Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/52O9f5883pg0GxT3Yc4qz9uPcug.roa
File: 52O9f5883pg0GxT3Yc4qz9uPcug.roa (raw, json)
Hash identifier: KsV6V60JuvlB4B6maoBFDlNw5SFUsGwFVcCujZvc3Sw=
Subject key identifier: E7:63:BD:7F:9F:3C:DE:98:34:1B:14:F7:61:CE:2A:CF:DB:8F:72:E8
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0191B845B853CAE8C7F2861FE0AAF84EB06B
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/52O9f5883pg0GxT3Yc4qz9uPcug.roa
Signing time: Tue 03 Sep 2024 14:24:22 +0000
ROA not before: Tue 03 Sep 2024 14:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8772
IP address blocks: 62.205.128.0/19 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
94.131.0.0/23 maxlen: 23
94.131.0.0/24 maxlen: 24
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
94.131.124.0/24 maxlen: 24
94.131.127.0/24 maxlen: 24
95.164.12.0/23 maxlen: 23
95.164.15.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.52.0/22 maxlen: 22
95.164.56.0/22 maxlen: 22
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.90.0/24 maxlen: 24
95.164.92.0/24 maxlen: 24
95.164.120.0/24 maxlen: 24
95.164.121.0/24 maxlen: 24
95.164.122.0/24 maxlen: 24
95.164.123.0/24 maxlen: 24
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
95.164.248.0/23 maxlen: 23
95.164.251.0/24 maxlen: 24
195.214.208.0/21 maxlen: 21
195.214.208.0/22 maxlen: 22
195.214.210.0/24 maxlen: 24
195.214.212.0/22 maxlen: 22
2a01:d0::/32 maxlen: 32
2a01:d0:4::/48 maxlen: 48
2a01:d0:a::/48 maxlen: 48
2a01:d0:28::/48 maxlen: 48
2a01:d0:3b::/48 maxlen: 48
2a01:d0:43::/48 maxlen: 48
2a01:d0:105::/48 maxlen: 48
2a01:d0:303::/48 maxlen: 48
2a01:d0:305::/48 maxlen: 48
2a01:d0:308::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
2a01:d0:31d::/48 maxlen: 48
2a01:d0:333::/48 maxlen: 48
2a01:d0:962::/48 maxlen: 48
2a01:d0:1657::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 04 Sep 2024 11:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:45:b8:53:ca:e8:c7:f2:86:1f:e0:aa:f8:4e:b0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Sep 3 14:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e763bd7f9f3cde98341b14f761ce2acfdb8f72e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:2b:f7:70:a6:77:fc:67:65:de:79:38:70:
de:d2:62:0d:f1:ba:7a:45:13:f0:71:f2:12:4e:25:
b4:04:ce:50:10:1e:91:cd:5d:e7:b6:65:f2:ec:76:
91:78:23:b0:18:e3:54:5b:af:88:2f:d1:95:1f:68:
ee:82:76:a9:77:cf:90:a5:80:44:a0:0f:ae:7f:96:
61:13:0d:39:62:30:a1:1c:91:58:c5:05:f6:91:0a:
95:30:43:02:57:78:06:e8:04:46:d2:ae:49:3f:da:
1c:ec:22:08:6e:9c:2f:19:84:6c:f5:33:28:23:c7:
d4:9d:7f:f6:9e:ee:fe:ba:1b:cc:e1:cc:23:3b:c8:
e3:dd:00:af:53:dc:52:82:62:7c:96:b9:cb:10:2a:
e6:43:2a:50:0e:df:92:31:7c:da:a1:35:98:08:34:
3c:69:48:a1:03:56:1b:c0:e9:d3:14:f2:c3:3e:c0:
78:15:de:4c:6d:44:b8:03:d9:40:f8:bc:98:2a:94:
b6:63:51:cf:0d:09:a9:15:0d:5d:23:27:84:2c:f1:
58:a9:5d:33:2a:6d:40:7e:2a:e5:f0:88:73:ae:ea:
60:53:42:4f:e5:7e:66:b1:f6:72:64:23:60:a2:98:
2a:18:26:62:2b:92:a4:d8:ac:80:99:3b:1c:b6:5f:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:63:BD:7F:9F:3C:DE:98:34:1B:14:F7:61:CE:2A:CF:DB:8F:72:E8
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/52O9f5883pg0GxT3Yc4qz9uPcug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
94.131.124.0/24
94.131.127.0/24
95.164.12.0/23
95.164.15.0/24
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0-95.164.59.255
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.90.0/24
95.164.92.0/24
95.164.120.0/22
95.164.170.0-95.164.175.255
95.164.248.0/23
95.164.251.0/24
195.214.208.0/21
IPv6:
2a01:d0::/32
Signature Algorithm: sha256WithRSAEncryption
48:9d:8a:f8:84:21:b8:d2:41:60:de:0a:e2:0b:17:fa:45:d5:
5e:a0:30:3d:a1:48:b2:52:47:29:d3:f6:34:3f:68:4f:7b:e3:
7c:07:bc:b2:f8:0c:61:54:75:24:9a:b4:e6:54:29:d6:21:f0:
c9:be:ba:93:5d:a9:96:bd:9d:7d:c4:cf:6f:68:b4:04:7f:ba:
8f:bc:fb:1a:42:65:ce:8a:e1:dc:bf:21:5f:6c:77:2c:92:e3:
d6:56:3c:e2:38:de:be:d7:e5:63:66:0c:c1:c2:1f:10:b5:4b:
8f:a2:33:10:4c:ae:6b:13:93:24:bc:b4:19:0d:0d:72:b7:ea:
c2:38:5c:93:47:19:e8:b4:d2:87:91:06:78:47:d9:aa:c6:26:
53:54:92:22:e3:d7:ab:a6:4f:a2:1a:9a:f5:d0:9e:d4:9d:69:
da:0f:c8:7f:28:56:51:03:c4:52:8b:81:46:9f:32:80:0c:63:
01:3c:10:11:14:00:b9:49:e3:af:0e:66:80:3d:26:c0:92:a4:
7d:6b:78:ad:05:c6:ff:82:bb:1f:a5:14:0c:51:ef:88:cc:22:
4b:6d:f1:ef:a7:55:d1:91:92:91:78:c1:03:73:35:e5:e6:77:
15:14:a9:e6:9a:fd:a5:2a:46:9e:a6:19:ae:2b:a9:6f:b9:e4:
a6:81:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 15:47:28 2024 by rpki-client on console-ams.rpki-client.org