Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/2KRKZ-YVhd6BJYU5bnrqze8gnD4.roa
File: 2KRKZ-YVhd6BJYU5bnrqze8gnD4.roa (raw, json)
Hash identifier: K4gV/X27JJJxG9dK3wiPWNRhESJYdZk6HZSqutWIwI4=
Subject key identifier: D8:A4:4A:67:E6:15:85:DE:81:25:85:39:6E:7A:EA:CD:EF:20:9C:3E
Certificate issuer: /CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Certificate serial: 01946AF370A440E12B952D63D7522DD79EE5
Authority key identifier: 5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/2KRKZ-YVhd6BJYU5bnrqze8gnD4.roa
Signing time: Wed 15 Jan 2025 17:12:06 +0000
ROA not before: Wed 15 Jan 2025 17:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6802
IP address blocks: 194.141.0.0/16 maxlen: 16
194.141.0.0/24 maxlen: 24
194.141.1.0/24 maxlen: 24
194.141.2.0/24 maxlen: 24
194.141.3.0/24 maxlen: 24
194.141.4.0/24 maxlen: 24
194.141.5.0/24 maxlen: 24
194.141.6.0/24 maxlen: 24
194.141.8.0/24 maxlen: 24
194.141.9.0/24 maxlen: 24
194.141.12.0/24 maxlen: 24
194.141.15.0/24 maxlen: 24
194.141.16.0/22 maxlen: 22
194.141.22.0/24 maxlen: 24
194.141.24.0/21 maxlen: 21
194.141.32.0/22 maxlen: 22
194.141.37.0/24 maxlen: 24
194.141.38.0/23 maxlen: 23
194.141.40.0/24 maxlen: 24
194.141.41.0/24 maxlen: 24
194.141.43.0/24 maxlen: 24
194.141.44.0/23 maxlen: 23
194.141.47.0/24 maxlen: 24
194.141.51.0/24 maxlen: 24
194.141.52.0/22 maxlen: 22
194.141.56.0/23 maxlen: 23
194.141.64.0/23 maxlen: 23
194.141.66.0/24 maxlen: 24
194.141.67.0/24 maxlen: 24
194.141.68.0/24 maxlen: 24
194.141.69.0/24 maxlen: 24
194.141.72.0/22 maxlen: 22
194.141.78.0/24 maxlen: 24
194.141.79.0/24 maxlen: 24
194.141.84.0/24 maxlen: 24
194.141.86.0/24 maxlen: 24
194.141.88.0/21 maxlen: 21
194.141.104.0/21 maxlen: 21
194.141.112.0/24 maxlen: 24
194.141.113.0/24 maxlen: 24
194.141.116.0/22 maxlen: 22
194.141.116.0/23 maxlen: 23
194.141.118.0/24 maxlen: 24
194.141.119.0/24 maxlen: 24
194.141.221.0/24 maxlen: 24
194.141.222.0/24 maxlen: 24
194.141.225.0/24 maxlen: 24
194.141.226.0/24 maxlen: 24
194.141.227.0/24 maxlen: 24
194.141.228.0/22 maxlen: 22
194.141.232.0/21 maxlen: 21
194.141.240.0/24 maxlen: 24
194.141.245.0/24 maxlen: 24
2001:4b58::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 16 Jan 2025 13:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:f3:70:a4:40:e1:2b:95:2d:63:d7:52:2d:d7:9e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Validity
Not Before: Jan 15 17:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8a44a67e61585de812585396e7aeacdef209c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f8:0a:7a:15:21:fb:e4:ca:3d:e2:bc:0b:08:
f5:a9:ee:b3:eb:96:cf:da:ff:56:96:4c:34:5a:74:
00:e2:69:35:25:b3:6f:2e:21:84:d0:e4:ee:a5:a2:
10:61:c1:61:b0:44:ff:b6:a8:c8:8e:71:a8:19:ac:
88:42:aa:03:4f:a1:e9:b1:67:32:e8:74:c1:60:23:
a3:ab:e0:ce:45:31:78:86:11:f3:36:8e:d8:df:e2:
55:63:48:d5:d8:93:76:f8:4f:80:7e:9f:1e:ed:fd:
ce:61:09:89:f5:78:5e:75:82:6e:89:6b:48:b6:1b:
3e:a4:f2:fc:4a:02:ba:3c:27:ef:94:67:18:e5:f8:
fe:1b:f9:b3:83:49:6c:18:74:aa:5e:95:2e:19:d6:
94:37:79:d3:7e:17:37:ac:eb:80:53:5f:94:61:17:
0a:44:80:97:fa:57:9d:a5:ff:0c:b5:11:25:ff:f1:
2f:4b:b9:2e:af:26:0d:f2:e2:6d:09:54:e3:75:f2:
bc:7d:99:1a:bd:31:6f:88:72:5c:d5:db:a0:76:fb:
cd:0f:d1:41:bf:a3:c5:37:80:dc:7b:8c:fd:0a:7e:
43:0b:81:51:8d:f8:b2:85:ac:f4:89:5e:42:9e:40:
f3:e6:65:42:d8:e7:b2:2e:de:7e:89:3e:12:cf:16:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A4:4A:67:E6:15:85:DE:81:25:85:39:6E:7A:EA:CD:EF:20:9C:3E
X509v3 Authority Key Identifier:
keyid:5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/2KRKZ-YVhd6BJYU5bnrqze8gnD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.141.0.0/16
IPv6:
2001:4b58::/32
Signature Algorithm: sha256WithRSAEncryption
94:a6:f2:20:bf:5a:2b:f1:0a:ab:55:de:ae:67:0e:72:bb:32:
68:01:60:a2:a1:50:5d:00:9f:88:69:ec:41:13:c6:36:6a:40:
30:a1:ad:6a:67:89:d1:9f:1b:d7:c0:65:6e:cd:ac:e9:37:a7:
0e:94:ed:31:63:b8:74:12:7d:d3:01:bf:be:38:6f:0d:0e:a6:
f3:51:e9:aa:a5:e7:6f:70:29:80:49:af:31:59:17:8f:ba:16:
14:01:46:3a:ac:58:ca:35:38:2f:1a:e9:56:74:36:b5:bd:87:
93:3e:86:04:9d:83:dd:81:7f:1f:33:78:f9:0d:83:55:7b:96:
10:ac:2b:00:cd:ee:d1:e9:e5:88:0b:96:f0:60:de:2e:ac:cc:
3d:54:42:5e:22:13:cb:b6:23:03:ff:54:e9:c7:22:1c:d2:0c:
8d:5d:c7:7a:84:dc:03:05:60:27:9d:df:0b:a1:f3:c6:e1:eb:
31:dc:49:20:51:34:a5:b3:3f:d3:ae:79:68:9b:76:d3:8e:e6:
14:55:d9:d0:c6:3a:fc:9c:7c:1c:83:0d:fb:7d:39:6a:ed:ed:
93:a6:27:81:43:60:69:da:84:f3:30:a4:de:5d:30:b4:df:d9:
fe:9b:d5:65:79:90:18:fc:f9:0e:fe:81:77:e7:8c:96:2c:47:
33:a3:d1:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:12:26 2025 by rpki-client