Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/747vHiPt7BtfoSHdiVPKrjTcxEM.roa
File: 747vHiPt7BtfoSHdiVPKrjTcxEM.roa (raw, json)
Hash identifier: ZaZtq/8uFyjv/7meBqvPjvVLHk3Gdz/j/4Ud0Gdmlo8=
Subject key identifier: EF:8E:EF:1E:23:ED:EC:1B:5F:A1:21:DD:89:53:CA:AE:34:DC:C4:43
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 0185E38143FF6E6E56AFB1452F712376D982
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/747vHiPt7BtfoSHdiVPKrjTcxEM.roa
Signing time: Tue 24 Jan 2023 11:19:37 +0000
ROA not before: Tue 24 Jan 2023 11:19:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29061
IP address blocks: 95.87.95.0/24 maxlen: 24
95.87.93.0/24 maxlen: 24
95.87.92.0/24 maxlen: 24
95.87.94.0/24 maxlen: 24
92.62.64.0/21 maxlen: 24
92.62.64.0/20 maxlen: 24
92.62.66.0/23 maxlen: 23
92.62.65.0/24 maxlen: 24
95.87.72.0/21 maxlen: 24
95.87.72.0/22 maxlen: 22
95.87.76.0/22 maxlen: 22
95.87.80.0/20 maxlen: 24
95.87.80.0/21 maxlen: 21
95.87.88.0/22 maxlen: 22
185.53.229.0/24 maxlen: 24
185.53.228.0/22 maxlen: 22
185.53.228.0/24 maxlen: 24
185.53.231.0/24 maxlen: 24
185.53.230.0/24 maxlen: 24
217.29.17.0/24 maxlen: 24
217.29.16.0/24 maxlen: 24
217.29.16.0/21 maxlen: 24
217.29.16.0/20 maxlen: 24
217.29.24.0/24 maxlen: 24
217.29.23.0/24 maxlen: 24
217.29.24.0/21 maxlen: 21
217.29.20.0/24 maxlen: 24
217.29.22.0/24 maxlen: 24
217.29.21.0/24 maxlen: 24
217.29.19.0/24 maxlen: 24
217.29.18.0/24 maxlen: 24
217.29.26.0/24 maxlen: 24
217.29.25.0/24 maxlen: 24
217.29.31.0/24 maxlen: 24
217.29.27.0/24 maxlen: 24
217.29.28.0/24 maxlen: 24
2a02:820::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:81:43:ff:6e:6e:56:af:b1:45:2f:71:23:76:d9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Jan 24 11:19:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef8eef1e23edec1b5fa121dd8953caae34dcc443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:04:b1:e5:2e:23:58:fb:16:0c:32:87:d0:88:
5d:fb:34:73:43:61:e9:71:e1:8b:af:ce:ef:b6:1e:
f0:0f:f9:e4:86:f3:b9:6b:89:32:d5:30:17:d7:03:
55:e2:68:e1:f2:a4:82:e5:1a:06:2a:aa:ab:80:34:
43:35:75:4a:b4:cd:18:c2:32:ea:04:31:5b:cf:a4:
9f:88:3f:e1:77:cf:ea:4a:90:76:8d:c4:8b:6b:53:
1b:7f:18:ce:37:e0:0d:8b:69:ed:51:53:bc:7f:7a:
f1:c7:a0:11:80:d0:2f:ee:4b:e4:f8:a9:69:15:89:
67:a3:db:2a:70:0c:9d:c9:00:db:7b:70:70:e7:60:
70:ec:13:4d:a5:9e:b3:6f:56:ea:3a:83:51:8d:51:
ac:92:e9:42:14:16:0a:6a:d6:31:06:12:6e:0f:a3:
21:0f:5e:25:ae:66:a8:49:40:ba:97:7e:42:42:e4:
08:84:2a:8b:8f:7d:21:4d:42:4c:eb:a7:6d:39:2b:
16:81:49:48:f3:61:00:b1:de:45:ba:13:7f:d6:55:
27:3c:f5:d6:e4:f2:20:03:e8:f8:45:0d:d7:4c:c0:
33:c0:9d:5c:ff:aa:b4:2f:c2:6d:a3:77:40:d3:92:
3c:79:44:fe:65:bd:69:15:c1:7d:80:26:b5:7f:22:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8E:EF:1E:23:ED:EC:1B:5F:A1:21:DD:89:53:CA:AE:34:DC:C4:43
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/747vHiPt7BtfoSHdiVPKrjTcxEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.64.0/20
95.87.72.0-95.87.95.255
185.53.228.0/22
217.29.16.0/20
IPv6:
2a02:820::/32
Signature Algorithm: sha256WithRSAEncryption
2a:9e:1d:66:01:e7:7e:bd:53:76:29:c7:e4:8e:d1:d1:d8:7a:
ac:25:bf:e8:b8:e3:c4:93:58:02:79:9f:fc:38:ff:92:61:da:
af:f1:84:32:f7:c6:72:19:b9:59:df:af:2d:58:a6:47:c8:7f:
d1:5c:4f:35:03:5e:eb:0c:af:53:c2:57:a3:ca:77:7e:3b:61:
ab:6c:53:de:cf:67:c4:d8:57:59:93:48:9d:97:42:e9:b8:3c:
a7:49:d3:bc:3d:41:2a:48:39:4f:2d:ba:05:30:4c:2b:e1:aa:
4e:5d:48:bf:2a:be:14:63:6c:69:7c:01:85:60:0f:fd:94:cf:
a2:5d:0f:b9:13:d3:d0:e5:84:ea:03:bf:f0:d5:ac:55:30:a4:
07:0f:76:0f:4d:03:bf:ce:4c:74:37:e7:6b:33:4d:8a:3e:f3:
89:d7:0b:54:d0:b2:a1:5e:92:51:88:44:fd:ca:e4:15:94:ff:
b2:81:8f:ac:39:db:89:6a:01:33:01:9a:5c:bb:d7:df:d1:fd:
b9:d7:ef:14:34:5c:d1:28:f9:62:97:41:0b:97:71:50:b8:bd:
03:41:db:f6:c2:4e:da:98:2e:a1:36:c6:48:15:dc:75:ab:ad:
13:57:4e:19:b6:1b:d2:04:63:8c:00:84:a5:a9:a3:72:1c:3b:
44:8e:2f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:28 2024 by rpki-client on console-ams.rpki-client.org