Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/5PA2iDlGu4tr2ITrPnCm7u4iPjU.roa
File: 5PA2iDlGu4tr2ITrPnCm7u4iPjU.roa (raw, json)
Hash identifier: 76y1EsVeiKzcAP1o7h8dUlU8NrzLftwVSQnshT/QWZc=
Subject key identifier: E4:F0:36:88:39:46:BB:8B:6B:D8:84:EB:3E:70:A6:EE:EE:22:3E:35
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 0194258E5B0654EB0C12B7338DEEAC808578
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/5PA2iDlGu4tr2ITrPnCm7u4iPjU.roa
Signing time: Thu 02 Jan 2025 05:47:53 +0000
ROA not before: Thu 02 Jan 2025 05:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197248
IP address blocks: 62.112.192.0/21 maxlen: 21
62.112.208.0/21 maxlen: 21
77.111.88.0/21 maxlen: 24
93.88.192.0/21 maxlen: 21
93.88.194.0/24 maxlen: 24
109.61.0.0/22 maxlen: 22
109.61.8.0/21 maxlen: 21
109.61.20.0/22 maxlen: 22
109.61.22.0/24 maxlen: 24
109.61.24.0/21 maxlen: 21
109.61.48.0/20 maxlen: 20
109.61.64.0/20 maxlen: 21
109.61.96.0/21 maxlen: 21
109.61.112.0/21 maxlen: 21
2a01:be00::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 20 Jan 2025 06:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:5b:06:54:eb:0c:12:b7:33:8d:ee:ac:80:85:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: Jan 2 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4f036883946bb8b6bd884eb3e70a6eeee223e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b3:d3:3b:99:e0:be:56:06:a8:d0:8e:77:5b:
62:0b:de:95:fb:06:a7:3d:f9:05:61:19:7a:b2:99:
89:24:4f:15:6f:ac:06:de:87:c8:72:b2:f3:b9:6f:
71:e4:d4:48:30:a7:35:3b:f1:1b:6b:22:ea:d6:4b:
2a:6f:71:dc:dc:09:c7:86:2a:0f:28:6a:06:c8:d7:
14:7e:44:c4:5c:60:0c:8e:33:eb:9d:81:2c:19:78:
46:74:04:61:c3:23:85:d7:e3:dd:c7:ee:68:6a:d4:
c3:e8:0c:a8:36:5a:fd:9c:a6:63:74:6a:b3:f5:bb:
a1:4d:ca:36:9c:ad:ba:13:e7:3d:86:b4:42:f8:b7:
78:67:85:2e:78:09:c9:e5:d4:9e:12:19:c1:85:40:
61:85:5a:c3:5c:70:29:e3:a8:7c:e0:80:cb:c0:c3:
1a:ca:73:08:99:22:63:c7:ce:d0:4d:5e:16:13:22:
7c:71:be:64:ce:05:51:d7:4a:dc:7e:ff:1a:c8:1d:
57:70:95:fd:fc:cf:28:07:e5:f0:13:42:19:f1:53:
46:35:48:ce:8d:49:94:d3:71:63:f8:0b:bd:db:62:
9b:6f:35:5a:ab:b8:a0:5c:f7:20:2b:22:06:a0:11:
21:f2:f3:eb:cb:1d:5d:2a:0e:77:d9:86:1d:ef:c1:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F0:36:88:39:46:BB:8B:6B:D8:84:EB:3E:70:A6:EE:EE:22:3E:35
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/5PA2iDlGu4tr2ITrPnCm7u4iPjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.192.0/21
62.112.208.0/21
77.111.88.0/21
93.88.192.0/21
109.61.0.0/22
109.61.8.0/21
109.61.20.0-109.61.31.255
109.61.48.0-109.61.79.255
109.61.96.0/21
109.61.112.0/21
IPv6:
2a01:be00::/32
Signature Algorithm: sha256WithRSAEncryption
54:55:58:4f:9c:ee:29:b8:d6:94:54:70:aa:43:65:3f:5a:00:
f9:5d:19:ec:40:4a:2c:4b:1e:7b:05:62:6e:3c:ae:f5:1f:83:
98:99:ff:84:f4:6b:61:75:6a:a6:eb:d7:ce:34:87:12:75:83:
5a:77:e7:91:6d:31:71:0e:1d:e2:59:e7:02:c0:d1:d0:00:2e:
e6:ff:de:91:1e:21:b4:74:07:be:13:30:f9:a5:21:28:f7:5d:
ed:1a:56:9f:65:99:b7:8f:d9:62:0b:6a:67:c3:b9:db:0c:1f:
fd:ac:52:6e:4b:bd:f7:a5:ae:91:cb:e2:7d:c8:1d:ce:3a:95:
76:36:89:b8:f7:7c:96:61:26:74:e5:91:73:de:d7:21:11:e5:
2a:5f:90:28:25:19:5d:e9:24:2a:1b:d2:20:3d:40:06:53:53:
2c:6d:ff:0e:ce:f6:0d:73:73:f7:c2:53:93:ba:fd:37:c7:32:
de:db:91:1c:1b:e7:13:51:71:21:42:f1:74:74:d4:7d:46:79:
e5:a5:d6:0e:5f:af:9b:55:f6:a2:93:e0:6a:72:10:80:31:6f:
0c:fb:42:2b:1b:f8:b8:24:5e:1f:5b:fa:3b:e7:c4:08:3f:93:
b5:ae:f0:88:5f:9f:db:36:81:c1:a2:28:65:eb:d6:2a:22:ed:
5e:cf:22:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:27:19 2025 by rpki-client