Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/ji2N__XI77u1PxjvNjJfGclDMJA.roa
File: ji2N__XI77u1PxjvNjJfGclDMJA.roa (raw, json)
Hash identifier: 1bs+rCsHo+BMqeGtBSAsWJIpLpDkVmZZw7+2x6lqASI=
Subject key identifier: 8E:2D:8D:FF:F5:C8:EF:BB:B5:3F:18:EF:36:32:5F:19:C9:43:30:90
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018AA869572048FE5F46DD6879FB50D1336F
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/ji2N__XI77u1PxjvNjJfGclDMJA.roa
Signing time: Mon 18 Sep 2023 13:09:50 +0000
ROA not before: Mon 18 Sep 2023 13:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8772
IP address blocks: 95.164.56.0/22 maxlen: 22
95.164.52.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
195.214.212.0/22 maxlen: 22
195.214.208.0/22 maxlen: 22
195.214.208.0/21 maxlen: 21
95.164.72.0/22 maxlen: 22
195.214.210.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.92.0/22 maxlen: 22
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
94.131.0.0/23 maxlen: 23
94.131.0.0/24 maxlen: 24
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
62.205.132.0/24 maxlen: 24
62.205.128.0/19 maxlen: 20
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
2a01:d0:8000::/33 maxlen: 33
2a01:d0::/32 maxlen: 32
2a01:d0:3b::/48 maxlen: 48
2a01:d0:ffff::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 27 Oct 2023 11:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:69:57:20:48:fe:5f:46:dd:68:79:fb:50:d1:33:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Sep 18 13:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e2d8dfff5c8efbbb53f18ef36325f19c9433090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:14:e8:23:c4:85:3d:f0:bd:ed:2e:eb:07:15:
14:e0:2a:f3:64:61:3d:97:08:42:32:ae:f7:f7:07:
89:49:0a:d4:7c:04:88:16:19:5e:d2:b5:5a:49:a9:
62:ef:91:c6:8a:34:8d:0f:87:b8:3c:0d:83:fd:84:
42:70:3a:42:c0:e6:46:8a:79:56:26:55:e9:2e:a1:
d5:5b:37:1d:ea:c6:ad:1f:7e:15:1d:01:5f:91:ee:
f7:2b:96:5b:d6:c7:26:37:63:73:ce:32:06:a1:e7:
b7:ab:ec:80:d6:13:4a:a9:9e:02:3c:51:ae:85:b5:
e5:72:ca:f2:e0:a9:23:56:76:47:a4:e2:f6:25:3e:
1b:08:1f:11:40:ae:b5:1c:91:3b:be:30:da:97:a5:
f8:1d:39:b0:86:49:50:d4:75:b4:66:77:94:d4:88:
81:3c:d7:bb:90:d1:7a:c4:e6:0a:b0:c7:f0:95:57:
75:4d:18:8d:95:ec:5a:c9:83:43:5a:21:14:6a:da:
f1:b3:b2:78:a9:e3:31:82:fc:5b:ab:8d:b1:1e:d1:
d6:31:1d:33:b9:40:b1:a2:5d:6b:bf:f4:9c:c6:29:
bb:b1:8e:65:f1:7b:85:15:d0:86:24:43:df:14:b6:
49:0d:92:0b:26:2f:69:5b:cc:a7:a0:69:f3:4c:d9:
84:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2D:8D:FF:F5:C8:EF:BB:B5:3F:18:EF:36:32:5F:19:C9:43:30:90
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/ji2N__XI77u1PxjvNjJfGclDMJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0-95.164.59.255
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.92.0/22
95.164.170.0-95.164.175.255
195.214.208.0/21
IPv6:
2a01:d0::/32
Signature Algorithm: sha256WithRSAEncryption
85:ac:75:15:3f:e6:bd:ac:db:23:fa:00:43:8b:dd:b4:e0:66:
1d:1e:f8:32:f0:fd:fa:5c:f2:c9:19:81:5e:8a:8a:a9:20:08:
cb:dc:1b:ce:f3:a9:d3:46:63:36:d8:ed:97:0e:8f:35:2f:08:
f0:92:df:63:12:32:c8:d6:3b:ea:e3:d9:ab:79:7d:af:95:e5:
ee:70:7a:83:bd:20:14:77:48:67:09:3c:2d:57:b6:9d:8d:53:
d9:05:ed:42:27:6a:e8:74:07:c1:1b:11:1d:2c:c4:0f:0e:4f:
38:e2:86:5e:03:25:9e:e1:88:d9:3c:17:58:b6:97:f9:89:db:
58:71:ed:84:3b:82:a2:12:bb:d2:da:6b:cc:4a:33:04:96:8c:
b0:6b:1a:ec:8a:bc:01:ad:8a:cf:54:10:98:35:be:5b:47:d7:
ae:67:6c:7a:3b:7f:5b:b3:18:c1:68:ac:a4:9a:f0:93:4c:d8:
3a:d4:4f:ea:f8:fd:81:0e:63:b6:3d:2c:59:72:4b:91:29:f0:
09:1c:95:da:0b:bf:f9:23:61:53:f3:4d:4b:b5:cb:7e:ae:e1:
e1:16:0a:8b:87:90:7e:62:74:78:5f:7f:f6:67:23:a8:4a:4c:
6d:3e:87:61:79:cd:50:07:68:c0:0f:66:e6:e8:39:dc:d2:61:
25:12:87:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:58 2024 by rpki-client on console-fra.rpki-client.org