Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Jx3yB9v3MG_-CiuEpjo-X1Cvo7Y.roa
File: Jx3yB9v3MG_-CiuEpjo-X1Cvo7Y.roa (raw, json)
Hash identifier: ii2Ec14BbqpbNZNI9eP09r8g97paoHETvblaNc3vOGY=
Subject key identifier: 27:1D:F2:07:DB:F7:30:6F:FE:0A:2B:84:A6:3A:3E:5F:50:AF:A3:B6
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 0192CEBA6D5A4CFD46D15FDC1840E622A0E8
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Jx3yB9v3MG_-CiuEpjo-X1Cvo7Y.roa
Signing time: Sun 27 Oct 2024 16:06:17 +0000
ROA not before: Sun 27 Oct 2024 16:06:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212271
IP address blocks: 2a05:4140::/29 maxlen: 48
2a05:4140:3::/48 maxlen: 48
2a05:4140:4::/48 maxlen: 48
2a05:4140:8::/48 maxlen: 48
2a05:4140:9::/48 maxlen: 48
2a05:4140:10::/48 maxlen: 48
2a05:4140:15::/48 maxlen: 48
2a05:4140:28::/48 maxlen: 48
2a05:4140:29::/48 maxlen: 48
2a05:4140:30::/48 maxlen: 48
2a05:4140:31::/48 maxlen: 48
2a05:4140:32::/48 maxlen: 48
2a05:4140:33::/48 maxlen: 48
2a05:4140:34::/48 maxlen: 48
2a05:4140:35::/48 maxlen: 64
2a05:4140:36::/48 maxlen: 48
2a05:4140:37::/48 maxlen: 48
2a05:4140:48::/48 maxlen: 48
2a05:4140:100::/40 maxlen: 48
2a05:4140:187::/48 maxlen: 48
2a05:4140:190::/48 maxlen: 48
2a05:4140:300::/40 maxlen: 40
2a05:4140:400::/40 maxlen: 48
2a05:4145::/32 maxlen: 32
2a05:4147::/32 maxlen: 32
2a11:e100::/29 maxlen: 48
2a11:e103::/32 maxlen: 32
2a11:e107::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ce:ba:6d:5a:4c:fd:46:d1:5f:dc:18:40:e6:22:a0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Oct 27 16:06:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=271df207dbf7306ffe0a2b84a63a3e5f50afa3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:c1:39:fd:d7:39:ed:4d:aa:35:3a:d2:a3:
f4:de:98:9b:ef:ca:d9:50:28:26:7c:90:ed:42:8e:
7d:06:3d:30:41:5a:0b:44:4d:2a:a6:dd:d7:fc:6a:
63:7f:e7:24:15:cc:f2:e0:a6:61:0b:ab:c4:72:6b:
2d:71:f6:59:93:d3:fd:a7:7c:a5:4a:15:18:b6:03:
bf:05:81:86:3e:c1:2f:06:a8:ca:d0:94:31:93:9c:
5f:94:40:19:ea:70:52:98:31:df:73:c6:2f:0b:6c:
c4:5c:07:70:ce:2e:67:b8:a4:19:e9:9a:c5:ca:34:
72:57:00:c9:bd:32:de:d6:c5:13:7b:cc:9f:e4:78:
b8:f2:46:a1:0a:61:78:8a:b2:68:c9:ad:cc:fa:e3:
e2:5b:17:ee:5f:76:5b:c7:a1:6a:dc:f5:13:0d:bf:
3a:88:68:3c:52:3d:b8:ad:0b:6f:34:1e:b7:3d:b3:
ad:92:58:a1:d0:f7:3c:ec:dc:5e:31:1b:20:c5:1f:
4c:f6:34:4f:b6:3e:9a:81:71:e1:e3:03:6d:fc:75:
ae:08:15:f7:d9:06:7a:db:e5:56:dd:f0:cf:81:35:
c7:79:07:5f:b6:48:42:6f:90:0d:08:8f:83:12:8a:
31:52:46:f0:67:ff:af:6d:9c:14:07:aa:73:4e:50:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1D:F2:07:DB:F7:30:6F:FE:0A:2B:84:A6:3A:3E:5F:50:AF:A3:B6
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Jx3yB9v3MG_-CiuEpjo-X1Cvo7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140::/29
2a11:e100::/29
Signature Algorithm: sha256WithRSAEncryption
85:eb:a3:59:b9:83:76:a0:05:3e:34:50:9a:77:26:3a:f0:2f:
33:c8:d7:af:7f:62:30:19:51:5d:4d:b5:39:5c:11:44:52:a5:
34:11:00:25:e3:a6:fe:15:8c:cb:fa:20:a2:9e:d2:b3:39:c5:
10:a0:9f:ca:78:2c:96:c0:c2:c5:ed:ed:f9:7c:b6:91:c3:db:
90:d3:cd:1a:2a:5a:69:b6:f2:a0:b6:0a:03:21:21:53:aa:c0:
96:45:95:c9:a1:3c:bd:6d:30:3a:5d:26:e0:35:a5:d9:6d:97:
77:3d:33:20:46:41:e8:ff:15:0a:ac:33:a6:1f:a5:7b:8e:bf:
ba:0d:13:28:1d:d2:5f:7f:cf:93:be:a5:86:b3:4a:c3:5c:c7:
9a:29:76:40:2a:26:d5:47:11:e1:8b:01:a8:54:3a:6a:53:92:
3c:d0:a3:db:2f:ef:bc:bf:59:21:ac:91:69:5d:b8:c6:6e:fe:
8f:ed:f4:83:e6:b0:18:99:d7:b3:4c:0c:be:8d:1c:3c:5b:ca:
e6:bb:e8:05:55:f2:de:9d:ff:94:d9:42:ac:c5:11:bd:13:2e:
93:0d:e4:c2:15:76:b9:12:ab:4d:d9:22:4e:93:b9:e0:50:11:
21:86:68:e4:22:3d:8a:88:2a:ed:5a:26:0f:66:db:68:5b:64:
d9:d0:b9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:16 2025 by rpki-client