Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/wLNtx9X9TFriPJgXHxFbZ_ptSJ4.roa
File: wLNtx9X9TFriPJgXHxFbZ_ptSJ4.roa (raw, json)
Hash identifier: tw6cNpCMWKkxE7t7ZQZs1qBlpMfmjJ+IcQoSeGIR1bo=
Subject key identifier: C0:B3:6D:C7:D5:FD:4C:5A:E2:3C:98:17:1F:11:5B:67:FA:6D:48:9E
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01935574109F317159295ACCA8D8E17CB0D1
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/wLNtx9X9TFriPJgXHxFbZ_ptSJ4.roa
Signing time: Fri 22 Nov 2024 19:58:10 +0000
ROA not before: Fri 22 Nov 2024 19:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215427
IP address blocks: 2a11:ad80::/29 maxlen: 29
2a13:c0c0::/29 maxlen: 29
2a13:c140::/29 maxlen: 29
2a13:d240::/29 maxlen: 29
2a13:d2c0::/29 maxlen: 29
2a14:5740::/29 maxlen: 29
2a14:58c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:74:10:9f:31:71:59:29:5a:cc:a8:d8:e1:7c:b0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Nov 22 19:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0b36dc7d5fd4c5ae23c98171f115b67fa6d489e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:1c:5d:43:0e:ea:43:59:bb:14:e3:44:25:
fb:c7:3b:2a:08:0a:f7:2c:10:8a:6d:ec:9f:2a:32:
b4:3f:ef:04:4b:22:0f:bc:40:75:b0:d3:a4:46:35:
b8:e0:1e:cc:56:a0:cf:ed:d3:ad:df:64:b1:f8:2f:
1e:7f:8e:5f:cd:37:22:e1:e8:88:19:14:f0:ca:ba:
33:93:55:bd:51:c4:31:73:20:d3:e7:22:f5:f7:c7:
2c:0e:96:d7:5b:47:80:38:80:59:20:d3:12:5e:9b:
9b:53:49:3b:08:2f:c9:e9:fe:17:75:b4:97:58:63:
eb:f4:30:ab:e1:c2:bb:75:ed:7e:48:a8:8e:20:e8:
72:d1:76:39:19:16:eb:f6:bd:5d:1f:f1:fc:b3:d8:
36:47:59:26:a7:e3:b4:97:34:00:0b:ab:51:0e:99:
ec:c8:e6:f8:09:92:d8:23:30:2e:13:e5:99:08:83:
ac:c8:a2:88:37:a5:17:be:bb:2b:cc:01:fe:24:c0:
c6:3f:b4:eb:c2:6c:26:51:21:b5:77:72:6c:1c:9d:
0d:20:18:0f:24:ff:1b:34:f7:ad:9f:3e:27:72:fa:
72:59:b4:c4:9f:1f:41:28:b2:97:15:4b:9a:1f:f2:
cd:a0:27:4d:39:ad:ff:68:47:e1:b4:7d:59:f4:27:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B3:6D:C7:D5:FD:4C:5A:E2:3C:98:17:1F:11:5B:67:FA:6D:48:9E
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/wLNtx9X9TFriPJgXHxFbZ_ptSJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:ad80::/29
2a13:c0c0::/29
2a13:c140::/29
2a13:d240::/29
2a13:d2c0::/29
2a14:5740::/29
2a14:58c0::/29
Signature Algorithm: sha256WithRSAEncryption
07:39:07:69:81:a2:05:9b:c7:ce:7d:53:a7:4f:45:f1:6d:c3:
85:c2:b3:e0:f5:e1:3b:19:59:3a:ba:b5:02:8f:49:ff:75:21:
55:99:64:48:e1:e9:9a:24:39:0d:df:7c:b5:9d:d3:82:43:6e:
73:b5:ae:c2:d2:59:cc:04:d9:a8:75:8a:ec:34:0d:5d:91:2c:
84:23:7b:e3:b6:6f:c9:4c:22:d0:20:0a:04:67:cb:d8:c2:4c:
ec:c3:7f:c1:db:81:7d:76:17:e2:35:40:2c:b1:b3:a4:e6:b4:
5b:ff:f8:11:08:f7:da:b4:fc:67:d8:6f:c8:24:aa:c8:c3:58:
a1:2a:b9:8e:02:52:ad:d8:cf:93:bc:2f:77:24:07:a9:c7:21:
ca:48:dc:83:d1:df:3d:b1:22:fa:95:1b:19:32:2c:3f:6e:d4:
58:62:b6:7f:e3:0d:37:b0:20:39:c9:35:33:8c:35:ea:af:41:
30:b0:5e:a1:7b:2c:28:2c:c8:35:87:64:a3:a7:2c:b5:99:b9:
f1:cd:91:41:c6:a8:b6:a0:96:84:77:5d:fc:11:81:96:67:ae:
81:b0:d7:28:05:3d:97:51:c7:60:cb:47:21:d7:e8:75:ba:12:
b9:4c:b8:04:97:24:0f:cf:a2:a0:0e:e8:a4:b1:e8:cc:21:3f:
38:87:d1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:14:10 2025 by rpki-client