Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/k38MUqoJrWP6OZBxFLx9Yyhi7Zo.roa
File: k38MUqoJrWP6OZBxFLx9Yyhi7Zo.roa (raw, json)
Hash identifier: XqzF8DzXpQ9upNG184c9dhkAWC8TnsFyZosJxd8dyzU=
Subject key identifier: 93:7F:0C:52:AA:09:AD:63:FA:39:90:71:14:BC:7D:63:28:62:ED:9A
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01948AE6C36238C38025379A497523EDB197
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/k38MUqoJrWP6OZBxFLx9Yyhi7Zo.roa
Signing time: Tue 21 Jan 2025 22:06:06 +0000
ROA not before: Tue 21 Jan 2025 22:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8772
IP address blocks: 62.205.128.0/19 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
94.131.0.0/23 maxlen: 23
94.131.0.0/24 maxlen: 24
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
94.131.124.0/24 maxlen: 24
94.131.127.0/24 maxlen: 24
95.164.12.0/23 maxlen: 23
95.164.15.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.52.0/24 maxlen: 24
95.164.55.0/24 maxlen: 24
95.164.56.0/22 maxlen: 22
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.120.0/24 maxlen: 24
95.164.121.0/24 maxlen: 24
95.164.122.0/24 maxlen: 24
95.164.123.0/24 maxlen: 24
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
95.164.248.0/23 maxlen: 23
95.164.251.0/24 maxlen: 24
195.214.212.0/22 maxlen: 22
2a01:d0::/29 maxlen: 48
2a01:d0::/32 maxlen: 32
2a01:d0:4::/48 maxlen: 48
2a01:d0:a::/48 maxlen: 48
2a01:d0:28::/48 maxlen: 48
2a01:d0:3b::/48 maxlen: 48
2a01:d0:43::/48 maxlen: 48
2a01:d0:105::/48 maxlen: 48
2a01:d0:303::/48 maxlen: 48
2a01:d0:305::/48 maxlen: 48
2a01:d0:308::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
2a01:d0:31d::/48 maxlen: 48
2a01:d0:333::/48 maxlen: 48
2a01:d0:962::/48 maxlen: 48
2a01:d0:1657::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 26 Jan 2025 21:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8a:e6:c3:62:38:c3:80:25:37:9a:49:75:23:ed:b1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 21 22:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=937f0c52aa09ad63fa39907114bc7d632862ed9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:44:66:5e:89:a4:1f:e2:a7:ad:5a:79:03:
f3:e3:c1:1c:a2:d3:a9:ab:e8:45:85:05:67:18:dc:
ec:90:99:e2:1d:de:d5:94:4c:08:1d:0a:10:92:67:
54:43:44:8f:b9:c6:e3:82:81:13:7c:0a:31:1c:ab:
17:59:75:de:68:b3:73:42:7c:dd:29:4f:37:1a:88:
6b:bf:58:4c:ee:1c:3a:48:95:4f:4c:0d:f2:17:91:
c6:0a:82:23:40:2b:d6:ad:fd:8b:c1:56:35:05:be:
0e:04:66:bf:d9:7a:99:f6:09:84:5e:87:70:61:e4:
65:76:04:34:69:b5:ca:f1:21:88:9e:ff:9e:64:ca:
22:d4:68:62:1c:9b:19:23:37:0e:19:48:04:8b:6b:
a1:4c:7a:7b:62:2f:31:82:73:ea:28:69:be:30:ad:
c7:2b:a2:4a:ad:01:58:0d:d0:ee:ff:3c:fa:cb:32:
2b:38:96:fe:5b:5a:46:4c:41:7d:19:90:a1:d8:22:
88:9a:5e:e4:3a:7b:cd:81:5d:1d:2f:67:dc:5d:3b:
c0:44:9a:95:dd:70:e5:33:5a:7d:c1:1e:fc:a0:28:
b7:7e:13:6e:a3:33:e3:de:95:1d:6f:bf:6a:6c:ef:
30:06:aa:b6:37:c9:fb:26:73:cb:d5:3d:e5:08:34:
2c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7F:0C:52:AA:09:AD:63:FA:39:90:71:14:BC:7D:63:28:62:ED:9A
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/k38MUqoJrWP6OZBxFLx9Yyhi7Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
94.131.124.0/24
94.131.127.0/24
95.164.12.0/23
95.164.15.0/24
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0/24
95.164.55.0-95.164.59.255
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.120.0/22
95.164.170.0-95.164.175.255
95.164.248.0/23
95.164.251.0/24
195.214.212.0/22
IPv6:
2a01:d0::/29
Signature Algorithm: sha256WithRSAEncryption
73:b9:32:e7:c2:3d:c7:a0:e6:3d:af:11:d1:7e:e3:b7:24:f5:
94:ce:27:85:73:e7:8f:b1:24:2b:72:bd:59:94:a2:39:b4:6e:
93:d5:f4:cc:3a:b5:11:f0:9a:a1:cd:56:79:06:98:9b:8a:18:
62:1c:46:07:f2:df:bc:ee:a6:a2:d9:c4:12:19:8c:c4:c8:a9:
12:74:e9:da:21:1d:7f:d0:cb:9c:a1:b8:a9:af:fa:f3:12:9d:
97:06:68:66:f9:a3:3a:c2:43:46:e5:0a:c2:2b:3c:6d:0f:15:
a5:c9:53:c8:a2:d6:8f:54:17:2b:17:cc:47:41:11:d6:c0:fc:
32:4a:91:4f:d6:0a:ac:b3:93:44:e4:b4:d6:58:71:fd:d2:be:
94:ab:a8:ce:a1:f5:0a:ce:23:0e:90:c0:e3:65:4d:b3:ef:92:
fb:c9:cd:a5:06:46:43:b3:39:72:8f:65:72:7f:47:24:78:bd:
c0:26:bb:60:87:f1:bc:46:55:fc:04:96:04:ad:98:e9:81:a9:
e3:64:71:4d:28:1e:57:2f:5d:1d:21:cb:6a:4f:f0:58:63:37:
92:54:4e:79:6b:8a:68:d8:7c:44:53:3b:a8:62:12:75:af:ce:
94:b8:9f:db:be:ee:99:4c:49:b0:31:62:57:e6:45:4d:9f:73:
28:9c:0f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:28:50 2025 by rpki-client