Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/1KVrN6PZ5R6MpkvGA22fxhTLnmI.roa
File: 1KVrN6PZ5R6MpkvGA22fxhTLnmI.roa (raw, json)
Hash identifier: 0enlL8M0d0Sj2MbVqy74CQbDGBbv7d+AufAS6wbQITA=
Subject key identifier: D4:A5:6B:37:A3:D9:E5:1E:8C:A6:4B:C6:03:6D:9F:C6:14:CB:9E:62
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0193A8AEB7BACE027D1745813246215AEB71
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/1KVrN6PZ5R6MpkvGA22fxhTLnmI.roa
Signing time: Sun 08 Dec 2024 23:50:42 +0000
ROA not before: Sun 08 Dec 2024 23:50:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29632
IP address blocks: 62.205.128.0/19 maxlen: 20
62.205.128.0/20 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
94.131.0.0/23 maxlen: 23
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.52.0/22 maxlen: 22
95.164.56.0/22 maxlen: 22
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
195.214.212.0/22 maxlen: 22
2a01:d0:303::/48 maxlen: 48
2a01:d0:305::/48 maxlen: 48
2a01:d0:308::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
2a01:d0:31d::/48 maxlen: 48
2a01:d0:333::/48 maxlen: 48
2a01:d0:962::/48 maxlen: 48
2a01:d0:1657::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 20 Dec 2024 08:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a8:ae:b7:ba:ce:02:7d:17:45:81:32:46:21:5a:eb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Dec 8 23:50:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4a56b37a3d9e51e8ca64bc6036d9fc614cb9e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:95:e1:31:f9:e2:d7:08:f6:f0:b1:a8:1c:
34:25:d0:c9:c8:ec:5b:3c:ab:e6:1e:88:33:01:9c:
03:4d:ce:05:75:d7:f8:af:d7:7d:b6:e3:57:0e:a8:
a4:c2:f2:e9:26:32:f2:31:e8:53:51:cc:d6:d5:02:
b4:48:58:d1:5f:22:9c:30:06:80:ee:d5:9b:09:87:
70:80:2d:46:79:b1:51:6c:44:e6:1d:d1:61:d1:28:
4b:0f:e8:32:16:5d:bc:d8:ac:40:3e:9f:af:09:bd:
c8:a7:dc:f0:64:54:ff:b1:15:6a:5e:95:49:49:16:
66:e7:b0:d1:38:7f:b1:6d:67:92:32:b7:43:9e:96:
7b:4c:23:90:69:e4:b6:39:33:5e:b0:dd:ec:d0:b9:
7e:a2:01:1b:ef:da:c9:3d:54:09:e4:c0:6f:f9:6f:
8c:b5:75:c3:dd:59:10:20:ff:a1:12:36:28:87:15:
e2:ae:62:00:c5:ff:1b:87:74:b1:26:70:92:a6:73:
0f:c7:f9:05:01:c7:2b:2e:74:d2:64:49:60:3e:b3:
4d:20:9c:a0:75:9c:ce:39:54:0a:8a:67:64:e5:10:
03:2f:8e:00:5d:18:9e:f6:3c:bd:4a:de:be:67:c0:
55:12:76:0a:6c:5c:0c:a7:1c:5d:40:b9:2f:1e:d7:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A5:6B:37:A3:D9:E5:1E:8C:A6:4B:C6:03:6D:9F:C6:14:CB:9E:62
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/1KVrN6PZ5R6MpkvGA22fxhTLnmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0-95.164.59.255
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.170.0-95.164.175.255
195.214.212.0/22
IPv6:
2a01:d0:303::/48
2a01:d0:305::/48
2a01:d0:308::/48
2a01:d0:317::/48
2a01:d0:31d::/48
2a01:d0:333::/48
2a01:d0:962::/48
2a01:d0:1657::/48
2a01:d0:7fff::-2a01:d0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
16:14:4b:cf:46:7b:2b:3a:18:ee:86:fb:e6:66:1f:59:9b:dc:
ce:5b:b7:ea:03:1e:ca:28:d6:fe:f9:2f:66:65:63:a8:58:c1:
f7:41:1a:0c:2e:a9:cd:42:de:17:73:07:f6:d8:cf:7f:84:de:
86:33:57:11:67:65:ea:51:79:b1:dd:d5:59:f2:ba:d1:5d:0b:
c4:03:6e:e1:2f:5a:59:08:b3:33:05:e7:a9:4c:b8:25:66:e6:
af:a1:9c:2f:6e:f6:52:c7:28:0e:c6:8e:5a:66:64:61:db:83:
d8:80:18:d7:b0:42:6f:de:c9:33:75:db:ae:02:d1:9e:22:ad:
e1:bb:44:ae:93:00:ad:76:06:1a:58:75:f5:0f:e3:2d:4a:7a:
91:e2:ce:54:66:31:dd:14:20:83:6a:bd:1e:cd:74:1e:ee:dd:
81:6a:b8:36:15:c1:ff:88:ed:6f:aa:87:68:00:12:1e:6b:76:
90:e8:d2:dc:9d:6d:48:3a:ef:02:74:b7:9b:4e:52:26:b0:14:
6a:d9:7a:66:54:c3:27:a0:bb:e4:3f:79:aa:27:8e:d1:51:56:
10:fd:c6:33:5e:cd:11:e2:01:a0:a9:1d:92:04:14:06:f3:b9:
3d:3a:e6:42:94:9c:75:42:1a:8f:f8:6c:92:6a:2a:2a:41:e8:
f5:97:b9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:17 2025 by rpki-client