13:dac0::/29 maxlen: 32
2a14:7e00::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 20 Feb 2024 09:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:9d:35:8a:26:1e:97:a0:05:58:31:47:54:d2:94:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Feb 19 13:45:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c35132d2e6e0bb79314893fbd4ca34419c64bdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5d:db:93:d3:52:94:2f:29:7f:16:cd:b3:ba:
ff:36:dd:c4:6b:88:99:7f:b8:47:37:81:01:3f:03:
04:d4:d9:fa:06:73:28:2b:87:bc:5a:67:66:b0:c6:
3c:5a:d1:08:14:f6:8c:5d:49:ed:d2:d6:51:cd:3b:
89:46:90:27:45:4e:55:db:27:3a:ca:a8:c7:ce:34:
b5:7d:c1:61:a9:d9:1b:bb:b2:f0:14:5f:60:d3:06:
2b:40:22:39:cf:ee:4a:56:81:53:0d:74:75:5f:3e:
4b:17:e4:9d:4f:54:41:6f:2b:c6:c8:48:aa:85:78:
fa:33:13:d7:59:42:9b:84:58:a3:04:f8:0a:24:d3:
99:2c:ee:aa:aa:20:4d:b6:d7:04:17:58:c0:42:00:
e9:09:a8:6b:89:ef:29:52:2c:5b:24:9e:86:e6:82:
df:31:de:6a:53:53:99:3e:2c:2a:8c:c5:7b:ee:b1:
bc:02:26:96:09:68:e8:70:29:63:89:86:a4:32:e8:
19:b9:fe:9a:0c:0f:22:2d:fe:60:48:82:0e:cd:68:
32:b3:bc:26:2d:53:d6:0f:46:70:d0:2c:b4:eb:e1:
14:cd:48:21:3a:6b:b1:d3:c9:11:b1:69:c0:f6:5d:
d2:a0:f7:09:bc:4c:dd:00:a8:bf:bd:4b:76:5d:ce:
c1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:51:32:D2:E6:E0:BB:79:31:48:93:FB:D4:CA:34:41:9C:64:BD:CF
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/w1Ey0ubgu3kxSJP71Mo0QZxkvc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b3c0::/29
2a06:b440::/29
2a06:cac0::/29
2a0a:e2c0::/29
2a0e:7780::/29
2a0f:e000::/29
2a11:3b40::/29
2a11:9600::/29
2a11:dcc0::/29
2a12:6b80::/29
2a13:ba00::/29
2a13:dac0::/29
2a14:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
43:86:0f:56:c8:5f:9e:62:5f:b7:3a:1f:0d:c6:cc:97:b3:fa:
17:61:ba:e5:ad:e2:2c:b0:9f:11:aa:c1:6c:67:6b:81:2e:e2:
b6:45:fd:a4:36:ec:c3:1c:67:a0:89:0c:69:7e:e0:7b:cb:94:
ad:11:15:2a:13:4c:27:6e:28:f4:95:7d:17:61:39:74:8a:e5:
51:ad:65:1e:11:a7:43:8c:ac:b8:ea:4f:52:c7:cc:eb:41:41:
53:cb:d0:bb:b7:7c:47:67:ca:ca:91:35:42:02:72:13:a1:ce:
a5:fe:fb:2f:1d:a2:b4:f1:e5:2a:02:d7:33:61:e4:45:53:ef:
32:be:13:96:5d:46:69:1b:ad:80:d5:50:89:5b:0b:ce:ae:5c:
7f:37:d0:2a:2a:46:85:61:1e:f9:10:1f:3b:55:62:49:ca:8b:
a5:c2:41:c5:0f:2d:fc:50:82:7d:cd:58:34:a4:50:c0:94:18:
43:5b:ce:49:87:e8:03:58:c9:83:0a:ab:b1:66:61:8c:6c:12:
13:ea:21:8b:1d:c9:90:43:e7:64:01:44:e9:e2:b9:63:df:95:
72:52:35:a5:f5:6a:17:1d:15:23:08:73:4d:53:cd:24:76:82:
38:45:d1:5d:c6:20:2e:17:ce:50:24:55:e7:b7:78:4c:18:35:
df:7e:f8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:38 2024 by rpki-client on console-fra.rpki-client.org