Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/i6Ep028LW78CTPw7uWnMiey8tKc.roa
File: i6Ep028LW78CTPw7uWnMiey8tKc.roa (raw, json)
Hash identifier: uNrJ7m/J8dNvOD0DKCvwXG77UiNGPTzztVs0PdqqAWc=
Subject key identifier: 8B:A1:29:D3:6F:0B:5B:BF:02:4C:FC:3B:B9:69:CC:89:EC:BC:B4:A7
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018B918778975F9322D2B705B7F6BFD7502A
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/i6Ep028LW78CTPw7uWnMiey8tKc.roa
Signing time: Thu 02 Nov 2023 19:34:16 +0000
ROA not before: Thu 02 Nov 2023 19:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202685
IP address blocks: 2a05:b0c6:be00::/39 maxlen: 39
2a05:b0c6:a200::/39 maxlen: 39
2a05:b0c6:a000::/39 maxlen: 39
2a05:b0c6:a00::/39 maxlen: 39
2a05:b0c6:4000::/36 maxlen: 36
2a05:b0c6:3000::/36 maxlen: 36
2a05:b0c6:5800::/37 maxlen: 37
2a05:b0c6:1800::/37 maxlen: 37
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:91:87:78:97:5f:93:22:d2:b7:05:b7:f6:bf:d7:50:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Nov 2 19:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ba129d36f0b5bbf024cfc3bb969cc89ecbcb4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:62:54:db:93:18:4b:01:d0:4e:45:3d:e8:8a:
71:c8:70:18:e3:d1:54:79:88:a6:3b:ab:6c:3d:80:
a0:ee:6b:9c:26:50:40:74:bf:67:a1:d5:0b:a0:77:
83:60:f5:c7:11:cf:c9:2e:4a:aa:72:2a:96:21:e4:
0a:d2:1f:a9:e7:63:eb:a4:df:ff:93:5a:47:45:7b:
a9:e8:a8:bd:5f:dd:cb:9c:d0:02:21:8c:1d:57:a6:
c3:b7:57:3f:8c:b6:dc:ff:f4:09:93:a6:79:df:c6:
24:41:1a:31:12:bc:fa:16:54:6e:55:da:0e:44:a3:
30:c4:9b:f0:cd:8d:78:b8:40:2f:3e:4a:57:e4:fc:
50:af:52:dd:87:3a:0f:56:21:e9:bd:e3:8d:d9:a2:
a6:cd:0a:5d:7b:b5:ba:3f:14:b0:a8:4e:6e:ab:7a:
ce:bc:18:9d:d1:78:65:01:ec:1a:97:6f:72:e8:2b:
87:8b:ea:48:9a:01:7e:a6:a6:ef:ab:17:fb:85:21:
e1:55:09:0f:b2:14:34:88:37:bc:df:6f:1b:74:e1:
15:04:23:2f:c5:a3:b7:45:78:94:f8:f0:f4:5b:55:
c3:2c:e4:fa:9e:0b:0b:74:3d:81:4e:f8:bf:f1:c8:
2d:5f:cf:0f:4f:3f:5d:76:2b:98:ed:90:f6:8f:6f:
95:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A1:29:D3:6F:0B:5B:BF:02:4C:FC:3B:B9:69:CC:89:EC:BC:B4:A7
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/i6Ep028LW78CTPw7uWnMiey8tKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:a00::/39
2a05:b0c6:1800::/37
2a05:b0c6:3000::-2a05:b0c6:4fff:ffff:ffff:ffff:ffff:ffff
2a05:b0c6:5800::/37
2a05:b0c6:a000::/38
2a05:b0c6:be00::/39
Signature Algorithm: sha256WithRSAEncryption
13:04:72:74:f8:3b:47:3c:8c:10:e7:a6:fc:ed:3c:8f:10:e4:
17:b1:5b:87:cf:e3:27:9c:79:a3:e9:a6:ae:49:85:a8:85:9d:
43:a8:58:d1:6c:5f:0d:d7:af:cb:59:6a:05:bf:66:53:c7:61:
20:d8:8e:c6:e0:01:06:28:37:5c:d6:2b:07:c9:3e:d1:01:53:
10:fd:48:7f:cf:17:6e:2f:f2:e8:03:0b:93:5a:3d:ee:c4:3d:
79:a0:1f:7a:5f:0a:2a:f0:21:0b:21:38:94:fe:2c:64:36:c5:
2d:28:34:0e:8b:d1:4b:fb:11:0b:5c:91:02:bf:97:24:fe:38:
86:66:c4:08:c9:72:23:c7:dc:2e:4c:a2:a9:74:b4:7d:92:ef:
96:a0:7c:55:4e:ad:07:41:af:7b:96:fe:9d:fd:77:b5:d4:17:
38:97:30:e7:d6:fc:d7:e4:b9:31:00:2e:6b:c3:d1:03:62:6f:
6d:77:46:cc:f3:af:73:c0:3c:5e:35:55:9e:7a:2a:0b:e3:8a:
d5:f0:8d:61:7a:48:dc:b4:5a:56:d8:4d:82:7c:1a:15:f3:53:
72:1e:b0:64:12:e4:c4:4d:72:95:4f:82:a3:45:50:37:f9:55:
79:85:ad:f8:1e:4e:98:49:68:91:be:a4:7a:14:eb:5a:19:c6:
68:e1:10:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:21 2024 by rpki-client on console-fra.rpki-client.org