Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/JPdfl966XeEoY7XFN2pwl8ThbMg.roa
File: JPdfl966XeEoY7XFN2pwl8ThbMg.roa (raw, json)
Hash identifier: LYhkcjyg4WTNudPaUhBtyMxW3SMIuMVcFZWfRnj22Cg=
Subject key identifier: 24:F7:5F:97:DE:BA:5D:E1:28:63:B5:C5:37:6A:70:97:C4:E1:6C:C8
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018A4AEAEC50B73F88F9CB19374890521D14
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/JPdfl966XeEoY7XFN2pwl8ThbMg.roa
Signing time: Thu 31 Aug 2023 09:27:04 +0000
ROA not before: Thu 31 Aug 2023 09:27:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38915
IP address blocks: 2a07:3502:1070::/48 maxlen: 48
2a07:3502:1040::/48 maxlen: 48
2a07:3500:19f8::/48 maxlen: 48
2a07:3500:19d8::/48 maxlen: 48
2a07:3500:1998::/48 maxlen: 48
2a07:3500:19e8::/48 maxlen: 48
2a07:3500:19a8::/48 maxlen: 48
2a07:3500:19a0::/48 maxlen: 48
2a07:3500:19e0::/48 maxlen: 48
2a07:3500:19f0::/48 maxlen: 48
2a07:3500:19b0::/48 maxlen: 48
2a07:3500:1200::/48 maxlen: 48
2a07:3500:1a00::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 31 Aug 2023 11:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:ea:ec:50:b7:3f:88:f9:cb:19:37:48:90:52:1d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Aug 31 09:27:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24f75f97deba5de12863b5c5376a7097c4e16cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3a:c1:a4:e2:7f:2d:07:8c:05:95:7e:53:3b:
0f:1a:a0:2f:e2:1d:a3:41:bd:11:bc:40:4c:b6:26:
3b:45:d5:2f:3e:78:ec:1f:20:d3:07:9d:2f:b1:29:
73:f4:55:2b:60:5c:91:14:2a:ff:77:43:39:67:3a:
df:cc:95:d6:c9:e5:bf:75:cc:54:a0:7d:18:e2:5b:
43:f6:a9:be:2d:ac:5c:60:22:6b:f3:03:09:59:0f:
bb:43:3a:0e:2b:5d:a6:3b:12:42:10:80:26:75:44:
be:1b:9d:4e:39:75:dc:d0:aa:53:2c:a4:3d:e9:78:
34:fb:05:86:a4:8e:be:20:71:fd:08:2e:82:1f:22:
d0:fe:c6:f4:6e:e3:6a:16:fb:40:c2:ab:c3:0a:9e:
a3:be:2d:fb:73:19:0a:0e:f5:d3:91:02:7a:b2:e3:
00:ca:60:39:ca:77:61:18:e2:97:13:79:3b:4a:1f:
11:26:c3:ad:23:02:b0:16:1d:51:78:84:8e:cf:6c:
de:ab:9a:d5:17:72:d8:29:89:18:4f:74:ab:b5:7b:
59:d1:d6:d3:b8:95:f6:c6:e9:f8:62:12:e6:7d:6a:
a4:78:03:76:a7:ff:72:71:10:07:a8:ff:51:fb:62:
8b:ed:05:20:e4:b1:5d:2b:39:20:a7:75:62:84:02:
12:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F7:5F:97:DE:BA:5D:E1:28:63:B5:C5:37:6A:70:97:C4:E1:6C:C8
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/JPdfl966XeEoY7XFN2pwl8ThbMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1200::/48
2a07:3500:1998::/48
2a07:3500:19a0::/48
2a07:3500:19a8::/48
2a07:3500:19b0::/48
2a07:3500:19d8::/48
2a07:3500:19e0::/48
2a07:3500:19e8::/48
2a07:3500:19f0::/48
2a07:3500:19f8::/48
2a07:3500:1a00::/48
2a07:3502:1040::/48
2a07:3502:1070::/48
Signature Algorithm: sha256WithRSAEncryption
4c:cf:1d:b8:45:94:67:45:80:60:38:48:fd:fe:d1:0f:ed:65:
a2:34:e1:00:76:68:4c:41:e1:8a:20:91:c6:37:77:b0:3f:71:
5a:a4:24:1d:b1:61:c8:57:0e:93:aa:50:df:ae:06:23:77:cf:
ec:e6:16:b8:6f:01:7c:0d:5b:e2:94:5e:d7:59:f4:ae:56:de:
40:47:22:2d:48:03:8b:7c:7a:df:04:3f:7d:c3:27:7a:14:43:
7f:97:f7:6d:60:91:11:e9:11:ce:29:42:de:dc:8b:86:9b:79:
d2:14:76:b0:31:77:81:e7:89:23:fb:c3:f1:ee:25:22:e2:68:
fd:11:47:84:6b:04:f9:ea:f7:cd:cf:38:61:bf:5d:ff:be:2e:
ed:15:45:d0:93:7e:cc:2e:1e:2c:f8:76:b1:5e:cb:f1:6e:d6:
bf:d4:28:57:88:53:2c:70:95:a7:b4:33:16:2b:95:99:60:b8:
8e:3b:0c:87:de:8a:e4:1f:c7:44:95:f4:69:2a:3b:65:62:93:
59:40:9c:e4:b3:aa:d7:35:f6:54:dc:03:87:ea:13:5b:39:6c:
b1:96:c6:2a:7e:1b:c3:79:9c:37:c2:01:bd:9e:23:eb:62:0e:
4d:ab:43:8b:01:0e:df:34:e1:dd:85:c4:9b:0d:f6:1a:e6:18:
98:c2:4c:6b
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgISAYpK6uxQtz+I+csZN0iQUh0UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjMwODMxMDkyNzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGY3NWY5N2RlYmE1ZGUxMjg2M2I1YzUzNzZhNzA5N2M0ZTE2Y2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjrBpOJ/LQeMBZV+UzsPGqAv4h2j
Qb0RvEBMtiY7RdUvPnjsHyDTB50vsSlz9FUrYFyRFCr/d0M5ZzrfzJXWyeW/dcxU
oH0Y4ltD9qm+LaxcYCJr8wMJWQ+7QzoOK12mOxJCEIAmdUS+G51OOXXc0KpTLKQ9
6Xg0+wWGpI6+IHH9CC6CHyLQ/sb0buNqFvtAwqvDCp6jvi37cxkKDvXTkQJ6suMA
ymA5yndhGOKXE3k7Sh8RJsOtIwKwFh1ReISOz2zeq5rVF3LYKYkYT3SrtXtZ0dbT
uJX2xun4YhLmfWqkeAN2p/9ycRAHqP9R+2KL7QUg5LFdKzkgp3VihAIS1wIDAQAB
o4ICeTCCAnUwHQYDVR0OBBYEFCT3X5feul3hKGO1xTdqcJfE4WzIMB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEvSlBkZmw5NjZYZUVvWTdYRk4ycHdsOFRoYk1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wewQCAAIwdQMHACoHNQAS
AAMHACoHNQAZmAMHACoHNQAZoAMHACoHNQAZqAMHACoHNQAZsAMHACoHNQAZ2AMH
ACoHNQAZ4AMHACoHNQAZ6AMHACoHNQAZ8AMHACoHNQAZ+AMHACoHNQAaAAMHACoH
NQIQQAMHACoHNQIQcDANBgkqhkiG9w0BAQsFAAOCAQEATM8duEWUZ0WAYDhI/f7R
D+1lojThAHZoTEHhiiCRxjd3sD9xWqQkHbFhyFcOk6pQ364GI3fP7OYWuG8BfA1b
4pRe11n0rlbeQEciLUgDi3x63wQ/fcMnehRDf5f3bWCREekRzilC3tyLhpt50hR2
sDF3geeJI/vD8e4lIuJo/RFHhGsE+er3zc84Yb9d/74u7RVF0JN+zC4eLPh2sV7L
8W7Wv9QoV4hTLHCVp7QzFiuVmWC4jjsMh96K5B/HRJX0aSo7ZWKTWUCc5LOq1zX2
VNwDh+oTWzlssZbGKn4bw3mcN8IBvZ4j62IOTatDiwEO3zTh3YXEmw32GuYYmMJM
aw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org