Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/WW6ZzxmYCdONOND6hnwR-VO6JFg.roa
File: WW6ZzxmYCdONOND6hnwR-VO6JFg.roa (raw, json)
Hash identifier: 3dETP+Gl13crxCmHx10u5OKI7Nw0JAfZ7lOnWdxf4mg=
Subject key identifier: 59:6E:99:CF:19:98:09:D3:8D:38:D0:FA:86:7C:11:F9:53:BA:24:58
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 018FC004AC7135DE8D241F4EBEFB73C076F3
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/WW6ZzxmYCdONOND6hnwR-VO6JFg.roa
Signing time: Tue 28 May 2024 16:24:42 +0000
ROA not before: Tue 28 May 2024 16:24:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a11:8f87::/32 maxlen: 32
2a11:f181::/32 maxlen: 32
2a12:1803::/32 maxlen: 32
2a12:1805::/32 maxlen: 32
2a12:1cc1::/32 maxlen: 32
2a12:1cc5::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 04 Jun 2024 19:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c0:04:ac:71:35:de:8d:24:1f:4e:be:fb:73:c0:76:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: May 28 16:24:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=596e99cf199809d38d38d0fa867c11f953ba2458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:90:42:6d:d6:c9:53:41:6d:5c:23:e9:3a:
2b:0d:97:36:ca:a1:0a:fc:cc:c3:e2:50:bf:09:9a:
f7:d6:10:23:0b:3c:a8:d0:2f:20:8d:fc:8d:92:5e:
2f:e2:8e:5d:d9:c4:4f:23:09:d4:22:7a:61:ba:94:
68:5e:65:7a:0f:93:45:a5:19:94:28:b1:09:b3:e1:
1f:76:dc:0d:86:49:8b:43:9f:ea:2e:bf:7f:a9:d2:
8b:6c:00:4f:55:b4:15:8c:16:5f:69:ab:eb:d3:f0:
16:ab:4e:4a:82:1b:d9:f2:ea:ea:60:0e:3e:71:c7:
cd:3e:92:61:c5:bd:b6:8d:42:b7:72:d5:87:27:6d:
61:57:41:58:1a:b8:3e:69:93:47:bf:cd:0d:c4:25:
0c:4a:38:10:30:eb:cc:73:c5:1b:c8:f9:36:ed:15:
63:00:8a:79:ac:42:d0:bc:b1:44:58:73:a5:53:03:
51:3c:19:57:de:f8:6d:52:82:b5:63:7f:78:4b:ed:
a2:6c:f8:be:88:82:16:08:11:4b:55:61:c1:7d:3e:
9a:01:b0:2e:a9:a1:b8:99:2b:eb:6a:fd:50:c1:65:
b5:c3:39:af:f7:e8:c1:66:0b:fa:d2:42:9b:3c:cc:
d8:0c:9b:66:56:51:5a:d2:dc:0c:f3:b3:74:b7:35:
68:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6E:99:CF:19:98:09:D3:8D:38:D0:FA:86:7C:11:F9:53:BA:24:58
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/WW6ZzxmYCdONOND6hnwR-VO6JFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8f87::/32
2a11:f181::/32
2a12:1803::/32
2a12:1805::/32
2a12:1cc1::/32
2a12:1cc5::/32
Signature Algorithm: sha256WithRSAEncryption
9c:f5:26:46:76:14:5e:7a:30:5c:73:1b:b4:df:44:21:4d:ac:
8b:eb:ec:48:ac:55:da:46:ab:0f:c3:01:c9:7c:a4:57:2e:24:
9f:31:95:38:ea:1a:ba:1b:90:2c:17:dc:5e:64:a2:0b:78:24:
89:f8:93:46:ef:0a:eb:46:74:43:23:e3:6c:24:de:13:72:9d:
af:5c:be:05:a2:6a:80:1a:2b:57:6f:7d:3f:3a:77:37:f2:3f:
32:f0:3e:6a:91:70:9b:fe:d8:0d:a7:8c:a6:52:88:04:09:a1:
1f:b7:22:39:9a:06:34:c5:d3:d7:3a:81:01:3a:eb:bb:ae:6d:
9f:27:d9:1e:14:e4:d2:73:60:46:c6:f1:d5:3b:9a:c5:11:82:
46:93:48:cb:fc:53:42:3c:6a:d7:8c:53:a0:fd:27:28:0e:d2:
62:93:0f:46:56:ab:ed:12:7c:f6:80:fd:96:b4:61:08:3a:a7:
05:a9:8a:2f:0a:a1:7b:e3:5c:23:06:9a:3a:eb:fa:5a:c3:8f:
19:48:96:4c:56:b0:f0:4b:e6:d5:40:b7:f6:4d:6f:a8:34:de:
6e:e2:62:ea:87:fc:a1:ed:df:16:42:a5:90:8c:4c:24:a0:54:
7b:d2:f2:c8:c2:82:9f:cc:1a:cc:33:ad:56:c3:87:bc:96:d4:
d7:72:84:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:50 2024 by rpki-client on console-fra.rpki-client.org