Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/gjKJQJCnOMd-W-f_cU5jE-20vAc.roa
File: gjKJQJCnOMd-W-f_cU5jE-20vAc.roa (raw, json)
Hash identifier: 6fYncPSqAq58tYOD0oP8VQQ9299dnwzCV14D9yY72ls=
Subject key identifier: 82:32:89:40:90:A7:38:C7:7E:5B:E7:FF:71:4E:63:13:ED:B4:BC:07
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 0192B8ED5E8C343AD85826B711E7A8D498F7
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/gjKJQJCnOMd-W-f_cU5jE-20vAc.roa
Signing time: Wed 23 Oct 2024 10:30:16 +0000
ROA not before: Wed 23 Oct 2024 10:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25447
IP address blocks: 62.93.64.0/19 maxlen: 19
62.93.68.0/24 maxlen: 24
62.93.73.0/24 maxlen: 24
62.93.74.0/24 maxlen: 24
62.93.76.0/24 maxlen: 24
62.93.88.0/24 maxlen: 24
62.93.96.0/20 maxlen: 20
62.93.96.0/21 maxlen: 21
62.93.104.0/21 maxlen: 24
62.93.112.0/22 maxlen: 22
62.93.120.0/21 maxlen: 21
82.192.0.0/19 maxlen: 19
82.192.0.0/23 maxlen: 23
82.192.5.0/24 maxlen: 24
82.192.6.0/24 maxlen: 24
82.192.18.0/24 maxlen: 24
85.13.0.0/18 maxlen: 18
85.13.2.0/24 maxlen: 24
85.13.8.0/24 maxlen: 24
85.13.14.0/24 maxlen: 24
85.13.16.0/24 maxlen: 24
176.61.160.0/19 maxlen: 24
188.117.192.0/18 maxlen: 18
188.117.200.0/22 maxlen: 22
188.117.208.0/22 maxlen: 22
188.117.220.0/22 maxlen: 22
188.117.240.0/20 maxlen: 20
217.16.112.0/20 maxlen: 20
217.16.113.0/24 maxlen: 24
217.16.114.0/24 maxlen: 24
217.16.124.0/24 maxlen: 24
217.16.127.0/24 maxlen: 24
217.199.80.0/20 maxlen: 20
217.199.83.0/24 maxlen: 24
217.199.90.0/24 maxlen: 24
2a03:4e40::/29 maxlen: 29
2a03:4e40::/32 maxlen: 32
2a03:4e47::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 15 Nov 2024 13:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b8:ed:5e:8c:34:3a:d8:58:26:b7:11:e7:a8:d4:98:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Oct 23 10:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8232894090a738c77e5be7ff714e6313edb4bc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:ba:4c:aa:1c:a2:2e:c8:ef:8e:c7:f5:2f:
78:36:eb:e3:9f:1c:60:0c:71:10:64:4b:5f:80:55:
1c:1c:02:19:73:80:b7:9d:f6:d6:cb:3d:c0:c7:fe:
50:70:b9:16:a6:6a:0f:e6:c7:80:04:23:37:8b:f7:
7f:8a:bc:f9:1e:8a:bc:c8:eb:e3:19:ec:5b:cb:da:
6b:7c:b7:96:f4:da:f8:2a:61:b5:b0:03:54:a1:b4:
b7:70:5d:63:93:ae:ff:27:f8:fb:d9:bc:77:bd:69:
fa:82:43:cb:44:58:2b:b7:72:03:9c:c1:6c:82:f9:
51:1d:10:87:74:ee:c5:c0:37:fb:e4:56:3d:dc:a3:
e6:2f:d4:9e:cd:7c:9c:76:5f:17:ae:78:06:6a:32:
2a:31:c6:37:8a:99:47:42:c3:c8:0a:09:6e:ac:41:
53:aa:2f:18:96:fc:d7:13:3a:52:29:57:89:70:b0:
db:b6:4c:e3:a6:dc:58:c6:33:10:1e:66:bb:29:bf:
05:dd:64:b6:94:d3:20:0a:75:55:22:a0:ca:03:87:
70:4a:21:c8:65:70:7f:d3:10:b2:fb:ac:68:7c:0e:
68:35:4b:66:ee:0b:56:cc:69:05:ea:f9:ed:d2:a6:
b7:93:72:8b:c0:ee:d7:16:24:50:11:f0:2a:91:f9:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:32:89:40:90:A7:38:C7:7E:5B:E7:FF:71:4E:63:13:ED:B4:BC:07
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/gjKJQJCnOMd-W-f_cU5jE-20vAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.64.0-62.93.115.255
62.93.120.0/21
82.192.0.0/19
85.13.0.0/18
176.61.160.0/19
188.117.192.0/18
217.16.112.0/20
217.199.80.0/20
IPv6:
2a03:4e40::/29
Signature Algorithm: sha256WithRSAEncryption
64:6d:02:be:a6:08:8b:a8:e0:1e:81:63:59:85:34:ed:16:a5:
e4:59:cf:0e:03:c8:69:67:89:de:ba:c5:ce:2b:06:5f:7a:9a:
17:d6:66:b6:73:10:3d:2f:cf:f3:90:79:cb:1b:b4:c2:f5:de:
99:eb:1c:42:a7:f5:85:e1:a7:5f:84:7e:31:4c:a3:47:e8:66:
42:a4:15:39:a8:42:d3:18:0c:e8:36:19:8f:8f:04:c5:3b:1f:
0d:00:bb:16:0b:bd:f4:7a:e2:29:99:17:81:14:00:58:2d:33:
80:74:29:68:db:2c:bb:fe:e0:91:fa:ff:40:e3:9b:05:5d:60:
dd:3d:8e:c7:63:c7:b8:a6:16:44:3d:65:5e:42:a3:61:0e:00:
5f:cd:72:68:53:9e:d6:7d:86:be:fa:9c:75:8a:ca:61:49:7a:
49:51:7b:47:34:f3:0e:4e:cb:99:d0:3b:ae:15:c2:e0:be:8a:
8d:31:26:22:e2:b5:da:36:b7:53:fb:78:11:42:8b:6c:dc:36:
25:72:1b:24:63:0f:fb:79:4d:9e:95:18:14:44:0c:17:a9:ee:
65:3d:40:84:f2:bc:79:4c:09:46:25:98:5c:16:ee:d9:12:0f:
33:b3:f4:cc:11:42:1f:9d:cb:8b:33:9e:48:c9:65:ce:6b:c9:
31:55:ee:0e
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgISAZK47V6MNDrYWCa3Eeeo1Jj3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2
Y2NjYTUwHhcNMjQxMDIzMTAzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjMyODk0MDkwYTczOGM3N2U1YmU3ZmY3MTRlNjMxM2VkYjRiYzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlO6TKocoi7I747H9S94Nuvjnxxg
DHEQZEtfgFUcHAIZc4C3nfbWyz3Ax/5QcLkWpmoP5seABCM3i/d/irz5Hoq8yOvj
Gexby9prfLeW9Nr4KmG1sANUobS3cF1jk67/J/j72bx3vWn6gkPLRFgrt3IDnMFs
gvlRHRCHdO7FwDf75FY93KPmL9SezXycdl8XrngGajIqMcY3iplHQsPICglurEFT
qi8YlvzXEzpSKVeJcLDbtkzjptxYxjMQHma7Kb8F3WS2lNMgCnVVIqDKA4dwSiHI
ZXB/0xCy+6xofA5oNUtm7gtWzGkF6vnt0qa3k3KLwO7XFiRQEfAqkfnhyQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFIIyiUCQpzjHflvn/3FOYxPttLwHMB8GA1UdIwQY
MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt
NTMwNDYzMjM5NTFmLzEvZ2pLSlFKQ25PTWQtVy1mX2NVNWpFLTIwdkFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm
LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA+BAIAATA4MAwDBAY+XUAD
BAI+XXADBAM+XXgDBAVSwAADBAZVDQADBAWwPaADBAa8dcADBATZEHADBATZx1Aw
DQQCAAIwBwMFAyoDTkAwDQYJKoZIhvcNAQELBQADggEBAGRtAr6mCIuo4B6BY1mF
NO0WpeRZzw4DyGlnid66xc4rBl96mhfWZrZzED0vz/OQecsbtML13pnrHEKn9YXh
p1+EfjFMo0foZkKkFTmoQtMYDOg2GY+PBMU7Hw0AuxYLvfR64imZF4EUAFgtM4B0
KWjbLLv+4JH6/0DjmwVdYN09jsdjx7imFkQ9ZV5Co2EOAF/NcmhTntZ9hr76nHWK
ymFJeklRe0c08w5Oy5nQO64VwuC+io0xJiLitdo2t1P7eBFCi2zcNiVyGyRjD/t5
TZ6VGBREDBep7mU9QITyvHlMCUYlmFwW7tkSDzOz9MwRQh+dy4sznkjJZc5ryTFV
7g4=
-----END CERTIFICATE-----
Generated at Fri Nov 15 16:28:32 2024 by rpki-client on console-fra.rpki-client.org