Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/JkKRmZJmfXlFR0seQW8cmA68NRY.roa
File: JkKRmZJmfXlFR0seQW8cmA68NRY.roa (raw, json)
Hash identifier: pRwB9Azb7LVQXRzE6/fZLPnLzrsrgPQfxxpSqxjdhx0=
Subject key identifier: 26:42:91:99:92:66:7D:79:45:47:4B:1E:41:6F:1C:98:0E:BC:35:16
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 01856ECB7267FE7F05CE40B4D936DF7EAD60
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/JkKRmZJmfXlFR0seQW8cmA68NRY.roa
Signing time: Sun 01 Jan 2023 19:25:04 +0000
ROA not before: Sun 01 Jan 2023 19:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41887
IP address blocks: 94.228.128.0/20 maxlen: 24
94.228.133.226/32 maxlen: 32
195.144.2.0/24 maxlen: 24
94.228.129.181/32 maxlen: 32
178.22.80.0/21 maxlen: 24
62.204.64.0/19 maxlen: 24
62.204.64.0/20 maxlen: 24
62.204.64.0/24 maxlen: 24
185.63.164.0/22 maxlen: 24
62.204.67.0/24 maxlen: 24
62.204.66.0/24 maxlen: 24
62.204.65.0/24 maxlen: 24
62.204.80.0/20 maxlen: 20
62.204.94.0/23 maxlen: 24
62.204.92.0/22 maxlen: 22
62.204.92.0/23 maxlen: 24
2a00:d00::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:72:67:fe:7f:05:ce:40:b4:d9:36:df:7e:ad:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: Jan 1 19:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2642919992667d7945474b1e416f1c980ebc3516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ef:89:1d:a1:76:89:64:1a:d9:30:77:52:e3:
42:04:5f:3c:90:58:96:14:4d:5d:8d:93:19:0e:cb:
0a:14:1a:3b:fc:f7:b7:2e:4f:d9:9a:92:09:3e:75:
af:eb:ed:25:56:59:62:7b:83:0a:f4:b7:ee:23:be:
9f:7d:ed:04:27:b2:58:52:4f:72:fd:2e:35:8b:7a:
74:66:31:b2:26:5a:0f:7d:dd:d0:45:61:e1:1d:31:
58:d6:91:2f:00:18:a1:0d:56:90:a3:b7:fe:40:25:
2a:69:3b:c6:fe:bb:dd:e9:91:e7:a2:bd:14:7e:e7:
a5:44:6f:40:b3:12:43:0a:3d:a7:f1:77:83:a7:63:
c0:a6:ec:02:95:9a:a2:e7:7e:f3:25:4c:6a:11:4b:
49:af:b4:c8:2f:24:37:79:2c:c7:14:7e:d7:a1:fd:
86:15:48:d3:7e:18:74:a5:9b:ab:88:3a:d9:54:a5:
1c:8e:3f:fb:7f:70:a9:f9:9b:04:84:bb:bc:6c:dd:
5c:58:fd:5d:42:3a:9d:24:0e:99:9b:ac:54:b0:98:
7a:ac:69:b2:39:be:5a:53:57:49:8a:9d:c0:d3:5d:
dd:58:bc:00:e9:fa:8b:31:26:04:0f:5e:89:cf:08:
ab:7d:fd:6c:a3:40:ef:15:41:19:9a:09:b4:e3:d9:
92:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:42:91:99:92:66:7D:79:45:47:4B:1E:41:6F:1C:98:0E:BC:35:16
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/JkKRmZJmfXlFR0seQW8cmA68NRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.64.0/19
94.228.128.0/20
178.22.80.0/21
185.63.164.0/22
195.144.2.0/24
IPv6:
2a00:d00::/29
Signature Algorithm: sha256WithRSAEncryption
5d:5c:5c:f1:36:9e:8d:a5:f5:1d:7e:e4:31:00:d1:c3:f5:94:
b4:ca:53:f0:de:c7:89:0d:f7:88:02:72:ea:43:9a:15:37:79:
cc:ba:09:af:60:a1:96:42:dc:b2:24:3b:4a:21:fe:75:a2:c3:
a0:4b:9b:37:30:20:7c:b6:ba:24:9f:41:db:65:59:de:68:e1:
b4:40:44:3b:64:4e:b9:0e:dd:22:dd:0f:93:5e:d4:f7:d5:13:
c5:cf:6d:af:46:01:b4:d0:34:08:b0:d9:26:e6:9e:dc:70:bd:
8a:7a:f3:75:80:ea:73:71:28:79:91:da:1e:b1:1a:36:6d:41:
00:87:94:d4:5c:58:26:1e:07:e4:21:99:3c:34:4f:5d:1c:fe:
ef:43:b9:20:14:58:b3:5c:8b:26:11:c6:da:47:ff:ad:d1:7f:
a8:65:2a:54:f5:15:ab:c5:9f:c9:56:eb:4a:6d:f5:e9:45:37:
67:9f:b0:b2:f2:b7:e9:42:11:72:44:4b:fd:69:af:31:e8:7e:
83:67:07:ef:71:5b:e0:19:3d:c3:44:94:81:f4:9b:1b:f8:2c:
b9:fd:30:7b:0f:b3:f0:f8:0a:76:a7:f4:76:6e:59:6d:07:0c:
0c:3c:d8:42:21:67:55:ed:13:08:00:c9:c4:24:11:6a:c0:f3:
fa:92:f9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:05 2024 by rpki-client on console-ams.rpki-client.org