Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/IJ2loqgkWxiN4Uf4HEl04Q5kJrQ.roa
File: IJ2loqgkWxiN4Uf4HEl04Q5kJrQ.roa (raw, json)
Hash identifier: GvyA9iAy1qAlyUG5EIzTEbGF7Xaioys1lHka8v34btM=
Subject key identifier: 20:9D:A5:A2:A8:24:5B:18:8D:E1:47:F8:1C:49:74:E1:0E:64:26:B4
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 0190821BCD9DD77EE63C485B5FF8E1408D2F
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/IJ2loqgkWxiN4Uf4HEl04Q5kJrQ.roa
Signing time: Fri 05 Jul 2024 08:56:18 +0000
ROA not before: Fri 05 Jul 2024 08:56:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5378
IP address blocks: 62.49.0.0/16 maxlen: 16
62.49.0.0/18 maxlen: 18
62.49.64.0/18 maxlen: 18
62.49.128.0/18 maxlen: 18
62.49.192.0/18 maxlen: 18
62.56.0.0/17 maxlen: 17
62.56.0.0/18 maxlen: 18
62.56.64.0/18 maxlen: 18
77.233.128.0/19 maxlen: 19
80.176.0.0/15 maxlen: 15
80.177.0.0/19 maxlen: 19
80.177.32.0/20 maxlen: 20
83.104.0.0/14 maxlen: 14
83.104.0.0/18 maxlen: 18
83.104.64.0/18 maxlen: 18
83.104.128.0/18 maxlen: 18
83.104.192.0/18 maxlen: 18
83.105.0.0/18 maxlen: 18
83.105.64.0/18 maxlen: 18
83.105.128.0/18 maxlen: 18
83.105.192.0/18 maxlen: 18
83.106.0.0/18 maxlen: 18
83.106.64.0/18 maxlen: 18
83.106.128.0/18 maxlen: 18
83.106.192.0/18 maxlen: 18
83.107.0.0/18 maxlen: 18
83.107.64.0/18 maxlen: 18
83.107.128.0/18 maxlen: 18
83.107.192.0/18 maxlen: 18
141.195.192.0/18 maxlen: 18
141.195.192.0/19 maxlen: 19
141.195.240.0/20 maxlen: 20
193.237.0.0/16 maxlen: 16
193.237.0.0/19 maxlen: 19
193.237.32.0/19 maxlen: 19
193.237.64.0/19 maxlen: 19
193.237.96.0/19 maxlen: 19
193.237.128.0/21 maxlen: 21
193.237.136.0/22 maxlen: 22
193.237.140.0/22 maxlen: 22
193.237.144.0/21 maxlen: 21
193.237.152.0/21 maxlen: 21
193.237.160.0/19 maxlen: 19
193.237.192.0/19 maxlen: 19
193.237.224.0/19 maxlen: 19
194.222.0.0/16 maxlen: 16
195.8.160.0/19 maxlen: 19
195.58.64.0/19 maxlen: 19
212.225.0.0/17 maxlen: 17
212.228.0.0/15 maxlen: 15
212.228.0.0/18 maxlen: 18
212.228.64.0/18 maxlen: 18
212.228.128.0/19 maxlen: 19
212.228.192.0/18 maxlen: 18
212.229.0.0/18 maxlen: 18
212.229.64.0/21 maxlen: 21
212.229.72.0/22 maxlen: 22
212.229.76.0/23 maxlen: 23
212.229.78.0/23 maxlen: 23
212.229.80.0/21 maxlen: 21
212.229.88.0/21 maxlen: 21
212.229.96.0/19 maxlen: 19
212.229.128.0/18 maxlen: 18
212.229.192.0/18 maxlen: 18
212.248.128.0/17 maxlen: 17
2001:958::/32 maxlen: 32
2a0a:ef40::/29 maxlen: 29
2a0a:ef40:1400::/42 maxlen: 42
2a0a:ef40:1440::/42 maxlen: 42
2a0a:ef40:1480::/42 maxlen: 42
2a0a:ef40:14c0::/42 maxlen: 42
2a0a:ef40:1500::/42 maxlen: 42
2a0a:ef40:1540::/42 maxlen: 42
2a0a:ef40:1580::/42 maxlen: 42
2a0a:ef40:15c0::/42 maxlen: 42
2a0a:ef40:1600::/42 maxlen: 42
2a0a:ef40:1640::/42 maxlen: 42
2a0a:ef40:1680::/42 maxlen: 42
2a0a:ef40:16c0::/42 maxlen: 42
2a0a:ef40:1700::/42 maxlen: 42
2a0a:ef40:1740::/42 maxlen: 42
2a0a:ef40:1780::/42 maxlen: 42
2a0a:ef40:17c0::/42 maxlen: 42
2a0a:ef40:1800::/42 maxlen: 42
2a0a:ef40:1840::/42 maxlen: 42
2a0a:ef40:1880::/42 maxlen: 42
2a0a:ef40:18c0::/42 maxlen: 42
2a0a:ef40:1900::/42 maxlen: 42
2a0a:ef40:1940::/42 maxlen: 42
2a0a:ef40:1980::/42 maxlen: 42
2a0a:ef40:19c0::/42 maxlen: 42
2a0a:ef40:1a00::/42 maxlen: 42
2a0a:ef40:1a40::/42 maxlen: 42
2a0a:ef40:1a80::/42 maxlen: 42
2a0a:ef40:1ac0::/42 maxlen: 42
2a0a:ef40:1b00::/42 maxlen: 42
2a0a:ef40:1b40::/42 maxlen: 42
2a0a:ef40:1b80::/42 maxlen: 42
2a0a:ef40:1bc0::/42 maxlen: 42
2a0a:ef40:1c00::/42 maxlen: 42
2a0a:ef40:1c40::/42 maxlen: 42
2a0a:ef40:1c80::/42 maxlen: 42
2a0a:ef40:1cc0::/42 maxlen: 42
2a0a:ef40:1d00::/42 maxlen: 42
2a0a:ef40:1d40::/42 maxlen: 42
2a0a:ef40:1d80::/42 maxlen: 42
2a0a:ef40:1dc0::/42 maxlen: 42
Validation: Failed, certificate revoked on Thu 18 Jul 2024 09:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:82:1b:cd:9d:d7:7e:e6:3c:48:5b:5f:f8:e1:40:8d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: Jul 5 08:56:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=209da5a2a8245b188de147f81c4974e10e6426b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:08:3a:83:8d:d9:da:af:a3:70:8b:49:55:
f2:be:b6:f6:c3:1e:14:6d:ee:f1:d8:ad:02:71:51:
5a:21:3a:c3:4c:ae:0f:53:0c:de:63:68:b5:9d:c4:
48:68:f2:4b:4f:43:3a:0f:1f:dd:a7:7b:1e:d0:31:
a5:97:4a:76:ce:25:97:7a:e2:47:8a:85:26:5a:94:
9b:cd:ef:55:74:5e:0d:d1:9e:cb:cc:b1:de:52:d6:
f6:79:a1:1f:f9:50:d9:f2:80:41:39:4b:eb:29:e8:
95:93:bc:b8:3c:63:d4:7f:aa:c8:0e:16:b7:80:05:
59:be:9e:18:0e:ea:3c:91:5a:26:ba:ae:bd:7c:5f:
0c:38:23:ef:08:3f:39:82:c7:07:58:36:ed:f4:df:
08:81:26:c0:47:bb:38:0b:aa:40:b7:dd:18:48:0c:
0c:a6:7c:a4:fb:d8:78:65:70:9e:a2:a2:af:3c:0e:
7e:e1:2e:1f:a5:39:88:18:c3:1d:35:0d:2f:8f:bd:
f7:9e:26:8e:96:6a:07:f2:48:64:93:e9:3c:c9:76:
ca:e8:2a:8d:73:1f:9e:72:f6:e8:d3:f8:10:08:49:
ce:4d:cc:6b:a2:a3:0a:e8:38:fc:83:75:93:d3:aa:
09:9b:82:17:a8:01:ec:21:99:8d:96:e2:95:6f:1a:
7c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9D:A5:A2:A8:24:5B:18:8D:E1:47:F8:1C:49:74:E1:0E:64:26:B4
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/IJ2loqgkWxiN4Uf4HEl04Q5kJrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.49.0.0/16
62.56.0.0/17
77.233.128.0/19
80.176.0.0/15
83.104.0.0/14
141.195.192.0/18
193.237.0.0/16
194.222.0.0/16
195.8.160.0/19
195.58.64.0/19
212.225.0.0/17
212.228.0.0/15
212.248.128.0/17
IPv6:
2001:958::/32
2a0a:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
58:b5:46:ce:c4:3f:5d:f8:f8:97:0a:c2:7f:68:b3:42:3e:fb:
7d:c7:45:8a:ed:37:e9:6c:36:3c:ce:96:4b:7e:64:cc:1e:d5:
65:60:28:4a:39:55:7b:25:8c:c3:e4:c5:c4:02:fc:e3:7f:72:
28:af:03:90:c6:42:7b:04:01:02:61:e0:c7:8f:a5:1b:c4:97:
2b:6a:c9:a1:f9:bc:a6:b3:e1:62:6c:02:6b:ca:53:3f:20:04:
de:19:96:05:6d:9d:a5:7b:df:50:de:08:6e:1b:5a:85:95:6a:
84:6a:c3:36:5e:52:d2:6f:01:9b:8e:47:4e:1c:e4:c4:72:78:
90:19:06:99:04:ce:28:90:63:33:1d:5d:46:d2:72:fc:8a:e8:
c7:1f:67:c6:db:dc:03:25:1f:45:95:6e:1b:b9:90:dd:48:f9:
64:fe:ef:55:eb:88:23:38:76:00:1b:62:f1:13:b9:b8:b2:7f:
01:73:92:4b:15:7f:89:a9:65:73:0e:0c:f8:32:88:ce:c8:3f:
52:40:e0:03:4f:ba:5c:4d:87:3e:05:69:b3:55:9b:98:a8:55:
78:72:64:85:1f:b9:53:9f:7a:10:1f:a9:aa:08:e0:2b:1c:29:
7c:12:8c:e0:be:5e:82:9b:2c:bd:34:ac:9c:28:95:21:35:91:
81:1a:5c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 13:36:56 2024 by rpki-client on console-fra.rpki-client.org