Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/NWY0P3n4t-OSx3V2jNAkWE8UCZY.roa
File: NWY0P3n4t-OSx3V2jNAkWE8UCZY.roa (raw, json)
Hash identifier: Tq3nMViBwd3KltWWixvJvOEF7BzNvWselmppDEMJhlA=
Subject key identifier: 35:66:34:3F:79:F8:B7:E3:92:C7:75:76:8C:D0:24:58:4F:14:09:96
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0188F8C89DA8A6FE00B317A836B0E812130F
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/NWY0P3n4t-OSx3V2jNAkWE8UCZY.roa
Signing time: Mon 26 Jun 2023 17:37:57 +0000
ROA not before: Mon 26 Jun 2023 17:37:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8772
IP address blocks: 95.164.56.0/22 maxlen: 22
95.164.52.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.72.0/22 maxlen: 22
195.214.212.0/22 maxlen: 22
195.214.208.0/22 maxlen: 22
195.214.208.0/21 maxlen: 21
195.214.210.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.92.0/22 maxlen: 22
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
94.131.0.0/23 maxlen: 23
94.131.0.0/24 maxlen: 24
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
62.205.128.0/19 maxlen: 19
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
2a01:d0:8000::/33 maxlen: 33
2a01:d0::/32 maxlen: 32
2a01:d0:3b::/48 maxlen: 48
2a01:d0:ffff::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Jun 2023 14:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f8:c8:9d:a8:a6:fe:00:b3:17:a8:36:b0:e8:12:13:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jun 26 17:37:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3566343f79f8b7e392c775768cd024584f140996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d4:4a:23:e2:80:1b:84:17:ee:41:76:ff:67:
80:a1:ab:f6:6f:20:32:ca:f5:60:72:05:1d:54:04:
8f:86:fd:6f:fb:a9:4b:b0:60:ed:c1:b1:58:f9:c0:
b9:a9:e5:59:3c:8c:aa:df:6a:d6:7b:78:cf:0e:68:
ad:54:16:c6:c3:ab:f5:77:40:82:c9:f2:27:5d:db:
76:ee:47:78:ac:4a:26:22:5f:68:4e:9c:96:a4:60:
16:6c:d1:e6:ef:a8:fd:86:ad:dc:81:69:3e:36:ef:
69:cc:87:5f:56:4c:57:ab:90:9b:a5:54:13:ef:de:
30:8a:a3:4f:b9:f1:02:29:e3:cc:31:30:90:5c:dc:
7a:60:ba:14:f7:7a:1b:37:c0:b4:54:bb:2a:a6:cc:
5a:34:24:61:79:a9:1b:b3:61:47:4e:f6:76:b1:2d:
98:7d:6b:07:7f:72:fe:cb:0b:c3:d1:a9:b3:79:58:
84:fe:20:28:a6:90:e5:27:33:c9:bd:ff:ff:03:87:
5f:d1:77:0e:f8:22:fc:a2:51:a2:46:42:97:bf:0b:
75:01:05:26:9a:34:cb:c6:66:7f:96:ed:87:2d:5f:
84:2f:71:cb:b3:4b:96:73:ea:15:e5:53:c2:e4:43:
fc:79:3d:ae:28:d0:ff:d6:d6:0b:c9:43:58:41:af:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:66:34:3F:79:F8:B7:E3:92:C7:75:76:8C:D0:24:58:4F:14:09:96
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/NWY0P3n4t-OSx3V2jNAkWE8UCZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0-95.164.59.255
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.92.0/22
95.164.170.0-95.164.175.255
195.214.208.0/21
IPv6:
2a01:d0::/32
Signature Algorithm: sha256WithRSAEncryption
7e:92:0e:35:54:06:53:55:f6:36:90:18:56:bf:ad:7b:e1:5e:
f7:00:29:48:76:13:5c:10:37:4c:7b:6a:6a:19:99:94:a6:eb:
09:b3:11:37:f8:97:d0:92:a9:87:36:60:78:d1:aa:90:ec:0e:
35:21:d6:35:72:eb:7c:3f:ff:24:b6:66:bf:d3:04:e3:ce:4e:
62:9c:32:d6:57:6f:21:e5:14:d7:82:4d:0f:81:e7:85:41:da:
fe:71:fd:f8:8b:3b:6d:b2:46:c4:91:f7:c8:6b:c4:55:60:cd:
7a:ca:a2:dc:a4:74:3f:8e:87:b7:a0:7e:c6:da:ac:e8:9c:29:
98:76:dd:6f:97:24:cd:b9:3e:7e:8d:95:26:f0:37:2c:cb:9b:
9f:dd:b5:c3:ff:a1:f0:06:d6:e7:52:1f:0d:1c:e8:9f:46:91:
3d:fa:bd:24:c6:2d:a6:e9:aa:ae:74:ea:70:6b:66:05:3b:f9:
df:9c:d8:ee:2a:cb:7e:93:68:48:80:39:de:4e:49:09:69:f9:
09:07:c7:2c:06:14:0f:aa:f9:ff:41:e0:80:94:1d:a7:46:d2:
c2:3b:0c:47:13:c0:98:4f:91:e3:97:3f:3e:ae:d8:58:a6:21:
81:e3:6f:09:50:e9:8a:19:c0:97:06:47:7d:a9:10:65:d2:8c:
d0:20:98:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:49 2024 by rpki-client on console-ams.rpki-client.org