Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/8--lODZZ4DA-mBw1EzfCzIaBj-8.roa
File: 8--lODZZ4DA-mBw1EzfCzIaBj-8.roa (raw, json)
Hash identifier: rxejxnBtA4Z9byFbxbu5Rkz9ZEJoe93XWO/G1TU08b4=
Subject key identifier: F3:EF:A5:38:36:59:E0:30:3E:98:1C:35:13:37:C2:CC:86:81:8F:EF
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019073596DD0F0EAFE6E118EA781536A5C2C
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/8--lODZZ4DA-mBw1EzfCzIaBj-8.roa
Signing time: Tue 02 Jul 2024 12:09:18 +0000
ROA not before: Tue 02 Jul 2024 12:09:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29632
IP address blocks: 62.205.128.0/19 maxlen: 20
62.205.128.0/20 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
94.131.0.0/23 maxlen: 23
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.52.0/22 maxlen: 22
95.164.56.0/22 maxlen: 22
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.92.0/23 maxlen: 24
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
195.214.208.0/21 maxlen: 21
195.214.208.0/22 maxlen: 22
195.214.210.0/24 maxlen: 24
195.214.212.0/22 maxlen: 22
2a01:d0::/32 maxlen: 32
2a01:d0:4::/48 maxlen: 48
2a01:d0:a::/48 maxlen: 48
2a01:d0:28::/48 maxlen: 48
2a01:d0:43::/48 maxlen: 48
2a01:d0:105::/48 maxlen: 48
2a01:d0:303::/48 maxlen: 48
2a01:d0:305::/48 maxlen: 48
2a01:d0:308::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
2a01:d0:31d::/48 maxlen: 48
2a01:d0:333::/48 maxlen: 48
2a01:d0:962::/48 maxlen: 48
2a01:d0:1657::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 26 Jul 2024 14:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:73:59:6d:d0:f0:ea:fe:6e:11:8e:a7:81:53:6a:5c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jul 2 12:09:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3efa5383659e0303e981c351337c2cc86818fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:25:d9:40:a4:a5:f5:ac:47:72:2b:df:23:
ee:cc:34:6c:b2:db:de:aa:c8:8e:19:45:6e:c4:95:
e2:81:ed:6f:96:b6:04:76:bc:b0:14:07:6c:de:35:
9c:a5:56:7e:5b:64:f9:2d:e2:c1:d5:54:5a:96:ca:
6e:07:fa:6c:3c:bb:e4:00:db:6c:71:2d:90:4e:54:
1e:fa:38:31:4e:2d:a9:9f:c9:f5:2b:00:75:f3:38:
10:e5:c4:71:33:d1:d5:f4:74:6e:9f:ff:09:f5:64:
77:9d:de:8e:1b:5f:00:47:3b:2b:bd:e9:44:f8:03:
0f:51:84:d7:79:d3:c6:58:eb:5c:a4:67:28:cf:05:
97:b3:39:63:fe:3f:b9:74:4f:4f:66:d0:cc:c8:65:
b7:2e:ce:1c:20:51:cb:4e:06:06:00:4c:2a:0f:51:
c0:84:a7:55:a5:2e:3d:28:bb:62:30:51:ea:7e:d8:
84:4f:ae:d5:f8:2c:6c:76:69:8c:5c:36:c5:d0:b3:
37:a6:11:99:7f:85:5d:0c:72:d5:be:bc:e2:e6:50:
00:9b:76:73:17:13:26:c6:e7:46:7f:c0:2a:c8:e2:
60:0a:c4:1e:ad:63:a4:0d:7a:d1:ec:4e:1d:e8:25:
9e:80:12:05:7c:05:54:bd:f3:4f:d2:f9:46:a6:1a:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EF:A5:38:36:59:E0:30:3E:98:1C:35:13:37:C2:CC:86:81:8F:EF
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/8--lODZZ4DA-mBw1EzfCzIaBj-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0-95.164.59.255
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.92.0/23
95.164.170.0-95.164.175.255
195.214.208.0/21
IPv6:
2a01:d0::/32
Signature Algorithm: sha256WithRSAEncryption
26:05:29:2f:36:f6:ab:55:33:12:d0:0f:3e:03:11:9b:5e:14:
82:e0:eb:45:06:4d:af:80:19:74:a2:b0:56:76:9e:6a:87:1d:
01:32:f8:d7:d8:eb:77:a5:59:36:59:c3:bf:db:12:02:b4:e5:
3f:3a:66:d5:82:64:a8:52:f2:eb:16:7a:47:ff:21:bc:0e:3a:
7f:cf:be:3f:4e:ef:79:f8:4b:96:29:b1:34:37:99:bf:5d:46:
8e:8e:cb:25:78:f6:a6:25:a3:a6:82:6c:bb:18:b7:9b:c6:50:
2d:4a:6e:6d:91:88:f9:c5:52:a4:3b:f9:2f:c2:a6:31:5f:b3:
df:4e:c5:18:11:29:7b:36:33:2c:a2:f6:b7:bf:2a:fc:0e:c3:
7a:35:0b:9e:d5:4f:eb:b5:3a:be:14:4b:96:39:ee:1b:ca:ee:
7b:03:1f:be:cb:f7:4a:5e:02:08:94:fd:6a:54:ec:5e:4b:f0:
b9:27:88:76:46:f4:66:01:41:ff:16:4c:e6:57:6c:6b:d1:32:
58:af:37:e1:e2:a9:d9:3f:fe:18:f3:7a:d5:8f:c7:a1:2f:77:
80:08:5c:a9:d2:ac:d7:00:16:28:21:b3:30:e4:25:c2:8e:39:
42:29:41:01:79:cd:da:8d:e3:1a:7b:23:88:89:85:6d:42:88:
09:39:27:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 16:29:27 2024 by rpki-client on console-fra.rpki-client.org