Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/JTWVxzAbpBlS-gX33-nSf20SsKA.roa
File: JTWVxzAbpBlS-gX33-nSf20SsKA.roa (raw, json)
Hash identifier: I3YhobtYI1QqhlkQNdbGtG/6fm/jXEb9ynSadz1z8I4=
Subject key identifier: 25:35:95:C7:30:1B:A4:19:52:FA:05:F7:DF:E9:D2:7F:6D:12:B0:A0
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018E67E7C00E46E07CE8B98A1E53D5860B1C
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/JTWVxzAbpBlS-gX33-nSf20SsKA.roa
Signing time: Fri 22 Mar 2024 20:43:45 +0000
ROA not before: Fri 22 Mar 2024 20:43:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8772
IP address blocks: 62.205.128.0/19 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
94.131.0.0/23 maxlen: 23
94.131.0.0/24 maxlen: 24
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
94.131.124.0/24 maxlen: 24
94.131.127.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.52.0/22 maxlen: 22
95.164.56.0/22 maxlen: 22
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.92.0/22 maxlen: 22
95.164.120.0/24 maxlen: 24
95.164.123.0/24 maxlen: 24
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
95.164.248.0/23 maxlen: 23
95.164.251.0/24 maxlen: 24
195.214.208.0/21 maxlen: 21
195.214.208.0/22 maxlen: 22
195.214.210.0/24 maxlen: 24
195.214.212.0/22 maxlen: 22
2a01:d0::/32 maxlen: 32
2a01:d0:a::/48 maxlen: 48
2a01:d0:3b::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 25 Mar 2024 23:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:67:e7:c0:0e:46:e0:7c:e8:b9:8a:1e:53:d5:86:0b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Mar 22 20:43:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=253595c7301ba41952fa05f7dfe9d27f6d12b0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f8:d7:86:c6:26:6b:ff:8d:da:00:99:ca:ff:
a3:bb:de:05:0d:e4:ac:80:6e:5d:47:9d:b8:06:5c:
e9:98:b8:41:d7:f6:4e:f9:b0:33:e3:76:e7:cf:e7:
86:3b:41:ef:d5:ed:a2:b5:89:29:a5:6a:4a:76:d0:
0a:ad:5e:fb:cb:8e:dc:57:3a:2d:1b:1c:9f:d7:e7:
e1:af:4d:df:e4:36:fc:38:aa:fb:4b:33:61:07:98:
5b:3e:b4:20:26:40:59:37:e6:3d:17:d3:7c:ae:e9:
ad:f7:e3:6e:aa:32:f8:88:ff:f0:1e:62:1a:07:8f:
71:2a:f6:33:6e:6b:2c:85:8e:f9:a6:f9:6b:b0:2f:
85:92:cd:8c:84:07:5e:42:cc:8e:e5:78:97:8a:38:
ca:b9:8e:65:b3:b4:3e:05:dd:b6:fe:d0:59:e7:06:
89:66:f7:89:00:de:48:2a:5e:ca:b5:41:93:8f:1f:
50:64:b6:7f:12:00:58:0e:cd:20:9f:15:c4:30:4b:
ae:5c:98:d3:37:11:9d:38:91:e3:14:0c:86:e0:37:
8b:be:fb:31:00:ba:ca:2f:b4:d0:1e:61:67:2a:08:
89:6b:c6:1b:07:a7:d3:a0:17:5a:ec:ea:29:b2:81:
ca:87:d8:0d:86:30:8f:ca:1c:ad:25:4e:12:c6:6b:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:35:95:C7:30:1B:A4:19:52:FA:05:F7:DF:E9:D2:7F:6D:12:B0:A0
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/JTWVxzAbpBlS-gX33-nSf20SsKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
94.131.124.0/24
94.131.127.0/24
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0-95.164.59.255
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.92.0/22
95.164.120.0/24
95.164.123.0/24
95.164.170.0-95.164.175.255
95.164.248.0/23
95.164.251.0/24
195.214.208.0/21
IPv6:
2a01:d0::/32
Signature Algorithm: sha256WithRSAEncryption
4b:6d:f1:1f:10:7b:04:55:2b:27:d1:7f:02:d6:81:b1:ec:2f:
e3:f8:c6:9f:f5:68:50:24:dc:7b:c1:9f:35:db:04:65:5c:b3:
51:d2:34:af:12:78:75:8f:53:87:93:db:f8:88:c7:3f:54:fd:
d2:2d:55:97:d1:37:e4:d8:28:8e:57:8e:9f:5b:2c:84:3d:74:
d9:81:99:c7:ed:7f:f9:76:e5:9e:3a:09:42:1c:a2:73:7e:47:
2c:c8:6c:2c:04:dc:23:e5:70:83:dc:c5:bb:46:6d:22:79:dc:
c2:d7:d2:6a:f4:1d:44:15:2a:c3:9e:2e:2d:4e:7b:11:d3:ea:
69:06:30:e1:ea:a6:c1:27:06:6f:40:cc:b1:5b:b4:62:54:67:
54:b0:64:80:5a:9e:86:98:a9:2a:30:91:7b:e0:71:a3:cd:74:
cf:3b:3c:9d:db:5a:8c:48:e9:c1:b5:a0:56:98:0b:19:f1:ba:
7f:08:2f:43:d2:0c:71:71:82:8f:62:26:ed:f1:a4:95:fa:81:
80:a5:1f:60:f8:2d:1e:14:e9:f8:e4:56:d3:17:55:a4:43:ae:
06:58:cd:8a:3a:6e:87:e4:c8:83:af:42:d1:a7:53:cc:f7:8a:
cb:aa:38:13:26:fe:67:f9:2e:7b:22:af:5f:23:20:f7:d8:b6:
aa:05:29:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:49 2024 by rpki-client on console-ams.rpki-client.org