Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1upDZMq-HbAhdBk0ybdjQvJgqgI.roa
File: 1upDZMq-HbAhdBk0ybdjQvJgqgI.roa (raw, json)
Hash identifier: KXWopewIhAzlgojSeR2Ue5+f5xjBS3EMlFAUb+fT+uw=
Subject key identifier: D6:EA:43:64:CA:BE:1D:B0:21:74:19:34:C9:B7:63:42:F2:60:AA:02
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01928F815AA746D8405471252AE70838AC2D
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1upDZMq-HbAhdBk0ybdjQvJgqgI.roa
Signing time: Tue 15 Oct 2024 09:27:52 +0000
ROA not before: Tue 15 Oct 2024 09:27:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.53.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.130.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.168.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.171.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
212.56.48.0/24 maxlen: 24
212.56.49.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.56.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 09:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:81:5a:a7:46:d8:40:54:71:25:2a:e7:08:38:ac:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 15 09:27:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6ea4364cabe1db021741934c9b76342f260aa02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:d0:75:0e:24:e1:13:c4:48:4c:a6:ac:5b:
ef:2f:3f:e3:c5:26:62:40:df:9b:76:9f:52:c9:9f:
c8:07:79:7f:40:b8:db:a1:6e:56:73:6f:bb:3d:56:
c5:c4:58:1c:56:5c:cc:8f:13:02:0d:77:f5:21:be:
58:8d:bb:74:8d:7f:ab:d3:30:dc:2a:5c:53:56:65:
6e:b4:4b:d5:a7:3b:d0:9f:cd:f9:de:d2:bb:f9:1b:
53:40:a2:3c:fa:2a:78:ce:aa:2d:98:04:28:39:50:
e6:45:af:18:03:bc:a2:0c:0a:29:4d:be:05:db:2c:
88:e3:58:9a:47:a3:ca:9b:84:04:8b:84:16:b8:ec:
99:96:e0:13:c8:d5:5b:ac:3b:8f:ba:c9:c6:4f:b8:
3a:b0:47:27:ff:41:db:a3:28:c5:d0:d2:ab:b7:e7:
26:df:b0:37:68:26:99:00:31:7e:a7:0b:8b:18:1a:
e3:3b:1f:55:c3:52:ce:f7:c6:6c:f4:d7:45:56:ca:
8a:f4:74:5f:99:e0:d4:29:33:b3:d7:5d:f6:1a:74:
09:db:3f:5d:4b:c2:f6:90:a4:ca:aa:af:25:75:48:
37:77:63:91:0d:41:fc:91:4d:ca:fd:7e:a4:c0:92:
f4:9b:d1:c8:f4:dc:1b:33:e6:4e:52:3d:8a:89:7d:
11:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EA:43:64:CA:BE:1D:B0:21:74:19:34:C9:B7:63:42:F2:60:AA:02
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1upDZMq-HbAhdBk0ybdjQvJgqgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/22
14.102.63.0/24
14.102.84.0/22
62.169.128.0/21
103.125.77.0-103.125.79.255
103.210.198.0/24
167.160.16.0/23
167.160.29.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0-203.188.173.255
212.56.48.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:89:f8:d3:5b:a4:95:5d:b6:05:18:ca:1e:57:60:c1:fb:7f:
02:9a:a4:fa:75:4e:58:11:2b:57:86:62:84:f5:11:94:2b:ba:
d9:97:d9:58:c5:a5:b7:18:27:d0:54:a6:73:43:bc:a4:dd:e1:
b8:7a:b3:60:61:a6:ad:85:4d:e0:72:50:29:6a:18:e0:17:71:
81:7c:e8:c8:e1:c7:71:0b:0e:a9:7e:d6:36:76:ba:a0:e9:6f:
f1:19:d5:47:30:e3:e5:6f:12:c4:de:68:b7:68:a8:71:e4:69:
38:fc:2c:c8:08:34:94:eb:1d:0c:78:7d:e4:e6:c3:85:7b:19:
f4:c3:b2:33:6d:b1:9a:6b:fd:80:b4:7c:8b:00:25:2b:7f:f8:
60:c8:f7:e1:af:ed:a7:32:66:8c:d1:b7:f3:cc:46:e1:b2:93:
e5:55:a9:23:21:45:61:fb:3b:2f:9b:85:25:2d:2b:be:2e:26:
e1:14:93:14:1a:c1:5b:d3:48:b4:78:92:0e:e2:5b:3b:60:1a:
74:be:94:89:e8:8c:4b:e6:95:42:bb:63:c2:c3:4c:a8:d2:76:
6a:a3:59:49:89:06:77:58:e1:6e:77:39:52:53:2f:14:11:11:
ee:95:33:1f:8e:d7:28:98:41:b8:8d:73:d5:dc:6d:43:0a:21:
9b:ab:95:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 12:42:17 2024 by rpki-client on console-fra.rpki-client.org