Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/JOjU34skH7dArYK0S1odyJkLdh8.roa
File: JOjU34skH7dArYK0S1odyJkLdh8.roa (raw, json)
Hash identifier: ugKm+lnYcNd26I0VFz5xV5x2/jQpGy7ZsvAykLPqsnA=
Subject key identifier: 24:E8:D4:DF:8B:24:1F:B7:40:AD:82:B4:4B:5A:1D:C8:99:0B:76:1F
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 019246E1FA9160DE17456015324FB1A09934
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/JOjU34skH7dArYK0S1odyJkLdh8.roa
Signing time: Tue 01 Oct 2024 07:01:07 +0000
ROA not before: Tue 01 Oct 2024 07:01:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5430
IP address blocks: 62.104.0.0/16 maxlen: 16
62.104.10.0/23 maxlen: 23
62.104.12.0/22 maxlen: 22
62.104.16.0/24 maxlen: 24
62.104.17.0/24 maxlen: 24
62.104.18.0/24 maxlen: 24
62.104.20.0/23 maxlen: 24
62.104.45.0/24 maxlen: 24
62.104.46.0/23 maxlen: 23
62.104.48.0/23 maxlen: 23
62.104.50.0/24 maxlen: 24
62.104.56.0/24 maxlen: 24
62.104.66.0/23 maxlen: 23
62.104.95.0/24 maxlen: 24
62.104.96.0/21 maxlen: 22
62.104.104.0/22 maxlen: 22
62.104.164.0/22 maxlen: 22
62.104.164.0/24 maxlen: 24
62.104.168.0/22 maxlen: 22
62.104.172.0/23 maxlen: 23
62.104.174.0/24 maxlen: 24
62.104.175.0/24 maxlen: 24
62.104.176.0/22 maxlen: 22
194.97.0.0/18 maxlen: 18
194.97.0.0/24 maxlen: 24
194.97.46.0/23 maxlen: 24
194.97.58.0/24 maxlen: 24
194.97.96.0/19 maxlen: 19
194.97.96.0/24 maxlen: 24
194.97.102.0/24 maxlen: 24
194.97.118.0/24 maxlen: 24
194.97.119.0/24 maxlen: 24
194.97.120.0/23 maxlen: 23
194.97.122.0/24 maxlen: 24
194.97.160.0/19 maxlen: 19
194.97.164.0/22 maxlen: 22
195.4.0.0/17 maxlen: 17
195.4.6.0/24 maxlen: 24
195.4.12.0/23 maxlen: 23
195.4.16.0/22 maxlen: 22
195.4.16.0/24 maxlen: 24
195.4.27.0/24 maxlen: 24
195.4.70.0/24 maxlen: 24
195.4.71.0/24 maxlen: 24
195.4.104.0/22 maxlen: 22
195.4.176.0/21 maxlen: 24
195.4.216.0/21 maxlen: 21
195.4.224.0/19 maxlen: 19
2001:748::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 14 Oct 2024 09:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:46:e1:fa:91:60:de:17:45:60:15:32:4f:b1:a0:99:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Oct 1 07:01:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24e8d4df8b241fb740ad82b44b5a1dc8990b761f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:9e:76:01:9a:34:f5:f0:46:4f:eb:3c:53:
06:1a:80:68:04:2f:ce:92:75:01:a1:8b:67:dd:ba:
2f:d6:eb:f3:bd:f2:cc:cf:8b:cb:b5:85:11:8b:ef:
0b:2f:2c:60:e1:e3:47:44:28:08:65:50:9d:09:15:
cd:4b:41:fa:83:40:68:d1:e8:f6:7c:2d:0a:38:1a:
9b:a2:bf:32:ce:55:46:9f:a3:82:f4:39:a1:81:7d:
32:00:26:31:07:09:cf:81:29:1c:27:c5:01:af:17:
f5:5c:91:bf:e3:69:7e:ac:a4:05:b3:24:23:39:cb:
b1:8d:59:5b:50:e9:3e:7d:eb:2d:b8:86:84:a7:fb:
c6:3b:53:8d:07:38:80:a5:71:73:c3:27:77:bf:8d:
f9:ae:9c:2f:8b:65:5f:7b:0e:c8:f3:da:e6:d4:a6:
95:c7:24:17:91:42:b3:47:c8:06:d6:1e:92:db:44:
67:86:df:52:cf:91:d9:dd:7d:b3:c2:ec:7c:00:95:
96:69:5f:a3:36:d0:33:19:30:e7:ef:97:2b:93:29:
4c:c3:04:e0:c6:22:9f:2f:0c:4f:87:54:17:56:a9:
ed:fa:d2:07:b6:f2:d7:92:e1:4d:d4:1a:e0:24:e2:
73:29:75:4a:52:b0:12:2a:8f:2e:1f:37:c7:d5:4e:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E8:D4:DF:8B:24:1F:B7:40:AD:82:B4:4B:5A:1D:C8:99:0B:76:1F
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/JOjU34skH7dArYK0S1odyJkLdh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.104.0.0/16
194.97.0.0/18
194.97.96.0/19
194.97.160.0/19
195.4.0.0/17
195.4.176.0/21
195.4.216.0-195.4.255.255
IPv6:
2001:748::/32
Signature Algorithm: sha256WithRSAEncryption
3c:32:7b:47:7e:d3:5d:51:8b:45:df:f5:0e:6a:84:80:b0:81:
da:04:69:29:69:4d:c7:01:cd:73:c3:9d:e8:98:63:eb:50:93:
e4:9e:c7:48:92:dd:26:ce:44:4a:aa:c4:87:ff:d9:60:ae:d1:
a3:f5:b5:f4:6e:53:a8:4d:55:72:f7:1e:0c:39:64:64:9a:da:
dd:54:b9:c5:e3:1e:f3:b4:3a:7a:b4:f4:55:0f:2a:5f:19:82:
e3:dc:70:16:1d:45:09:8c:b5:b8:9b:ea:8c:0f:ed:bd:84:21:
ab:e5:b5:a3:bd:dd:65:12:16:42:bb:d2:5f:6b:78:1c:41:8e:
02:18:84:ea:a7:17:1c:ba:4d:b0:c1:7a:01:19:90:94:7e:4b:
67:5f:fb:8a:ff:fb:7b:81:cc:33:7a:6f:2e:02:7b:f0:10:6a:
e6:77:f1:42:38:7d:f5:e8:15:79:c6:4d:ce:45:7e:7f:3e:c8:
b0:d6:ee:53:bd:67:14:2f:9a:5a:6c:a7:40:6e:05:de:c9:60:
09:d0:ff:61:20:0c:0d:f2:de:51:90:9d:26:cc:5b:81:44:91:
ae:dd:1a:19:13:a8:53:08:fe:5d:9d:b1:c0:09:f4:af:bd:8a:
f5:6f:e0:a3:5d:9b:57:d2:df:6f:80:47:cc:6e:f3:56:56:b7:
ae:54:d3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 11:33:27 2024 by rpki-client on console-fra.rpki-client.org