Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/3KsbGODzT5zKbBfWbPp_VCir5dY.roa
File: 3KsbGODzT5zKbBfWbPp_VCir5dY.roa (raw, json)
Hash identifier: v5zdoGrYXkEU44vz4qxvsZO7cxR4WJjjEoEsRpluOf8=
Subject key identifier: DC:AB:1B:18:E0:F3:4F:9C:CA:6C:17:D6:6C:FA:7F:54:28:AB:E5:D6
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018DEF7797EB835D23ED30643F19F35CCFDB
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/3KsbGODzT5zKbBfWbPp_VCir5dY.roa
Signing time: Wed 28 Feb 2024 11:26:48 +0000
ROA not before: Wed 28 Feb 2024 11:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20940
IP address blocks: 193.108.88.0/21 maxlen: 21
193.108.89.0/24 maxlen: 24
193.108.90.0/24 maxlen: 24
193.108.94.0/23 maxlen: 23
2a02:26f0:4::/48 maxlen: 48
2a02:26f0:2c::/48 maxlen: 48
2a02:26f0:30::/48 maxlen: 48
2a02:26f0:3b::/48 maxlen: 48
2a02:26f0:41::/48 maxlen: 48
2a02:26f0:60::/48 maxlen: 48
2a02:26f0:61::/48 maxlen: 48
2a02:26f0:6b::/48 maxlen: 48
2a02:26f0:82::/48 maxlen: 48
2a02:26f0:98::/48 maxlen: 48
2a02:26f0:a1::/48 maxlen: 48
2a02:26f0:ad::/48 maxlen: 48
2a02:26f0:b7::/48 maxlen: 48
2a02:26f0:c6::/48 maxlen: 48
2a02:26f0:d7::/48 maxlen: 48
2a02:26f0:d8::/48 maxlen: 48
2a02:26f0:da::/48 maxlen: 48
2a02:26f0:db::/48 maxlen: 48
2a02:26f0:dc::/48 maxlen: 48
2a02:26f0:de::/48 maxlen: 48
2a02:26f0:df::/48 maxlen: 48
2a02:26f0:e0::/48 maxlen: 48
2a02:26f0:e2::/48 maxlen: 48
2a02:26f0:e8::/48 maxlen: 48
2a02:26f0:f3::/48 maxlen: 48
2a02:26f0:f4::/48 maxlen: 48
2a02:26f0:118::/48 maxlen: 48
2a02:26f0:11a::/48 maxlen: 48
2a02:26f0:12d::/48 maxlen: 48
2a02:26f0:300::/48 maxlen: 48
2a02:26f0:500::/48 maxlen: 48
2a02:26f0:a00::/48 maxlen: 48
2a02:26f0:1200::/48 maxlen: 48
2a02:26f0:1b00::/48 maxlen: 48
2a02:26f0:1d00::/48 maxlen: 48
2a02:26f0:2100::/48 maxlen: 48
2a02:26f0:3000::/48 maxlen: 48
2a02:26f0:3100::/48 maxlen: 48
2a02:26f0:3400::/48 maxlen: 48
2a02:26f0:3900::/48 maxlen: 48
2a02:26f0:4300::/48 maxlen: 48
2a02:26f0:4700::/48 maxlen: 48
2a02:26f0:5200::/48 maxlen: 48
2a02:26f0:5700::/48 maxlen: 48
2a02:26f0:5900::/48 maxlen: 48
2a02:26f0:5c00::/48 maxlen: 48
2a02:26f0:6100::/48 maxlen: 48
2a02:26f0:7000::/48 maxlen: 48
2a02:26f0:7100::/48 maxlen: 48
2a02:26f0:7400::/48 maxlen: 48
2a02:26f0:7900::/48 maxlen: 48
2a02:26f0:8c00::/48 maxlen: 48
2a02:26f0:9200::/48 maxlen: 48
2a02:26f0:9400::/48 maxlen: 48
2a02:26f0:9800::/48 maxlen: 48
2a02:26f0:9b00::/48 maxlen: 48
2a02:26f0:9c00::/48 maxlen: 48
2a02:26f0:9d00::/48 maxlen: 48
2a02:26f0:a300::/48 maxlen: 48
2a02:26f0:ab00::/48 maxlen: 48
2a02:26f0:b200::/48 maxlen: 48
2a02:26f0:b600::/48 maxlen: 48
2a02:26f0:c000::/48 maxlen: 48
2a02:26f0:c800::/48 maxlen: 48
2a02:26f0:cc00::/48 maxlen: 48
2a02:26f0:d200::/48 maxlen: 48
2a02:26f0:e000::/48 maxlen: 48
2a02:26f0:e200::/48 maxlen: 48
2a02:26f0:e300::/48 maxlen: 48
2a02:26f0:e600::/48 maxlen: 48
2a02:26f0:ea00::/48 maxlen: 48
2a02:26f0:ee00::/48 maxlen: 48
2a02:26f0:fa00::/48 maxlen: 48
2a02:26f0:fe00::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 05 Mar 2024 13:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:77:97:eb:83:5d:23:ed:30:64:3f:19:f3:5c:cf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Feb 28 11:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcab1b18e0f34f9cca6c17d66cfa7f5428abe5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:aa:e9:aa:90:e4:f1:0f:6b:8a:47:42:85:22:
b4:94:28:eb:1f:a8:24:67:3d:19:41:c5:68:c8:9a:
f1:ec:47:e6:ea:5c:34:14:19:99:f7:60:53:0c:82:
84:53:2d:d6:3f:72:bc:fa:e3:01:03:1e:64:e5:1a:
13:83:f3:e8:dc:d5:38:74:29:0d:0c:2f:40:84:87:
ff:72:8d:30:a0:7c:f0:da:16:50:85:e2:dc:12:78:
5a:5d:1c:dd:84:b2:e6:f4:a0:2f:ec:08:99:f6:bd:
0a:ca:b9:0b:8c:16:b8:c8:29:3b:19:c2:80:9b:ba:
9b:62:f4:57:5d:c7:88:86:6e:47:1a:7d:7c:63:74:
50:30:e4:ea:7b:32:e4:8f:5e:6d:24:a9:6d:ac:2b:
d9:95:42:e3:65:3c:69:31:9a:43:fe:61:5b:20:57:
1c:3c:e3:32:50:6c:99:10:a9:fe:df:fe:7e:a8:1f:
ab:28:56:db:06:5d:1e:e6:84:f7:c9:e2:13:e5:3e:
83:10:9e:b1:58:67:90:6e:a7:a5:c5:5a:79:fb:8b:
1a:fb:ef:82:b7:3d:53:50:f1:1e:d6:d5:66:59:5c:
36:b4:b3:52:7d:59:89:81:46:12:5b:58:e3:ae:35:
89:6a:a8:be:1f:2f:ca:77:ef:41:5e:8a:ce:1d:d3:
aa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AB:1B:18:E0:F3:4F:9C:CA:6C:17:D6:6C:FA:7F:54:28:AB:E5:D6
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/3KsbGODzT5zKbBfWbPp_VCir5dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.88.0/21
IPv6:
2a02:26f0:4::/48
2a02:26f0:2c::/48
2a02:26f0:30::/48
2a02:26f0:3b::/48
2a02:26f0:41::/48
2a02:26f0:60::/47
2a02:26f0:6b::/48
2a02:26f0:82::/48
2a02:26f0:98::/48
2a02:26f0:a1::/48
2a02:26f0:ad::/48
2a02:26f0:b7::/48
2a02:26f0:c6::/48
2a02:26f0:d7::-2a02:26f0:d8:ffff:ffff:ffff:ffff:ffff
2a02:26f0:da::-2a02:26f0:dc:ffff:ffff:ffff:ffff:ffff
2a02:26f0:de::-2a02:26f0:e0:ffff:ffff:ffff:ffff:ffff
2a02:26f0:e2::/48
2a02:26f0:e8::/48
2a02:26f0:f3::-2a02:26f0:f4:ffff:ffff:ffff:ffff:ffff
2a02:26f0:118::/48
2a02:26f0:11a::/48
2a02:26f0:12d::/48
2a02:26f0:300::/48
2a02:26f0:500::/48
2a02:26f0:a00::/48
2a02:26f0:1200::/48
2a02:26f0:1b00::/48
2a02:26f0:1d00::/48
2a02:26f0:2100::/48
2a02:26f0:3000::/48
2a02:26f0:3100::/48
2a02:26f0:3400::/48
2a02:26f0:3900::/48
2a02:26f0:4300::/48
2a02:26f0:4700::/48
2a02:26f0:5200::/48
2a02:26f0:5700::/48
2a02:26f0:5900::/48
2a02:26f0:5c00::/48
2a02:26f0:6100::/48
2a02:26f0:7000::/48
2a02:26f0:7100::/48
2a02:26f0:7400::/48
2a02:26f0:7900::/48
2a02:26f0:8c00::/48
2a02:26f0:9200::/48
2a02:26f0:9400::/48
2a02:26f0:9800::/48
2a02:26f0:9b00::/48
2a02:26f0:9c00::/48
2a02:26f0:9d00::/48
2a02:26f0:a300::/48
2a02:26f0:ab00::/48
2a02:26f0:b200::/48
2a02:26f0:b600::/48
2a02:26f0:c000::/48
2a02:26f0:c800::/48
2a02:26f0:cc00::/48
2a02:26f0:d200::/48
2a02:26f0:e000::/48
2a02:26f0:e200::/48
2a02:26f0:e300::/48
2a02:26f0:e600::/48
2a02:26f0:ea00::/48
2a02:26f0:ee00::/48
2a02:26f0:fa00::/48
2a02:26f0:fe00::/48
Signature Algorithm: sha256WithRSAEncryption
28:19:5f:06:c7:d2:63:59:bc:d8:20:0c:d2:f3:19:ca:a4:bd:
94:02:8d:1e:be:66:13:e7:54:e1:b9:ad:1f:e3:fc:05:0e:73:
b1:f7:c2:5c:bf:f6:82:eb:59:e7:9c:f6:20:a3:78:b0:a2:02:
c5:c1:2d:69:39:69:81:23:42:82:47:3c:89:78:e0:59:ac:75:
aa:bc:38:5e:4a:e7:a7:aa:7e:3e:8a:69:54:ff:98:4a:91:11:
7e:8b:b8:0f:88:f0:02:1c:bb:67:bd:23:47:9a:d7:da:3a:40:
81:2f:59:9b:c5:4a:14:dd:72:85:38:6c:25:f7:8a:39:0a:21:
8f:58:df:17:03:35:8a:7a:f2:9e:e6:8f:8b:6d:76:a6:38:3f:
00:7a:79:70:7a:49:72:bb:e1:ff:9e:89:e6:1e:f9:80:be:34:
ac:53:4d:4d:3e:98:79:cb:cd:81:95:3e:a5:b3:51:6a:da:b2:
30:39:86:81:42:6f:0d:8c:6c:75:50:a0:15:f3:b8:ca:b8:f0:
a3:b7:79:d4:56:f5:be:e5:6d:3e:ee:71:86:6e:fb:18:d8:cd:
3f:b9:a5:b3:43:2b:a4:f8:66:c9:f9:1e:ea:93:17:4a:87:60:
85:c1:53:9f:dc:a6:13:c5:8f:7c:49:03:b3:f7:f5:18:e0:dc:
72:5b:b8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 17:53:06 2024 by rpki-client on console-ams.rpki-client.org