Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/rykQVuO8vxZ2tk6akQZofCY7tzM.roa
File: rykQVuO8vxZ2tk6akQZofCY7tzM.roa (raw, json)
Hash identifier: byrEyFVE+mt2t8n2Ntf+J4AcTBOt5sGQyV23wehMmS0=
Subject key identifier: AF:29:10:56:E3:BC:BF:16:76:B6:4E:9A:91:06:68:7C:26:3B:B7:33
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0194A49AA81848093E26E3E44743AFD0C4DB
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/rykQVuO8vxZ2tk6akQZofCY7tzM.roa
Signing time: Sun 26 Jan 2025 21:53:06 +0000
ROA not before: Sun 26 Jan 2025 21:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8772
IP address blocks: 62.205.128.0/19 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
94.131.0.0/23 maxlen: 23
94.131.0.0/24 maxlen: 24
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
94.131.124.0/24 maxlen: 24
94.131.127.0/24 maxlen: 24
95.164.12.0/23 maxlen: 23
95.164.15.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.52.0/24 maxlen: 24
95.164.56.0/22 maxlen: 22
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.120.0/24 maxlen: 24
95.164.121.0/24 maxlen: 24
95.164.122.0/24 maxlen: 24
95.164.123.0/24 maxlen: 24
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
95.164.248.0/23 maxlen: 23
95.164.251.0/24 maxlen: 24
195.214.212.0/22 maxlen: 22
2a01:d0::/29 maxlen: 48
2a01:d0::/32 maxlen: 32
2a01:d0:4::/48 maxlen: 48
2a01:d0:a::/48 maxlen: 48
2a01:d0:28::/48 maxlen: 48
2a01:d0:3b::/48 maxlen: 48
2a01:d0:43::/48 maxlen: 48
2a01:d0:105::/48 maxlen: 48
2a01:d0:303::/48 maxlen: 48
2a01:d0:305::/48 maxlen: 48
2a01:d0:308::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
2a01:d0:31d::/48 maxlen: 48
2a01:d0:333::/48 maxlen: 48
2a01:d0:962::/48 maxlen: 48
2a01:d0:1657::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 18 Feb 2025 17:15:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a4:9a:a8:18:48:09:3e:26:e3:e4:47:43:af:d0:c4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 26 21:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af291056e3bcbf1676b64e9a9106687c263bb733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:64:1c:97:b9:6d:f3:a0:20:b5:64:fa:c3:88:
c8:e7:f0:9c:33:65:55:29:2e:17:9b:d4:75:dd:c2:
d0:0a:42:8c:3b:0c:58:b3:b7:ec:b2:a7:c2:25:3a:
0f:c0:bd:c0:72:5a:86:06:a5:5a:fd:36:4c:f9:17:
b5:30:4e:bc:96:ee:ed:c1:e7:47:80:dd:1e:c2:c5:
ff:8f:1b:95:1b:35:4d:2a:d5:3c:b8:32:ae:aa:c3:
ea:3c:46:7c:66:70:68:d7:33:8b:e1:cb:d2:e9:fc:
48:79:30:05:61:d3:e0:fb:62:f4:6b:c8:a1:1f:5a:
4a:72:7e:49:51:67:60:4c:72:00:f4:86:47:b6:50:
a8:64:db:19:62:69:bc:20:3b:a8:cf:1d:1f:de:ce:
d5:9b:44:5c:f5:bd:c2:c4:bc:d9:4a:13:f7:ec:c6:
93:f6:a0:8e:44:12:82:f6:cf:6a:fd:53:71:75:73:
ec:6c:73:65:f1:36:f8:79:9c:4a:50:d3:8c:0e:b4:
d4:58:86:f3:5e:b9:25:0e:8f:d4:09:ab:9f:ed:8f:
b1:48:40:2d:f6:be:de:aa:4e:95:07:49:07:62:55:
c0:43:15:97:15:75:79:6f:ac:d0:f8:e6:23:38:77:
05:1d:ae:c1:57:e3:74:18:79:33:41:46:2c:ca:c3:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:29:10:56:E3:BC:BF:16:76:B6:4E:9A:91:06:68:7C:26:3B:B7:33
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/rykQVuO8vxZ2tk6akQZofCY7tzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
94.131.124.0/24
94.131.127.0/24
95.164.12.0/23
95.164.15.0/24
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0/24
95.164.56.0/22
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.120.0/22
95.164.170.0-95.164.175.255
95.164.248.0/23
95.164.251.0/24
195.214.212.0/22
IPv6:
2a01:d0::/29
Signature Algorithm: sha256WithRSAEncryption
35:46:96:af:4d:8e:5f:25:92:7e:fc:6a:22:1a:4e:05:7e:77:
64:88:88:6c:bb:60:ba:ba:1b:a8:e7:59:c0:d1:8d:4f:ba:2f:
a1:47:ac:a0:3e:54:09:08:f3:83:63:8d:ad:3b:9c:51:29:7a:
27:76:d3:86:39:01:0c:fa:5d:37:b5:b7:f2:0a:f6:b7:77:57:
c9:18:3a:29:fb:88:d2:38:27:6d:e7:c7:43:25:5d:62:63:ca:
86:54:b5:a2:97:c3:dc:75:b4:ad:a0:30:3b:d6:c1:97:46:25:
25:21:c8:c9:29:80:c3:1f:01:18:62:3d:99:fa:ed:9d:2e:cb:
32:51:fb:74:7d:9e:5d:e1:c9:0a:db:9b:18:eb:fd:01:f9:68:
6e:fa:c0:27:ae:71:a6:cf:71:40:26:c1:40:49:48:fc:e7:ab:
ba:6d:31:7a:a0:25:43:29:32:38:91:03:59:b4:6b:a9:a2:16:
fc:4c:ea:9c:41:6a:95:9c:40:54:d7:21:01:d8:3c:a0:b9:78:
a0:ef:76:74:aa:03:ea:08:5c:3f:ce:b7:bf:e6:0a:75:1f:9b:
5d:55:46:8c:14:93:f8:47:ff:a1:3f:61:7a:aa:fd:d2:c2:6b:
a0:8a:6e:a6:e5:62:91:fa:33:dd:23:7a:10:da:df:c8:48:a8:
ff:8a:ba:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:51:36 2025 by rpki-client