Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/wJfliRXdb1rZimn2ymzbc1F6dWY.roa
File: wJfliRXdb1rZimn2ymzbc1F6dWY.roa (raw, json)
Hash identifier: vZYPRuLKuRrZMuf+UPu+N+Nsh5Wj8okTyokZ8CkCs/8=
Subject key identifier: C0:97:E5:89:15:DD:6F:5A:D9:8A:69:F6:CA:6C:DB:73:51:7A:75:66
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018B3CD24B1A0E6BE14508172D0CCAFB76E0
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/wJfliRXdb1rZimn2ymzbc1F6dWY.roa
Signing time: Tue 17 Oct 2023 08:48:16 +0000
ROA not before: Tue 17 Oct 2023 08:48:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216271
IP address blocks: 2a12:ec0::/29 maxlen: 29
2a12:28c0::/29 maxlen: 29
2a0f:e000::/29 maxlen: 29
2a13:ba00::/29 maxlen: 29
2a12:1900::/29 maxlen: 29
2a11:f240::/29 maxlen: 29
2a12:6b80::/29 maxlen: 29
2a13:dac0::/29 maxlen: 29
2a0e:7780::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 24 Oct 2023 15:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:d2:4b:1a:0e:6b:e1:45:08:17:2d:0c:ca:fb:76:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Oct 17 08:48:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c097e58915dd6f5ad98a69f6ca6cdb73517a7566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ab:db:61:ef:11:7d:06:1e:c1:a3:d1:68:8f:
4a:0d:e8:c1:fc:0f:51:cb:6c:5c:f4:f3:8b:62:31:
f6:18:07:1c:9b:9b:9d:bb:f6:56:d0:9d:48:6a:07:
ac:82:1a:fb:79:85:ab:9b:b4:df:f2:89:67:3d:69:
3e:6f:6c:0b:c1:6a:43:b4:74:ef:27:c5:62:3f:a0:
94:b2:cb:b8:06:e5:49:62:5a:fd:5d:2f:b7:fd:cb:
21:3c:d7:7f:b6:4f:01:2e:d4:de:cd:ee:6b:d7:95:
2e:c9:da:bf:bf:02:84:9f:90:b0:ff:ea:65:25:32:
67:84:82:57:50:50:c8:f5:62:92:26:4a:ee:98:52:
37:93:d4:fe:a7:73:4c:b8:0f:a1:eb:be:10:34:d3:
06:d7:75:4d:c2:9b:69:86:6f:7d:85:15:14:6c:8f:
15:d4:78:93:65:ff:cf:0a:cc:c5:26:a4:8c:3f:a3:
c0:ae:32:8f:6d:9d:0a:ce:4c:f2:ea:7b:2b:8d:d2:
ee:49:f6:fd:83:85:8e:b6:ba:de:df:a0:cc:da:a9:
cc:f0:fd:aa:ab:a2:2e:65:11:d9:f8:a7:17:7d:5b:
86:a9:60:1b:53:d1:0b:64:36:fb:b8:c6:bc:5e:57:
c6:97:43:77:6e:0c:2e:d8:37:6e:af:4a:71:55:83:
67:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:97:E5:89:15:DD:6F:5A:D9:8A:69:F6:CA:6C:DB:73:51:7A:75:66
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/wJfliRXdb1rZimn2ymzbc1F6dWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7780::/29
2a0f:e000::/29
2a11:f240::/29
2a12:ec0::/29
2a12:1900::/29
2a12:28c0::/29
2a12:6b80::/29
2a13:ba00::/29
2a13:dac0::/29
Signature Algorithm: sha256WithRSAEncryption
98:a1:fc:41:b1:9d:fe:ae:1b:16:17:b1:4e:ae:24:bb:66:51:
26:f1:cf:a7:ce:53:e8:7f:36:98:38:17:e9:7b:13:6a:78:2c:
c9:bb:77:de:32:94:e1:8c:d8:b0:29:8e:a9:28:4f:43:36:2c:
1f:aa:f7:7e:84:fe:67:7b:40:46:ce:1d:ae:36:4f:6c:da:a7:
04:5f:61:3e:c9:fd:c1:09:13:90:2b:51:73:d6:81:c3:93:ef:
fa:47:81:b7:92:65:8f:c2:d8:f2:47:a3:6a:92:35:a0:55:6c:
d2:f4:ef:5b:74:b1:44:6e:de:32:33:48:c2:5f:a2:2c:81:07:
81:a1:f2:26:b9:01:71:36:24:30:67:a9:a5:da:87:ac:c4:bb:
85:f8:a2:59:8f:db:a5:50:90:ff:a6:8f:14:94:83:a1:e5:b0:
16:df:06:46:52:80:37:91:ab:c5:ba:43:3e:1f:7b:e3:e1:0c:
18:44:4b:39:a4:a4:06:c2:a2:3c:b7:42:17:66:d1:6f:ae:74:
84:c9:be:38:6e:7d:09:c7:b3:57:26:54:bb:55:c3:cb:7f:f1:
c5:b7:60:25:4e:a2:05:45:af:5f:68:34:67:95:6e:f5:ba:70:
a1:c8:df:a1:59:06:09:fc:cc:9f:ae:8d:8d:ec:c9:a0:3c:19:
10:a7:b1:4a
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAYs80ksaDmvhRQgXLQzK+3bgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz
Mjc2ZTMwHhcNMjMxMDE3MDg0ODE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDk3ZTU4OTE1ZGQ2ZjVhZDk4YTY5ZjZjYTZjZGI3MzUxN2E3NTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKvbYe8RfQYewaPRaI9KDejB/A9R
y2xc9POLYjH2GAccm5udu/ZW0J1Iagesghr7eYWrm7Tf8olnPWk+b2wLwWpDtHTv
J8ViP6CUssu4BuVJYlr9XS+3/cshPNd/tk8BLtTeze5r15Uuydq/vwKEn5Cw/+pl
JTJnhIJXUFDI9WKSJkrumFI3k9T+p3NMuA+h674QNNMG13VNwptphm99hRUUbI8V
1HiTZf/PCszFJqSMP6PArjKPbZ0Kzkzy6nsrjdLuSfb9g4WOtrre36DM2qnM8P2q
q6IuZRHZ+KcXfVuGqWAbU9ELZDb7uMa8XlfGl0N3bgwu2Ddur0pxVYNnPwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFMCX5YkV3W9a2Ypp9sps23NRenVmMB8GA1UdIwQY
MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt
YTJhNGM2YTYyMWNkLzEvd0pmbGlSWGRiMXJaaW1uMnltemJjMUY2ZFdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk
LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzBFBAIAAjA/AwUDKg53gAMF
AyoP4AADBQMqEfJAAwUDKhIOwAMFAyoSGQADBQMqEijAAwUDKhJrgAMFAyoTugAD
BQMqE9rAMA0GCSqGSIb3DQEBCwUAA4IBAQCYofxBsZ3+rhsWF7FOriS7ZlEm8c+n
zlPofzaYOBfpexNqeCzJu3feMpThjNiwKY6pKE9DNiwfqvd+hP5ne0BGzh2uNk9s
2qcEX2E+yf3BCROQK1Fz1oHDk+/6R4G3kmWPwtjyR6NqkjWgVWzS9O9bdLFEbt4y
M0jCX6IsgQeBofImuQFxNiQwZ6ml2oesxLuF+KJZj9ulUJD/po8UlIOh5bAW3wZG
UoA3kavFukM+H3vj4QwYREs5pKQGwqI8t0IXZtFvrnSEyb44bn0Jx7NXJlS7VcPL
f/HFt2AlTqIFRa9faDRnlW71unChyN+hWQYJ/Myfro2N7MmgPBkQp7FK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:38 2024 by rpki-client on console-fra.rpki-client.org