Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5u1msC24WjlNr9Qkwq1lNLmc5Ag.roa
File: 5u1msC24WjlNr9Qkwq1lNLmc5Ag.roa (raw, json)
Hash identifier: Y5G21jG731RGx+Ct7HjJF9+7vdBWmhu9Cj4wfXG7OLs=
Subject key identifier: E6:ED:66:B0:2D:B8:5A:39:4D:AF:D4:24:C2:AD:65:34:B9:9C:E4:08
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01900CE68EBA80A1A4C92C1DBFCEF3288472
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5u1msC24WjlNr9Qkwq1lNLmc5Ag.roa
Signing time: Wed 12 Jun 2024 14:42:34 +0000
ROA not before: Wed 12 Jun 2024 14:42:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12381
IP address blocks: 192.71.84.0/24 maxlen: 24
192.121.86.0/24 maxlen: 24
192.121.100.0/24 maxlen: 24
192.121.121.0/24 maxlen: 24
194.14.3.0/24 maxlen: 24
194.68.48.0/24 maxlen: 24
194.71.2.0/24 maxlen: 24
194.71.25.0/24 maxlen: 24
2a01:280:1::/48 maxlen: 48
2a01:280:4::/48 maxlen: 48
2a01:280:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 20 Jun 2024 12:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0c:e6:8e:ba:80:a1:a4:c9:2c:1d:bf:ce:f3:28:84:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 12 14:42:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6ed66b02db85a394dafd424c2ad6534b99ce408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:29:0d:33:0d:c2:8c:ef:e3:71:2d:41:33:06:
46:c8:68:1a:85:d6:13:6c:f7:88:60:e5:eb:4f:13:
a6:57:3a:8b:12:be:64:5c:e5:f6:e8:12:93:21:5e:
af:51:2b:ac:52:7e:f2:8a:ff:3a:4d:d5:5f:2b:1b:
f9:65:ee:36:31:39:61:2e:50:7c:80:c8:1c:f0:c1:
fa:1d:00:7d:a4:78:c5:a4:f1:f7:66:e7:9e:c4:27:
53:9f:2f:fe:56:87:44:7f:b3:54:89:ec:08:da:14:
c1:36:10:1d:42:f2:cd:64:37:cc:22:47:cf:00:f4:
0f:7a:df:78:40:90:3d:ee:3d:07:cb:ff:22:e8:d4:
03:93:70:d8:ce:57:90:3d:dd:4c:d2:61:d0:01:27:
5d:37:0e:34:fc:82:6e:89:7d:0f:9a:9d:ad:d6:64:
03:0b:fb:f1:81:49:2f:9a:88:a8:b7:33:31:f0:0b:
a2:26:6f:d3:9d:4c:5a:1c:a0:9d:7c:df:8d:cb:ee:
9c:fd:8a:75:bd:ed:ca:3d:37:e2:be:b2:9d:4e:31:
28:1c:6c:77:92:43:a2:80:da:3d:6c:e5:13:c8:61:
ec:22:1d:f4:b3:ab:3e:dc:f5:97:af:a9:79:63:ff:
15:2d:6d:f3:97:56:eb:70:4d:73:fe:b4:c0:3a:51:
f8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:ED:66:B0:2D:B8:5A:39:4D:AF:D4:24:C2:AD:65:34:B9:9C:E4:08
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5u1msC24WjlNr9Qkwq1lNLmc5Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.84.0/24
192.121.86.0/24
192.121.100.0/24
192.121.121.0/24
194.14.3.0/24
194.68.48.0/24
194.71.2.0/24
194.71.25.0/24
IPv6:
2a01:280:1::/48
2a01:280:4::/47
Signature Algorithm: sha256WithRSAEncryption
46:6f:0b:63:a7:f2:ba:9d:93:46:9c:6b:7a:e5:db:1d:f9:3b:
61:ea:2b:6b:5c:77:04:4a:d7:25:07:98:68:6d:8a:10:60:d2:
8d:fd:75:e6:ff:ce:06:fa:a2:e9:2b:8d:50:54:1d:c7:e6:73:
aa:b2:52:3d:74:9d:65:b4:2d:53:fe:72:93:82:64:77:9d:ec:
4c:1d:2b:56:f7:45:d7:fd:c4:96:f0:d1:ce:0b:a2:7f:7d:ff:
48:c7:a6:9d:20:0f:a9:19:89:c8:68:63:73:28:56:0d:f4:51:
c7:c9:a7:8d:60:c3:23:5f:e5:e0:87:ce:4b:ae:4a:2f:0c:b6:
ec:a2:e1:b9:0d:23:99:48:20:f3:4e:0f:e4:2d:1f:4e:43:f4:
ef:1d:69:b2:56:76:4a:7a:8c:f8:5e:12:87:2a:49:ea:bf:f2:
21:5f:be:90:3e:23:a7:6f:6b:55:84:b4:3e:42:67:77:56:1e:
f7:70:7b:12:67:79:84:c9:f5:7a:2f:b2:9a:ed:4d:52:44:9f:
f3:9b:96:17:dd:08:f3:16:51:4d:20:7d:83:14:0a:86:27:3d:
0a:99:cd:0f:17:10:db:b2:e4:ca:c7:f8:1b:2a:ce:1d:73:81:
43:ab:e5:cf:6d:64:2e:0d:01:fa:34:2f:d9:b6:83:33:8f:e0:
60:72:31:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:26 2025 by rpki-client