Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/uU-ptBM7h_Lyq36lW7HbS_NFVTU.roa
File: uU-ptBM7h_Lyq36lW7HbS_NFVTU.roa (raw, json)
Hash identifier: bECGfevRHWnr8Hf8/7y5xlD5qbRrM2ID0cWsdBIU8p4=
Subject key identifier: B9:4F:A9:B4:13:3B:87:F2:F2:AB:7E:A5:5B:B1:DB:4B:F3:45:55:35
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018D55AB33FB57D68C3DA2C48F74446C3D0D
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/uU-ptBM7h_Lyq36lW7HbS_NFVTU.roa
Signing time: Mon 29 Jan 2024 14:41:39 +0000
ROA not before: Mon 29 Jan 2024 14:41:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198231
IP address blocks: 2a11:16c0::/29 maxlen: 32
2a11:6600::/29 maxlen: 32
2a11:6c00::/29 maxlen: 32
2a11:6c40::/29 maxlen: 32
2a11:b9c0::/29 maxlen: 32
2a11:d400::/29 maxlen: 32
2a11:f080::/29 maxlen: 32
2a12:3c80::/29 maxlen: 32
2a12:e4c0::/29 maxlen: 32
2a13:3a80::/29 maxlen: 32
2a13:3e80::/29 maxlen: 32
2a13:4680::/29 maxlen: 32
2a13:64c0::/29 maxlen: 32
2a13:6540::/29 maxlen: 32
2a13:6840::/29 maxlen: 32
2a13:68c0::/29 maxlen: 32
2a13:69c0::/29 maxlen: 32
2a13:6a40::/29 maxlen: 32
2a13:6ac0::/29 maxlen: 32
2a13:6bc0::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 01 Feb 2024 16:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:55:ab:33:fb:57:d6:8c:3d:a2:c4:8f:74:44:6c:3d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 29 14:41:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b94fa9b4133b87f2f2ab7ea55bb1db4bf3455535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dd:8e:3b:79:99:5b:6a:65:a4:64:5e:68:7c:
e5:ed:fe:ad:e4:47:d1:b8:e5:ca:e5:05:dd:e2:96:
0c:22:a8:2f:45:4e:d2:20:e6:66:a1:d2:2d:46:47:
21:12:ae:85:c4:82:0e:c7:59:33:e2:1b:8b:c4:8a:
68:e1:ab:57:62:1c:17:b2:8c:45:4a:c5:4c:e1:e9:
d4:ef:c7:c2:0e:02:21:40:15:69:43:f0:76:05:d8:
83:fc:8c:4a:a9:33:01:96:87:17:7b:97:6f:b8:10:
3f:52:2d:1b:e7:d0:0b:59:bd:30:f8:d4:21:3e:2d:
0d:55:92:c8:87:1b:33:60:96:48:e6:a7:39:4d:6a:
cb:df:0c:7b:86:91:7d:56:7a:28:14:60:19:52:6b:
f4:64:3e:54:7d:29:01:19:1a:ac:16:78:c4:25:49:
e9:21:17:6e:a4:d9:5c:3e:8f:85:77:1f:67:67:58:
98:f7:f5:91:03:cb:1e:7e:8e:a8:58:19:46:e6:e0:
44:7a:ef:ad:e3:ad:78:0d:c3:c7:b2:8a:15:7c:08:
da:f5:81:c9:e8:97:61:9b:80:b3:ea:37:ab:74:1f:
58:aa:ba:ef:13:24:29:32:e7:a2:2d:3a:7c:c6:66:
a0:81:5a:02:97:fd:13:be:e2:79:16:f5:3e:82:f6:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4F:A9:B4:13:3B:87:F2:F2:AB:7E:A5:5B:B1:DB:4B:F3:45:55:35
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/uU-ptBM7h_Lyq36lW7HbS_NFVTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:16c0::/29
2a11:6600::/29
2a11:6c00::/29
2a11:6c40::/29
2a11:b9c0::/29
2a11:d400::/29
2a11:f080::/29
2a12:3c80::/29
2a12:e4c0::/29
2a13:3a80::/29
2a13:3e80::/29
2a13:4680::/29
2a13:64c0::/29
2a13:6540::/29
2a13:6840::/29
2a13:68c0::/29
2a13:69c0::/29
2a13:6a40::/29
2a13:6ac0::/29
2a13:6bc0::/29
Signature Algorithm: sha256WithRSAEncryption
98:d5:97:47:3b:70:a9:bb:2c:e6:58:37:cc:48:41:57:22:b2:
dc:22:90:3b:76:1a:13:12:26:06:b1:97:44:bb:32:b8:09:e4:
27:a0:11:e9:7b:7c:11:41:e5:49:08:04:c7:6e:00:8e:05:e1:
53:ff:b7:d0:df:ed:cc:d2:53:9e:d5:56:50:e9:25:d4:4e:86:
b2:b4:42:43:90:18:06:9d:5d:5e:85:41:61:45:95:71:83:c5:
b8:53:40:7d:c0:84:2c:db:df:91:51:83:9e:5d:4d:94:77:e9:
a5:84:61:bf:3c:d5:ae:a7:79:42:74:05:32:1e:32:27:89:5a:
c6:3d:ac:7f:89:74:29:e4:21:bb:67:31:f0:7d:95:f3:c3:32:
64:57:82:c8:db:70:2f:03:9c:8d:af:61:6f:ab:8c:3c:b5:1e:
df:8b:67:c6:b2:b3:18:41:94:27:bd:29:39:29:3b:58:29:7d:
c8:98:ab:c1:15:db:f0:91:8e:14:af:eb:f4:7d:a2:46:fd:5c:
a4:73:b7:6d:24:61:61:78:86:e2:4b:e5:14:1e:7d:da:6c:be:
3f:3b:51:d1:a3:4f:49:6c:4c:a2:0f:a8:6f:41:4c:cf:68:d9:
33:43:48:b6:42:22:3a:d5:a9:e1:f7:10:92:d6:0d:2c:bf:28:
eb:eb:54:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 19:04:41 2024 by rpki-client on console-fra.rpki-client.org