Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/tPz9AxJ43bYcWmg6zJAddNEZpAo.roa
File: tPz9AxJ43bYcWmg6zJAddNEZpAo.roa (raw, json)
Hash identifier: egLcagnpn9esGS4KvUjkRQ27bZoyGFdH6s2ZtIaQe2U=
Subject key identifier: B4:FC:FD:03:12:78:DD:B6:1C:5A:68:3A:CC:90:1D:74:D1:19:A4:0A
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 01887D2C94C0030D114E57CC0B29BE4AF858
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/tPz9AxJ43bYcWmg6zJAddNEZpAo.roa
Signing time: Fri 02 Jun 2023 17:34:13 +0000
ROA not before: Fri 02 Jun 2023 17:34:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3360
IP address blocks: 2a03:5000:162::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:1::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Jun 2023 11:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:2c:94:c0:03:0d:11:4e:57:cc:0b:29:be:4a:f8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jun 2 17:34:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4fcfd031278ddb61c5a683acc901d74d119a40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:50:3a:87:7c:a7:1f:04:b9:a5:4f:8e:4f:7e:
4b:dc:10:68:3a:c7:bf:90:88:23:03:2d:94:d4:a6:
77:31:7e:96:0b:a3:32:79:a2:9e:d9:95:54:58:70:
d8:a2:0e:3f:11:9c:0a:35:87:2d:dc:ed:94:95:02:
14:20:89:fd:00:4c:dd:e5:14:41:b6:0b:0e:9c:f7:
04:e9:49:df:c2:52:9b:50:b3:3a:8c:8c:91:07:6c:
97:e1:d5:91:be:35:02:45:1f:54:8c:11:1a:7a:fb:
2e:9c:5c:49:f9:4a:db:ff:33:a8:5d:e0:95:91:99:
16:96:5a:0f:43:94:3d:27:1c:cd:0e:d6:70:31:25:
b5:1c:dd:f2:74:2c:88:bc:6e:8c:34:6e:b9:af:84:
2d:6a:a4:12:3d:58:0f:4f:13:ec:27:41:60:bd:39:
04:66:8d:3e:f2:c1:a4:8d:8b:7a:d0:71:fd:12:69:
a7:c1:4a:89:39:7d:a9:9c:12:93:d3:fd:29:56:57:
6b:b9:f5:4c:ed:96:44:2c:c4:8b:ca:3b:19:c9:57:
18:5c:c0:ec:e4:5a:d8:32:0a:6b:db:d5:6e:a1:ba:
d7:5d:df:d9:4c:3e:59:c1:1d:c4:c2:27:75:b2:11:
88:45:60:e8:b7:63:60:8b:17:fd:b7:28:8f:ff:17:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FC:FD:03:12:78:DD:B6:1C:5A:68:3A:CC:90:1D:74:D1:19:A4:0A
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/tPz9AxJ43bYcWmg6zJAddNEZpAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:21::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:31::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::/48
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5d:39:16:90:9d:ac:45:10:ba:df:16:29:40:51:28:ba:12:ba:
d6:12:1f:77:e4:94:eb:74:fa:e0:12:ab:3d:fa:22:9c:34:f4:
0c:41:e4:b8:c4:56:76:c6:85:d4:8d:98:68:04:92:7b:c8:8d:
64:6b:c6:43:99:1d:0b:a7:fa:cb:fe:4b:a0:b0:12:95:a0:ba:
a7:34:ab:a5:81:ed:16:0f:92:44:84:d5:52:d3:7f:f3:f7:6b:
2f:88:f2:e6:f6:bc:35:ee:e6:61:cb:35:9c:23:79:5b:b1:e7:
1b:62:ab:34:e0:9b:6b:1a:b7:6d:ee:0e:d0:cd:ba:42:b1:03:
49:77:bb:0f:af:e8:1c:9c:32:a3:60:a2:df:51:ed:8e:97:d3:
77:0a:c8:40:04:84:c4:79:fb:67:94:78:f8:1a:63:b1:64:e1:
0e:af:36:82:10:75:e0:e9:9f:c1:69:24:f7:58:70:25:74:1a:
ec:8f:37:56:db:75:07:56:51:ed:c3:16:6c:59:a7:9c:80:11:
70:00:27:f2:a8:f0:11:96:b4:c0:32:cf:ef:a0:1f:dc:70:e4:
e4:f6:46:76:bd:b0:4d:58:c9:6e:97:d9:b5:9e:8a:e1:8a:2f:
b1:c8:6e:ee:99:74:c5:51:97:fd:2a:fe:71:bf:3a:16:1d:92:
75:1c:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:11 2024 by rpki-client on console-fra.rpki-client.org