Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/xv1uLYY_QhOe6mGKNpCvBfkZp8Y.roa
File: xv1uLYY_QhOe6mGKNpCvBfkZp8Y.roa (raw, json)
Hash identifier: /rWop2oGVhO0xM65DHjJ2M8zQl1nNPIteESLj4escWw=
Subject key identifier: C6:FD:6E:2D:86:3F:42:13:9E:EA:61:8A:36:90:AF:05:F9:19:A7:C6
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 01916C9495DC33B7E1D108D0C7A9A69AFC41
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/xv1uLYY_QhOe6mGKNpCvBfkZp8Y.roa
Signing time: Mon 19 Aug 2024 21:39:22 +0000
ROA not before: Mon 19 Aug 2024 21:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136258
IP address blocks: 46.16.128.0/24 maxlen: 24
46.16.129.0/24 maxlen: 24
109.104.152.0/24 maxlen: 24
109.104.153.0/24 maxlen: 24
109.104.155.0/24 maxlen: 24
147.78.0.0/24 maxlen: 24
147.78.1.0/24 maxlen: 24
147.78.2.0/24 maxlen: 24
147.78.3.0/24 maxlen: 24
185.126.238.0/24 maxlen: 24
185.126.239.0/24 maxlen: 24
185.213.23.0/24 maxlen: 24
2a11:840:6::/48 maxlen: 48
2a11:840:7::/48 maxlen: 48
2a11:840:8::/48 maxlen: 48
2a11:840:10::/48 maxlen: 48
2a11:840:11::/48 maxlen: 48
2a11:840:12::/48 maxlen: 48
2a11:840:13::/48 maxlen: 48
2a11:840:14::/48 maxlen: 48
2a11:840:17::/48 maxlen: 48
2a11:840:18::/48 maxlen: 48
2a11:840:19::/48 maxlen: 48
2a11:840:20::/48 maxlen: 48
2a11:840:21::/48 maxlen: 48
2a11:840:22::/48 maxlen: 48
2a11:840:24::/48 maxlen: 48
2a11:840:25::/48 maxlen: 48
2a11:840:26::/48 maxlen: 48
2a11:840:30::/48 maxlen: 48
2a11:840:33::/48 maxlen: 48
2a11:840:40::/48 maxlen: 48
2a11:840:41::/48 maxlen: 48
2a11:840:47::/48 maxlen: 48
2a11:840:48::/48 maxlen: 48
2a11:840:54::/48 maxlen: 48
2a11:840:60::/48 maxlen: 48
2a11:840:61::/48 maxlen: 48
2a11:840:62::/48 maxlen: 48
2a11:840:63::/48 maxlen: 48
2a11:840:64::/48 maxlen: 48
2a11:840:65::/48 maxlen: 48
2a11:840:66::/48 maxlen: 48
2a11:840:67::/48 maxlen: 48
2a11:840:68::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 Aug 2024 20:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6c:94:95:dc:33:b7:e1:d1:08:d0:c7:a9:a6:9a:fc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Aug 19 21:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6fd6e2d863f42139eea618a3690af05f919a7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6a:06:12:47:6e:f0:88:9d:96:e9:ab:ea:94:
59:ed:ce:50:4c:cb:bd:66:52:d2:9d:1d:e3:eb:8c:
51:9e:91:c6:9b:ea:8b:53:3a:19:bb:24:b4:f3:52:
90:b4:c6:b3:2c:b9:40:35:86:8c:bd:e2:a1:de:b8:
a1:42:6f:88:13:55:64:a2:53:89:fa:a8:16:f1:a3:
f5:62:6e:e3:06:ed:49:3b:ae:e5:e2:0b:48:97:b1:
22:12:75:4f:48:54:dc:63:b9:a7:1c:64:75:65:d6:
20:6d:64:12:4b:28:c2:b1:e5:4b:32:40:42:d6:f3:
c3:21:7b:79:7e:f3:44:bd:e2:fa:7d:83:ff:32:40:
39:0e:09:e8:a8:5b:2b:c2:b3:a6:98:42:87:71:da:
d5:c3:09:14:83:ea:b0:6f:81:db:45:1c:c3:4f:39:
a4:a4:07:df:78:c9:19:c5:32:73:0b:6a:2b:29:a7:
27:4d:5f:33:e7:87:00:f7:50:a6:ed:f7:2c:67:8a:
72:c7:04:2d:5e:c4:65:6c:de:90:b5:a4:c9:79:33:
89:07:cd:75:8e:cc:df:6f:f9:44:59:0c:fa:0d:a8:
2c:13:0a:de:9e:20:37:17:a8:1e:aa:17:bf:00:b0:
ac:46:6e:b7:f8:03:37:68:72:ce:7e:79:04:eb:cd:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FD:6E:2D:86:3F:42:13:9E:EA:61:8A:36:90:AF:05:F9:19:A7:C6
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/xv1uLYY_QhOe6mGKNpCvBfkZp8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.128.0/23
109.104.152.0/23
109.104.155.0/24
147.78.0.0/22
185.126.238.0/23
185.213.23.0/24
IPv6:
2a11:840:6::-2a11:840:8:ffff:ffff:ffff:ffff:ffff
2a11:840:10::-2a11:840:14:ffff:ffff:ffff:ffff:ffff
2a11:840:17::-2a11:840:19:ffff:ffff:ffff:ffff:ffff
2a11:840:20::-2a11:840:22:ffff:ffff:ffff:ffff:ffff
2a11:840:24::-2a11:840:26:ffff:ffff:ffff:ffff:ffff
2a11:840:30::/48
2a11:840:33::/48
2a11:840:40::/47
2a11:840:47::-2a11:840:48:ffff:ffff:ffff:ffff:ffff
2a11:840:54::/48
2a11:840:60::-2a11:840:68:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
61:6d:7c:5f:60:aa:1c:b4:29:a8:c1:cd:fb:ce:90:b6:38:95:
c5:f4:5f:4e:f2:2c:22:94:22:fc:fe:cf:01:94:8b:a7:54:82:
63:d4:97:59:01:0c:18:88:c3:0e:84:25:9a:5a:46:36:83:8e:
48:f2:a1:1a:1c:4a:0e:cd:d3:45:b4:82:fb:15:13:ed:93:f8:
78:44:b1:e9:73:e2:c8:b8:00:15:81:00:dd:e0:2e:94:57:0b:
ff:15:7b:dc:d2:0e:30:c6:50:6e:5e:c6:60:d4:88:d5:56:e6:
cb:bd:bf:81:dd:64:32:8c:a3:d7:5a:61:5c:ac:19:e6:2f:9c:
91:e8:32:bf:58:54:fd:3d:18:dd:86:1a:08:6b:91:e9:3f:35:
cc:3c:8a:c5:fc:ae:7e:67:a3:c1:51:50:de:be:fe:fb:27:b9:
4f:e4:21:03:10:d8:b0:5c:f2:57:17:94:f0:08:9a:73:75:bb:
d6:e1:b8:cc:21:83:5a:22:2b:65:75:1d:86:dc:c0:9b:15:fa:
f2:4b:a7:d8:62:9f:7c:52:96:8b:95:5a:53:cb:0a:ab:7f:2e:
62:0e:1b:7d:99:36:97:f4:3a:7b:17:eb:b7:aa:39:5e:ca:10:
fe:25:d9:88:f1:b1:98:76:28:41:cd:a9:1a:88:f6:96:72:3d:
06:5c:e7:27
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 28 22:26:36 2024 by rpki-client on console-fra.rpki-client.org