Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/krOJkhTKL0nRxSLbWwQbKogCWDg.roa
File: krOJkhTKL0nRxSLbWwQbKogCWDg.roa (raw, json)
Hash identifier: Cv11ybEfaiRLcvb8heKTggUCBYhNncQMgxHVSf/YXxk=
Subject key identifier: 92:B3:89:92:14:CA:2F:49:D1:C5:22:DB:5B:04:1B:2A:88:02:58:38
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 018CC94E57E18FFB70AA73765CEFB30C5797
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/krOJkhTKL0nRxSLbWwQbKogCWDg.roa
Signing time: Tue 02 Jan 2024 08:33:23 +0000
ROA not before: Tue 02 Jan 2024 08:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 83.149.64.0/18 maxlen: 18
212.7.208.0/22 maxlen: 22
37.48.64.0/18 maxlen: 18
212.32.224.0/19 maxlen: 19
185.17.184.0/22 maxlen: 22
81.171.0.0/19 maxlen: 19
178.162.164.0/22 maxlen: 22
178.162.168.0/22 maxlen: 22
212.7.192.0/20 maxlen: 20
178.162.176.0/20 maxlen: 20
89.149.192.0/20 maxlen: 20
89.149.192.0/18 maxlen: 18
94.75.192.0/18 maxlen: 18
95.168.160.0/20 maxlen: 20
82.192.64.0/19 maxlen: 19
81.17.51.0/24 maxlen: 24
81.17.50.0/24 maxlen: 24
81.17.49.0/24 maxlen: 24
81.17.47.0/24 maxlen: 24
81.17.55.0/24 maxlen: 24
81.17.54.0/24 maxlen: 24
81.17.53.0/24 maxlen: 24
81.17.52.0/24 maxlen: 24
62.212.64.0/19 maxlen: 19
5.79.64.0/18 maxlen: 18
213.227.128.0/19 maxlen: 19
173.234.68.0/22 maxlen: 22
85.17.0.0/16 maxlen: 16
178.162.128.0/18 maxlen: 18
95.211.0.0/16 maxlen: 16
2001:1af8::/32 maxlen: 32
2001:1af8:8000::/36 maxlen: 36
2001:1af8:8000::/40 maxlen: 40
2001:1af8:8110::/44 maxlen: 44
2001:1af8:8100::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 13 Mar 2024 09:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:57:e1:8f:fb:70:aa:73:76:5c:ef:b3:0c:57:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: Jan 2 08:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92b3899214ca2f49d1c522db5b041b2a88025838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3c:35:39:81:b7:a3:21:fe:08:15:b9:25:f8:
a0:bd:f8:12:de:cd:b1:6d:f0:a8:97:f5:ed:e9:bf:
e4:7a:12:89:d3:79:ab:a9:e3:3d:12:15:6f:65:b2:
e8:e6:a1:b8:87:99:a5:68:89:a9:cf:56:66:ef:6c:
53:31:2d:e5:ac:a3:f0:87:72:04:09:bc:6f:af:cd:
db:01:a9:c9:c3:db:d8:fb:dd:12:9c:ed:ba:b6:6b:
2f:95:d8:f5:57:33:cb:16:8c:b2:ee:8f:c9:52:1f:
11:71:ec:d2:c4:83:40:f8:7d:63:cd:2c:8e:6c:3c:
95:d5:06:61:2c:bc:72:3f:ba:68:74:07:eb:fa:f5:
74:b3:c6:32:2a:2f:ab:67:5e:e7:e2:f7:57:c7:e8:
82:b6:7f:e6:4d:fc:cc:7c:3a:06:0e:8f:53:dc:51:
7b:2f:c7:4b:10:2e:0e:88:f7:87:25:4f:8b:c1:32:
d7:fc:ba:10:c5:cf:a8:61:a4:f8:5b:d0:b0:07:cc:
c1:ce:b8:ae:93:cb:be:c9:12:0d:6a:00:4c:dd:74:
f0:a2:a4:a0:08:f2:ff:41:66:cb:a5:f5:39:d7:7e:
ec:ae:68:9a:4b:49:24:d4:e0:cb:67:51:b6:00:0a:
b9:0c:bd:3d:f3:62:e8:b7:95:fc:f1:a6:75:89:1f:
62:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B3:89:92:14:CA:2F:49:D1:C5:22:DB:5B:04:1B:2A:88:02:58:38
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/krOJkhTKL0nRxSLbWwQbKogCWDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.79.64.0/18
37.48.64.0/18
62.212.64.0/19
81.17.47.0/24
81.17.49.0-81.17.55.255
81.171.0.0/19
82.192.64.0/19
83.149.64.0/18
85.17.0.0/16
89.149.192.0/18
94.75.192.0/18
95.168.160.0/20
95.211.0.0/16
173.234.68.0/22
178.162.128.0/18
185.17.184.0/22
212.7.192.0-212.7.211.255
212.32.224.0/19
213.227.128.0/19
IPv6:
2001:1af8::/32
Signature Algorithm: sha256WithRSAEncryption
28:ed:a6:3f:16:18:39:86:48:74:17:c2:e3:18:88:39:96:b4:
c0:a0:b5:01:e7:b2:91:4f:d0:0d:16:d4:9b:57:d1:ef:30:93:
99:6d:67:33:44:19:4d:5e:e8:06:92:f5:77:80:1b:ce:33:c4:
f8:d3:26:8c:58:91:6a:e3:18:80:57:0a:dc:e4:20:bd:bb:ab:
c6:08:ce:59:dc:b3:f5:e8:e9:93:3e:ae:06:65:96:38:d7:c9:
18:49:a3:4d:78:34:7e:2e:e5:fd:45:79:82:82:ca:b0:d2:34:
14:79:9a:d1:b1:9f:1f:6b:7e:93:8e:69:f4:0d:30:cf:56:62:
23:88:32:c1:8a:67:bc:e4:c0:d9:03:99:31:4e:4e:28:1b:55:
f9:ff:93:4c:dc:2f:86:3a:2d:5f:43:cb:a2:8d:6c:b2:ff:fc:
f7:4e:92:76:01:88:84:09:ba:e0:05:2f:61:59:2f:47:76:cb:
12:e5:94:20:87:a5:a1:9e:2b:f8:f0:7e:f7:97:c4:57:ba:f3:
c6:2e:e0:63:a5:87:7c:23:19:c8:26:bb:49:39:70:9b:bc:41:
33:34:f8:e4:2a:28:d0:dd:e9:0a:8b:22:ca:20:d4:20:33:5d:
6c:c0:83:c8:7b:f9:11:c5:d3:47:f5:f9:75:29:4e:38:ce:74:
5b:4a:42:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:50 2024 by rpki-client on console-ams.rpki-client.org