Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/x_6Ng9OtCf81Yz8VVaZjDNwlUGs.roa
File: x_6Ng9OtCf81Yz8VVaZjDNwlUGs.roa (raw, json)
Hash identifier: JJnVOnbtir2imUEu3G/XpQrTEAfC6KSNNI/F5fLXfAA=
Subject key identifier: C7:FE:8D:83:D3:AD:09:FF:35:63:3F:15:55:A6:63:0C:DC:25:50:6B
Certificate issuer: /CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Certificate serial: 018D0230FB2A0115A0CA1EBDEF7EBBD0C33C
Authority key identifier: CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/x_6Ng9OtCf81Yz8VVaZjDNwlUGs.roa
Signing time: Sat 13 Jan 2024 09:39:40 +0000
ROA not before: Sat 13 Jan 2024 09:39:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60504
IP address blocks: 2a13:82c7::/32 maxlen: 32
2a13:82c5:2b00::/40 maxlen: 40
2a13:82c5:1b00::/40 maxlen: 40
2a13:82c5:1100::/40 maxlen: 40
2a13:82c5:1700::/40 maxlen: 40
2a13:82c5:2800::/40 maxlen: 40
2a13:82c5:2500::/40 maxlen: 40
2a13:82c5:1400::/40 maxlen: 40
2a13:82c5:2200::/40 maxlen: 40
2a13:82c5:1c00::/40 maxlen: 40
2a13:82c5:2000::/36 maxlen: 36
2a13:82c5:2e00::/40 maxlen: 40
2a13:82c5:2c00::/40 maxlen: 40
2a13:82c5:1900::/40 maxlen: 40
2a13:82c5:5000::/36 maxlen: 36
2a13:82c5:2a00::/40 maxlen: 40
2a13:82c5:2300::/40 maxlen: 40
2a13:82c5:1000::/36 maxlen: 36
2a13:82c5:2600::/40 maxlen: 40
2a13:82c5:1200::/40 maxlen: 40
2a13:82c4:1::/48 maxlen: 48
2a13:82c5:4000::/36 maxlen: 36
2a13:82c5:1d00::/40 maxlen: 40
2a13:82c5:2d00::/40 maxlen: 40
2a13:82c5:1a00::/40 maxlen: 40
2a13:82c5:2400::/40 maxlen: 40
2a13:82c5:1300::/40 maxlen: 40
2a13:82c5:2700::/40 maxlen: 40
2a13:82c5:2100::/40 maxlen: 40
2a13:82c5:1e00::/40 maxlen: 40
2a13:82c5:3000::/36 maxlen: 36
2a13:82c5:1600::/40 maxlen: 40
2a13:82c5:1800::/40 maxlen: 40
2a13:82c5:6000::/36 maxlen: 36
2a13:82c5:2900::/40 maxlen: 40
2a13:82c5:1500::/40 maxlen: 40
2a13:82c2::/32 maxlen: 32
2a13:82c1::/32 maxlen: 32
2a13:82c4:f000::/36 maxlen: 36
2a13:82c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 26 Jan 2024 07:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:02:30:fb:2a:01:15:a0:ca:1e:bd:ef:7e:bb:d0:c3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Validity
Not Before: Jan 13 09:39:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7fe8d83d3ad09ff35633f1555a6630cdc25506b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:08:3d:0e:fc:77:4b:7e:ee:08:c0:e6:c9:
8f:8c:11:a8:0c:e4:91:ca:86:a0:11:2f:cb:ab:8b:
57:c9:42:3d:1d:a9:32:a0:e9:50:ac:99:b6:b4:e3:
f5:1a:09:df:31:2b:3d:4b:37:9d:f7:4c:79:d0:ae:
36:0f:3b:7d:52:8c:1e:d1:9f:b7:e3:3e:ee:38:69:
73:8f:f5:d0:c5:68:17:37:bd:c5:4c:fd:d6:02:2a:
ad:5d:8e:0b:bd:69:72:61:91:c4:8d:ed:a7:3e:df:
d0:3d:11:96:86:f5:bd:a3:0d:5a:a6:9c:52:79:5b:
c9:0d:8c:cd:1c:58:2b:d4:6f:01:e5:f5:22:9a:b4:
fe:8d:76:3d:22:4e:3e:7f:06:32:f4:1e:d2:f3:2b:
61:32:3c:f3:80:32:1b:55:06:de:98:ea:ea:85:3d:
a3:f3:db:76:ad:3b:e4:70:f1:ba:9c:b3:cd:29:99:
82:77:32:82:af:bc:af:bf:c1:6c:38:07:d8:7b:ef:
e7:b3:77:f2:8f:11:ab:3f:7b:ea:01:0e:d1:9c:aa:
6d:52:7f:11:c8:e2:1a:85:13:ca:4d:c6:d0:62:7b:
bc:a7:15:2c:e2:3b:d9:a1:33:6c:a7:8f:26:21:8f:
f0:24:0a:f5:6e:53:95:4d:fd:de:a5:96:29:e6:ff:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FE:8D:83:D3:AD:09:FF:35:63:3F:15:55:A6:63:0C:DC:25:50:6B
X509v3 Authority Key Identifier:
keyid:CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/x_6Ng9OtCf81Yz8VVaZjDNwlUGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:82c0::-2a13:82c2:ffff:ffff:ffff:ffff:ffff:ffff
2a13:82c4:1::/48
2a13:82c4:f000::/36
2a13:82c5:1000::-2a13:82c5:6fff:ffff:ffff:ffff:ffff:ffff
2a13:82c7::/32
Signature Algorithm: sha256WithRSAEncryption
70:3c:a7:71:e3:d8:ff:b0:7b:c9:1c:9f:6d:87:52:2d:99:a4:
1f:51:6a:05:aa:b7:49:82:0d:fb:9f:a1:a8:c4:0e:95:ba:7b:
b0:6d:39:19:37:77:ea:5c:21:e1:6b:33:83:3b:05:b6:9c:ef:
4c:53:c2:a8:a3:4b:47:9f:2b:b4:72:fa:97:a9:75:52:f0:a8:
0f:6d:bd:3e:15:73:5f:a7:62:06:e3:a3:90:1f:33:bb:d1:d1:
7f:25:17:bd:64:31:66:a8:d2:fb:44:e6:e1:67:ef:7d:98:79:
28:be:3c:57:f5:37:59:2a:86:c1:f4:e2:04:d3:1b:f6:9c:a6:
3b:a5:09:1c:b3:54:e0:06:44:d8:b6:41:70:93:ca:6e:da:14:
3f:48:12:bd:33:2f:1b:d5:29:d8:94:ee:0a:1f:46:2a:d4:c8:
3e:df:6d:40:c8:83:72:10:90:75:2f:b7:6f:11:47:52:bb:67:
bd:6c:45:86:13:bf:f0:0c:0b:67:6a:22:a8:db:ec:ac:5f:ce:
2e:84:8b:0e:76:98:94:b0:d6:8b:1c:2e:fa:d4:1a:d3:f6:7a:
38:d6:96:a9:c5:3a:6c:10:0c:1c:ff:8e:17:71:0d:76:1b:df:
7d:81:cc:a4:0b:6b:61:48:00:92:cb:73:e1:1b:01:ae:08:26:
2d:7e:ad:52
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAY0CMPsqARWgyh6973670MM8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjVkYzc2ZWI2ZjgxNGVkNjAxNTY4ZmRkMmM4MTEwZWRl
ZjhjMTcwHhcNMjQwMTEzMDkzOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2ZlOGQ4M2QzYWQwOWZmMzU2MzNmMTU1NWE2NjMwY2RjMjU1MDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf4IPQ78d0t+7gjA5smPjBGoDOSR
yoagES/Lq4tXyUI9HakyoOlQrJm2tOP1GgnfMSs9Szed90x50K42Dzt9Uowe0Z+3
4z7uOGlzj/XQxWgXN73FTP3WAiqtXY4LvWlyYZHEje2nPt/QPRGWhvW9ow1appxS
eVvJDYzNHFgr1G8B5fUimrT+jXY9Ik4+fwYy9B7S8ythMjzzgDIbVQbemOrqhT2j
89t2rTvkcPG6nLPNKZmCdzKCr7yvv8FsOAfYe+/ns3fyjxGrP3vqAQ7RnKptUn8R
yOIahRPKTcbQYnu8pxUs4jvZoTNsp48mIY/wJAr1blOVTf3epZYp5v96KwIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFMf+jYPTrQn/NWM/FVWmYwzcJVBrMB8GA1UdIwQY
MBaAFM/13Hbrb4FO1gFWj90sgRDt74wXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9YY2R1dHZnVTdXQVZhUDNTeUJFTzN2akJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny84YzBjMDAtNWZjZS00NWNiLWJiYjct
MDFkOWU5ZDMxOTQzLzEveF82Tmc5T3RDZjgxWXo4VlZhWmpETndsVUdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny84YzBjMDAtNWZjZS00NWNiLWJiYjctMDFkOWU5ZDMxOTQz
LzEvel9YY2R1dHZnVTdXQVZhUDNTeUJFTzN2akJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAAjA6MA4DBQYqE4LA
AwUAKhOCwgMHACoTgsQAAQMGBCoTgsTwMBADBgQqE4LFEAMGBCoTgsVgAwUAKhOC
xzANBgkqhkiG9w0BAQsFAAOCAQEAcDyncePY/7B7yRyfbYdSLZmkH1FqBaq3SYIN
+5+hqMQOlbp7sG05GTd36lwh4WszgzsFtpzvTFPCqKNLR58rtHL6l6l1UvCoD229
PhVzX6diBuOjkB8zu9HRfyUXvWQxZqjS+0Tm4WfvfZh5KL48V/U3WSqGwfTiBNMb
9pymO6UJHLNU4AZE2LZBcJPKbtoUP0gSvTMvG9Up2JTuCh9GKtTIPt9tQMiDchCQ
dS+3bxFHUrtnvWxFhhO/8AwLZ2oiqNvsrF/OLoSLDnaYlLDWixwu+tQa0/Z6ONaW
qcU6bBAMHP+OF3ENdhvffYHMpAtrYUgAkstz4RsBrggmLX6tUg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org