Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/n_-5PJ5XBcr_o2pm6wiWw-azxvk.roa
File: n_-5PJ5XBcr_o2pm6wiWw-azxvk.roa (raw, json)
Hash identifier: 4pk7wYSuGSn0oN/xlw5hURnFjV3J6h1M2t7T0bIBuCE=
Subject key identifier: 9F:FF:B9:3C:9E:57:05:CA:FF:A3:6A:66:EB:08:96:C3:E6:B3:C6:F9
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 0190D9C584D42F3409241EDFD831FDFCBE65
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/n_-5PJ5XBcr_o2pm6wiWw-azxvk.roa
Signing time: Mon 22 Jul 2024 09:28:38 +0000
ROA not before: Mon 22 Jul 2024 09:28:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5430
IP address blocks: 62.104.0.0/16 maxlen: 16
62.104.10.0/23 maxlen: 23
62.104.12.0/22 maxlen: 22
62.104.16.0/24 maxlen: 24
62.104.17.0/24 maxlen: 24
62.104.18.0/24 maxlen: 24
62.104.20.0/23 maxlen: 24
62.104.45.0/24 maxlen: 24
62.104.46.0/23 maxlen: 23
62.104.48.0/23 maxlen: 23
62.104.50.0/24 maxlen: 24
62.104.56.0/24 maxlen: 24
62.104.66.0/23 maxlen: 23
62.104.95.0/24 maxlen: 24
62.104.96.0/21 maxlen: 22
62.104.104.0/22 maxlen: 22
62.104.164.0/22 maxlen: 22
62.104.164.0/24 maxlen: 24
62.104.168.0/22 maxlen: 22
62.104.172.0/23 maxlen: 23
62.104.174.0/24 maxlen: 24
62.104.175.0/24 maxlen: 24
62.104.176.0/22 maxlen: 22
89.48.0.0/13 maxlen: 24
89.49.126.0/24 maxlen: 24
89.49.127.0/24 maxlen: 24
194.97.0.0/18 maxlen: 18
194.97.0.0/24 maxlen: 24
194.97.46.0/23 maxlen: 24
194.97.58.0/24 maxlen: 24
194.97.96.0/19 maxlen: 19
194.97.96.0/24 maxlen: 24
194.97.102.0/24 maxlen: 24
194.97.118.0/24 maxlen: 24
194.97.119.0/24 maxlen: 24
194.97.120.0/23 maxlen: 23
194.97.122.0/24 maxlen: 24
194.97.160.0/19 maxlen: 19
194.97.164.0/22 maxlen: 22
195.4.0.0/17 maxlen: 17
195.4.6.0/24 maxlen: 24
195.4.12.0/23 maxlen: 23
195.4.16.0/22 maxlen: 22
195.4.16.0/24 maxlen: 24
195.4.27.0/24 maxlen: 24
195.4.70.0/24 maxlen: 24
195.4.71.0/24 maxlen: 24
195.4.104.0/22 maxlen: 22
195.4.176.0/21 maxlen: 21
195.4.216.0/21 maxlen: 21
195.4.224.0/19 maxlen: 19
195.4.234.0/23 maxlen: 24
2001:748::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 30 Jul 2024 07:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:c5:84:d4:2f:34:09:24:1e:df:d8:31:fd:fc:be:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Jul 22 09:28:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fffb93c9e5705caffa36a66eb0896c3e6b3c6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:83:3e:17:3c:02:02:87:4b:b4:b8:c2:f8:4c:
69:32:14:17:c2:62:34:c8:11:c0:db:e8:e2:c6:1c:
10:5a:b5:bd:29:48:56:88:f6:8a:67:35:a2:ba:5b:
fc:2a:aa:9a:27:4b:24:0e:24:e5:7d:ee:6d:10:69:
40:78:35:e9:28:6a:8e:52:c2:1d:a1:4b:3c:f2:37:
08:6c:45:c2:8b:c0:f5:04:90:45:2d:41:23:21:a6:
d9:10:8e:59:1b:d7:20:cb:97:b6:88:a8:b3:fb:be:
52:8b:e1:62:a0:bb:c3:37:a8:44:e1:79:b5:bf:c1:
fa:c4:ee:a1:ee:03:3b:d6:50:bd:b5:c1:01:a5:cf:
b6:a0:f0:c6:94:a6:25:d6:ca:6e:82:a6:b1:42:c9:
e2:c9:af:31:b6:64:ef:63:1e:03:b0:f4:e7:08:85:
f3:18:86:ea:e2:45:66:9e:cf:33:20:a2:56:12:f4:
6a:ce:15:ab:5c:e9:42:28:f3:66:75:be:cf:1e:c9:
15:f5:59:dd:af:f5:18:13:21:2c:11:9b:ba:3f:22:
33:c4:cc:62:86:57:8c:0b:3d:2f:c6:88:25:8b:fa:
59:f5:fc:fb:cc:b2:c4:f0:72:d9:ad:fa:5d:d4:83:
6a:33:9d:98:14:66:03:59:1e:43:30:2f:04:eb:47:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FF:B9:3C:9E:57:05:CA:FF:A3:6A:66:EB:08:96:C3:E6:B3:C6:F9
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/n_-5PJ5XBcr_o2pm6wiWw-azxvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.104.0.0/16
89.48.0.0/13
194.97.0.0/18
194.97.96.0/19
194.97.160.0/19
195.4.0.0/17
195.4.176.0/21
195.4.216.0-195.4.255.255
IPv6:
2001:748::/32
Signature Algorithm: sha256WithRSAEncryption
32:e7:bf:d3:8b:ea:53:4f:a5:0e:b1:a8:b9:ca:1e:b8:25:01:
e4:c6:d3:e1:89:38:b3:29:d0:87:60:e5:5e:41:15:c4:a9:62:
4a:57:30:a7:fb:9a:30:eb:5a:51:11:dd:3c:60:2f:db:f9:51:
9d:e0:a2:8b:db:25:5f:3c:bb:6a:20:b3:4d:22:c3:f7:0d:00:
80:ba:f0:d2:42:d2:b1:fa:0d:25:c0:7d:7c:c3:c4:4e:53:9c:
cd:9c:69:46:8f:04:f0:e0:3a:f8:47:e2:47:c0:96:d4:ba:5d:
6d:b7:c9:e1:73:cf:a9:88:40:ef:96:50:d3:c5:15:ba:42:c2:
5f:e1:1a:e6:12:7e:c6:46:41:b8:ae:7f:22:1a:60:a1:00:c3:
09:bc:a7:af:a3:8e:bb:d3:5c:40:4d:e1:fd:0d:49:02:93:03:
d9:22:40:ca:04:9f:2d:10:ff:09:06:24:0b:58:46:13:90:af:
f8:6c:e2:b1:cf:14:f5:87:3f:26:6e:2c:56:e6:9d:b4:d1:05:
89:59:3c:b8:7e:ee:5f:8d:c3:2d:0d:ac:6c:83:63:50:cb:1a:
c2:cd:a6:71:bd:06:91:67:53:84:34:4d:30:a0:10:5d:7c:58:
09:2f:49:c3:3c:f1:d5:ca:21:a8:93:bc:f6:25:35:02:ae:64:
f2:b8:ea:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 30 09:58:21 2024 by rpki-client on console-ams.rpki-client.org