Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/7ti_zJsoM4DHhwmmXUQ0NdST2NI.roa
File: 7ti_zJsoM4DHhwmmXUQ0NdST2NI.roa (raw, json)
Hash identifier: phmBfwlZwtoihFRncedl96BAgjyojhjmJxC31gMz+5o=
Subject key identifier: EE:D8:BF:CC:9B:28:33:80:C7:87:09:A6:5D:44:34:35:D4:93:D8:D2
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01951A0E591CBC47117836AD2170B8515713
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/7ti_zJsoM4DHhwmmXUQ0NdST2NI.roa
Signing time: Tue 18 Feb 2025 17:15:02 +0000
ROA not before: Tue 18 Feb 2025 17:15:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8772
IP address blocks: 62.205.128.0/19 maxlen: 20
62.205.132.0/24 maxlen: 24
62.205.134.0/24 maxlen: 24
62.205.144.0/20 maxlen: 20
62.205.152.0/24 maxlen: 24
62.205.159.0/24 maxlen: 24
94.131.0.0/23 maxlen: 23
94.131.0.0/24 maxlen: 24
94.131.4.0/24 maxlen: 24
94.131.6.0/24 maxlen: 24
94.131.7.0/24 maxlen: 24
94.131.21.0/24 maxlen: 24
94.131.22.0/24 maxlen: 24
94.131.124.0/24 maxlen: 24
94.131.127.0/24 maxlen: 24
95.164.12.0/23 maxlen: 23
95.164.15.0/24 maxlen: 24
95.164.20.0/24 maxlen: 24
95.164.40.0/22 maxlen: 22
95.164.49.0/24 maxlen: 24
95.164.50.0/24 maxlen: 24
95.164.52.0/24 maxlen: 24
95.164.56.0/22 maxlen: 22
95.164.72.0/22 maxlen: 22
95.164.76.0/24 maxlen: 24
95.164.80.0/22 maxlen: 22
95.164.120.0/24 maxlen: 24
95.164.121.0/24 maxlen: 24
95.164.122.0/24 maxlen: 24
95.164.123.0/24 maxlen: 24
95.164.170.0/23 maxlen: 23
95.164.172.0/22 maxlen: 22
95.164.248.0/23 maxlen: 23
95.164.251.0/24 maxlen: 24
195.214.212.0/22 maxlen: 22
2a01:d0::/29 maxlen: 48
2a01:d0::/32 maxlen: 32
2a01:d0:4::/48 maxlen: 48
2a01:d0:a::/48 maxlen: 48
2a01:d0:28::/48 maxlen: 48
2a01:d0:3b::/48 maxlen: 48
2a01:d0:43::/48 maxlen: 48
2a01:d0:105::/48 maxlen: 48
2a01:d0:303::/48 maxlen: 48
2a01:d0:305::/48 maxlen: 48
2a01:d0:308::/48 maxlen: 48
2a01:d0:317::/48 maxlen: 48
2a01:d0:31d::/48 maxlen: 48
2a01:d0:333::/48 maxlen: 48
2a01:d0:962::/48 maxlen: 48
2a01:d0:1657::/48 maxlen: 48
2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Feb 2025 13:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:0e:59:1c:bc:47:11:78:36:ad:21:70:b8:51:57:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Feb 18 17:15:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eed8bfcc9b283380c78709a65d443435d493d8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:98:67:38:2a:d4:3e:1f:db:13:f8:38:cc:
69:3b:0f:dd:41:4e:e6:92:04:33:00:ad:43:6c:eb:
65:48:7b:b0:01:dd:f5:94:8d:8e:ac:c3:40:ae:ca:
b6:0d:ec:1f:97:65:d9:e8:a7:57:b0:b8:eb:15:a7:
46:de:40:43:1e:b1:34:da:36:0a:c1:25:30:c8:28:
16:a0:66:e4:0a:44:c1:c8:0e:ee:a1:c5:4b:7c:88:
30:5f:05:50:02:6d:ae:b0:e9:53:86:3d:7e:9a:b7:
fc:68:af:3b:ba:6e:ee:b6:35:d3:92:57:be:35:68:
69:f3:36:f6:01:bb:57:ba:db:c1:f8:45:38:5b:56:
ff:17:f5:98:e6:94:bd:c2:bc:5d:ea:d0:98:6d:fc:
2a:39:83:4c:15:d0:2b:bc:1c:ed:aa:a3:fe:da:85:
da:90:fb:f8:27:0d:f5:3b:f8:06:e3:cd:61:fc:dd:
62:f7:c1:9e:80:d5:13:00:a0:da:f4:5b:a6:49:cb:
80:a7:ca:7a:b1:8c:70:30:35:51:10:a0:af:12:10:
64:55:6e:b5:a1:30:b5:41:e7:7d:b2:b8:64:30:7b:
f5:d4:da:19:fc:3b:8c:08:58:87:56:1e:e3:98:f4:
fa:df:f9:28:40:0a:5a:f2:4a:98:c4:c8:78:a4:a3:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D8:BF:CC:9B:28:33:80:C7:87:09:A6:5D:44:34:35:D4:93:D8:D2
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/7ti_zJsoM4DHhwmmXUQ0NdST2NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.128.0/19
94.131.0.0/23
94.131.4.0/24
94.131.6.0/23
94.131.21.0-94.131.22.255
94.131.124.0/24
94.131.127.0/24
95.164.12.0/23
95.164.15.0/24
95.164.20.0/24
95.164.40.0/22
95.164.49.0-95.164.50.255
95.164.52.0/24
95.164.56.0/22
95.164.72.0-95.164.76.255
95.164.80.0/22
95.164.120.0/22
95.164.170.0-95.164.175.255
95.164.248.0/23
95.164.251.0/24
195.214.212.0/22
IPv6:
2a01:d0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:06:e3:ec:e2:8d:15:03:a0:53:22:63:ef:2e:23:8c:3e:c0:
e8:f0:d6:9e:0b:ff:fd:cb:7d:8b:35:09:39:12:5a:ba:2e:0d:
3f:2d:ef:da:04:67:8b:f2:2c:1f:10:9d:48:1c:40:eb:ce:be:
7f:58:da:3f:a0:df:7e:81:ff:89:b5:52:1b:45:d9:d3:2e:86:
97:a8:87:fe:91:8b:19:5b:39:0a:e8:08:25:b3:71:9e:af:95:
cf:0f:80:fb:91:3b:36:7a:f5:60:ce:09:db:90:8e:aa:b4:f2:
33:c2:b1:bc:14:52:bc:2c:06:76:2d:d2:75:71:e9:c3:7a:05:
32:8d:18:30:73:f9:dd:ef:9c:c7:8c:df:cb:31:88:c1:b9:25:
fa:c9:33:36:e9:67:67:63:8f:a0:83:57:a6:a2:82:66:e7:f3:
32:e7:12:ff:c6:dc:1f:66:a8:2d:5a:30:32:3f:6c:39:b9:16:
79:71:49:ba:49:dc:fc:a0:a9:6b:55:d3:97:c0:e6:3e:5a:58:
38:75:9d:a4:75:81:5f:55:98:50:f5:23:63:d4:c3:ff:f0:2a:
45:16:21:1b:ae:cd:87:c0:63:c8:bc:99:e8:d8:c7:74:10:fa:
e6:79:5b:57:6e:4f:b3:c8:4e:bb:e2:23:e0:cf:7d:06:44:17:
5c:04:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:34:01 2025 by rpki-client