Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/6jqvdvIM0CCLWSCygN09-WhWjE4.roa
File: 6jqvdvIM0CCLWSCygN09-WhWjE4.roa (raw, json)
Hash identifier: o+ESCZKcRu/+5gb1B4az8hzCgMXMuzzgVuvP86jVWgY=
Subject key identifier: EA:3A:AF:76:F2:0C:D0:20:8B:59:20:B2:80:DD:3D:F9:68:56:8C:4E
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 01876EEC72BAB8178CAA0A1DEA6D99B33680
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/6jqvdvIM0CCLWSCygN09-WhWjE4.roa
Signing time: Tue 11 Apr 2023 06:06:42 +0000
ROA not before: Tue 11 Apr 2023 06:06:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12688
IP address blocks: 141.105.32.0/20 maxlen: 20
141.105.48.0/21 maxlen: 21
37.49.160.0/19 maxlen: 19
185.13.120.0/22 maxlen: 22
31.47.160.0/19 maxlen: 19
5.254.224.0/19 maxlen: 19
164.215.80.0/20 maxlen: 20
2a01:b580::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6e:ec:72:ba:b8:17:8c:aa:0a:1d:ea:6d:99:b3:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Apr 11 06:06:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea3aaf76f20cd0208b5920b280dd3df968568c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fc:59:64:a6:ce:71:76:28:9d:7b:be:b5:6a:
8b:32:fd:57:bb:d7:97:c8:24:33:ed:e4:ba:90:34:
20:d9:a1:03:58:a5:92:26:e3:40:88:f5:a0:1f:44:
d5:d6:1d:63:92:ed:9d:fa:4e:ce:75:00:f0:11:a0:
df:20:2a:7e:83:a9:ae:b4:42:3f:29:46:8f:62:bc:
bb:a5:0d:4d:12:75:f9:20:c2:46:11:84:98:4b:ab:
b7:3a:88:c5:b7:c2:f5:46:b1:8b:bb:d9:5a:db:70:
9e:0a:fc:62:77:5f:c9:d2:cb:59:2f:f1:26:15:8c:
0d:30:6e:55:2f:27:3d:21:f9:0c:c8:27:9b:72:c0:
1d:14:79:c2:9a:22:54:dd:3e:12:b1:49:ef:9d:4e:
e2:a6:8e:3a:98:53:67:ff:c4:24:6e:a5:60:43:d1:
3e:16:77:dc:51:c3:3f:ae:ad:35:aa:d3:65:65:6c:
c3:92:e7:e8:e2:ab:fb:b8:7f:51:4f:8e:0e:19:e2:
1b:70:8c:07:ec:8c:ed:1c:78:79:a5:a7:3e:71:5a:
7f:db:34:bd:68:09:f9:4f:13:66:44:b1:ce:b7:ed:
cb:b2:a5:1c:96:d4:ee:d9:92:5e:17:5f:2c:50:06:
08:4c:df:70:ee:45:5a:d2:a7:19:b5:c0:30:b9:5b:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3A:AF:76:F2:0C:D0:20:8B:59:20:B2:80:DD:3D:F9:68:56:8C:4E
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/6jqvdvIM0CCLWSCygN09-WhWjE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.224.0/19
31.47.160.0/19
37.49.160.0/19
141.105.32.0-141.105.55.255
164.215.80.0/20
185.13.120.0/22
IPv6:
2a01:b580::/32
Signature Algorithm: sha256WithRSAEncryption
a0:81:d5:02:5d:5b:bd:31:fd:1d:a0:4a:69:1c:8f:cb:6c:9c:
c3:61:fe:66:23:3b:c2:df:dd:ff:0b:83:2d:7a:4a:65:35:2a:
2d:bc:b7:bd:5a:03:30:14:d9:a2:7f:d6:66:68:ba:4f:6d:35:
24:00:f3:49:8f:5a:7d:19:ca:08:1b:73:6e:39:5f:a9:e7:92:
35:76:f6:d6:23:c1:f7:1d:78:f4:58:c7:61:0a:19:92:a0:d8:
b6:14:8d:6b:0a:6f:c3:d6:6e:e2:d9:63:3b:4f:4e:bf:7f:ac:
c5:ca:fe:a0:90:e4:18:f9:cb:93:9a:74:05:09:bd:a0:96:41:
df:03:03:3a:c3:db:44:a0:cc:04:ba:b9:1a:06:67:8d:38:46:
77:4b:1e:3f:f6:b7:70:5b:47:9c:28:ec:fc:ad:93:c8:20:43:
ae:b2:e4:71:4e:0d:2d:a6:0b:8b:78:db:95:59:f4:96:68:33:
71:8c:c3:2f:8d:92:af:1d:30:fa:bd:e2:d4:57:8d:81:64:b6:
e1:54:7c:30:cf:ca:34:5c:06:57:80:06:e0:e4:e5:c3:55:84:
6e:f9:e9:55:35:6b:77:26:8a:89:f3:db:ca:ec:a1:87:d7:38:
42:88:22:66:27:01:3b:fb:c6:93:90:d4:8e:70:2d:9c:7b:65:
86:38:e2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:51 2024 by rpki-client on console-ams.rpki-client.org