Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CPLDGBFNEs92AcDMQKiMaHvfp9M.roa
File: CPLDGBFNEs92AcDMQKiMaHvfp9M.roa (raw, json)
Hash identifier: QKkd4y98d4aockAXg84TLoblSPKI3xAJZucUJfNo8EU=
Subject key identifier: 08:F2:C3:18:11:4D:12:CF:76:01:C0:CC:40:A8:8C:68:7B:DF:A7:D3
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018F8C664999E344F1625F9454A1EEF44222
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CPLDGBFNEs92AcDMQKiMaHvfp9M.roa
Signing time: Sat 18 May 2024 15:51:04 +0000
ROA not before: Sat 18 May 2024 15:51:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215158
IP address blocks: 2a11:1c80::/29 maxlen: 29
2a11:64c0::/29 maxlen: 29
2a11:a040::/29 maxlen: 29
2a11:cec0::/29 maxlen: 29
2a11:e8c0::/29 maxlen: 29
2a11:ea80::/29 maxlen: 29
2a11:ff40::/29 maxlen: 29
2a12:1040::/29 maxlen: 29
2a12:12c0::/29 maxlen: 29
2a12:2e80::/29 maxlen: 29
2a12:3c00::/29 maxlen: 29
2a12:8580::/29 maxlen: 29
2a12:8a00::/29 maxlen: 29
2a12:9300::/29 maxlen: 29
2a12:d080::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 19 May 2024 16:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8c:66:49:99:e3:44:f1:62:5f:94:54:a1:ee:f4:42:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 18 15:51:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08f2c318114d12cf7601c0cc40a88c687bdfa7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3b:11:92:cb:5a:51:1e:4f:33:a8:bd:fb:8c:
02:8d:1f:fe:5a:aa:8e:60:a9:f4:99:f9:68:b8:08:
de:29:0f:d7:03:2d:92:66:a7:95:b4:54:56:ec:31:
cc:91:c7:bf:fc:e6:01:6a:77:12:71:fc:a6:f5:50:
df:b2:c0:4d:34:2a:dc:dc:ad:fe:04:4b:57:51:90:
5b:e3:f0:4b:78:e1:ae:c6:be:05:5d:0d:32:e5:b0:
c0:44:42:52:31:a9:f5:0b:43:da:a0:7b:51:d1:8d:
a0:34:6a:96:04:d6:83:3f:a2:ae:85:c0:3c:1d:04:
53:19:2d:cf:ea:32:39:80:89:c4:15:a1:04:d1:ac:
4f:37:f2:9b:b0:a4:82:0a:d2:4a:b3:76:18:7b:dd:
53:6b:c3:af:9a:4c:8f:d9:f2:e9:ad:58:cf:9c:40:
78:57:36:95:ab:30:a1:12:e3:8c:55:c3:2b:6d:f6:
80:51:45:8c:aa:a9:0d:b0:1a:a7:d3:a7:5f:79:9b:
74:42:9e:65:57:04:9b:0c:73:19:cf:3e:60:51:65:
1a:f6:0c:a0:4a:b4:24:db:f8:21:02:34:54:86:0f:
ed:ab:a9:f1:6a:21:c6:c8:66:63:83:54:1b:8e:fc:
b0:2e:91:5f:fb:09:25:21:c3:6b:4f:89:88:79:e1:
1e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F2:C3:18:11:4D:12:CF:76:01:C0:CC:40:A8:8C:68:7B:DF:A7:D3
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CPLDGBFNEs92AcDMQKiMaHvfp9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1c80::/29
2a11:64c0::/29
2a11:a040::/29
2a11:cec0::/29
2a11:e8c0::/29
2a11:ea80::/29
2a11:ff40::/29
2a12:1040::/29
2a12:12c0::/29
2a12:2e80::/29
2a12:3c00::/29
2a12:8580::/29
2a12:8a00::/29
2a12:9300::/29
2a12:d080::/29
Signature Algorithm: sha256WithRSAEncryption
83:19:2a:1f:ab:8d:c6:2f:23:9c:87:1a:e0:8e:83:27:40:40:
38:c9:fe:85:fe:4f:f5:fd:a2:a8:60:d4:ed:12:d2:39:43:7f:
e0:b8:6b:55:ec:5c:6e:e9:ac:3d:d6:b2:e5:7e:c1:18:c7:3e:
8d:0d:7c:52:31:26:ae:da:c8:73:9b:52:1b:9a:59:2d:ec:93:
6b:c7:d6:27:61:57:c6:82:d5:57:fe:33:a8:0e:3c:e5:ae:e3:
b4:aa:fc:01:65:43:d9:b2:d8:72:30:fa:16:65:83:0c:5e:6b:
85:0f:86:c2:10:64:79:45:c2:b1:84:5b:d7:e1:83:df:e4:a7:
79:07:62:a4:d3:2a:b5:d3:44:22:36:5c:63:8a:63:33:3e:c7:
8e:3c:75:6f:70:48:16:c4:77:ec:54:d1:19:19:87:12:64:41:
d4:53:76:95:98:43:e7:50:54:af:5c:89:39:84:a8:f7:b2:01:
3c:24:59:90:20:9a:64:87:25:78:7f:16:06:e0:67:e8:a0:63:
b0:b1:c3:ae:a2:b9:94:1f:df:9c:58:2b:ad:ee:6c:11:68:22:
66:2a:94:87:ca:2c:be:17:68:27:10:d1:9d:c2:ee:9e:0b:e5:
01:9f:fa:9f:62:41:03:3a:e9:6d:7f:04:d5:0a:8d:51:fc:30:
7b:2c:9b:53
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgISAY+MZkmZ40TxYl+UVKHu9EIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQwNTE4MTU1MTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGYyYzMxODExNGQxMmNmNzYwMWMwY2M0MGE4OGM2ODdiZGZhN2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTsRkstaUR5PM6i9+4wCjR/+WqqO
YKn0mflouAjeKQ/XAy2SZqeVtFRW7DHMkce//OYBancScfym9VDfssBNNCrc3K3+
BEtXUZBb4/BLeOGuxr4FXQ0y5bDAREJSMan1C0PaoHtR0Y2gNGqWBNaDP6KuhcA8
HQRTGS3P6jI5gInEFaEE0axPN/KbsKSCCtJKs3YYe91Ta8OvmkyP2fLprVjPnEB4
VzaVqzChEuOMVcMrbfaAUUWMqqkNsBqn06dfeZt0Qp5lVwSbDHMZzz5gUWUa9gyg
SrQk2/ghAjRUhg/tq6nxaiHGyGZjg1QbjvywLpFf+wklIcNrT4mIeeEeSQIDAQAB
o4ICbTCCAmkwHQYDVR0OBBYEFAjywxgRTRLPdgHAzECojGh736fTMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvQ1BMREdCRk5FczkyQWNETVFLaU1hSHZmcDlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwbwQCAAIwaQMFAyoRHIAD
BQMqEWTAAwUDKhGgQAMFAyoRzsADBQMqEejAAwUDKhHqgAMFAyoR/0ADBQMqEhBA
AwUDKhISwAMFAyoSLoADBQMqEjwAAwUDKhKFgAMFAyoSigADBQMqEpMAAwUDKhLQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAgxkqH6uNxi8jnIca4I6DJ0BAOMn+hf5P9f2i
qGDU7RLSOUN/4LhrVexcbumsPday5X7BGMc+jQ18UjEmrtrIc5tSG5pZLeyTa8fW
J2FXxoLVV/4zqA485a7jtKr8AWVD2bLYcjD6FmWDDF5rhQ+GwhBkeUXCsYRb1+GD
3+SneQdipNMqtdNEIjZcY4pjMz7Hjjx1b3BIFsR37FTRGRmHEmRB1FN2lZhD51BU
r1yJOYSo97IBPCRZkCCaZIcleH8WBuBn6KBjsLHDrqK5lB/fnFgrre5sEWgiZiqU
h8osvhdoJxDRncLungvlAZ/6n2JBAzrpbX8E1QqNUfwweyybUw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:51 2024 by rpki-client on console-ams.rpki-client.org