Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/AXb9EQwD2IR2olWqPWcxSoVZWtg.roa
File: AXb9EQwD2IR2olWqPWcxSoVZWtg.roa (raw, json)
Hash identifier: sUKQzt7LJHLZf9RMm+QZkBbV3ZwGHsoB7aGWGJB4q1o=
Subject key identifier: 01:76:FD:11:0C:03:D8:84:76:A2:55:AA:3D:67:31:4A:85:59:5A:D8
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01912CBD3FE9E13B522ED4092CEE892CBFB1
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/AXb9EQwD2IR2olWqPWcxSoVZWtg.roa
Signing time: Wed 07 Aug 2024 12:08:05 +0000
ROA not before: Wed 07 Aug 2024 12:08:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28843
IP address blocks: 62.205.192.0/18 maxlen: 18
62.205.192.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2c:bd:3f:e9:e1:3b:52:2e:d4:09:2c:ee:89:2c:bf:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Aug 7 12:08:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0176fd110c03d88476a255aa3d67314a85595ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:3b:2c:e0:be:d3:51:89:69:51:37:21:6c:
ef:a8:ee:8e:42:75:42:dd:22:b6:ed:c6:8c:52:f5:
f8:5b:0f:8e:b2:0e:47:c8:22:2f:55:05:c5:94:9d:
29:15:34:1c:01:90:26:b2:09:b0:3b:dc:5a:fc:76:
74:11:f8:09:61:1e:11:a8:c8:5f:2d:4f:59:3a:ef:
e6:91:e3:02:8f:a1:fe:ae:54:09:b3:e9:6d:9a:fe:
2e:c6:e0:c9:8a:76:1c:ff:80:83:94:63:9f:34:8f:
22:29:53:83:95:d4:11:76:f2:48:f9:5b:43:b8:70:
1b:a0:1f:67:b2:88:83:eb:2f:00:79:e4:3d:c3:81:
00:f2:90:27:28:b3:19:84:ac:8d:46:d3:a4:e4:43:
b6:36:cc:71:c4:b2:2d:bb:59:70:32:6b:e9:60:ce:
cc:04:71:bc:68:13:39:23:1b:5f:72:5c:cf:4e:8f:
df:30:e1:e8:fc:5f:91:fd:3d:14:40:b3:d2:4c:bb:
b5:47:35:76:ae:26:f7:a1:08:e5:e5:95:d2:ac:7a:
fe:f9:53:d6:44:9d:d2:95:c3:9b:01:03:8e:29:c5:
ef:5e:23:54:28:c6:a1:da:ed:af:9f:47:35:b8:b2:
e9:a5:0d:f4:57:75:44:fc:09:9b:b0:43:ff:80:17:
49:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:76:FD:11:0C:03:D8:84:76:A2:55:AA:3D:67:31:4A:85:59:5A:D8
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/AXb9EQwD2IR2olWqPWcxSoVZWtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.192.0/18
Signature Algorithm: sha256WithRSAEncryption
67:d1:6b:d0:e9:c0:4c:a9:d0:0f:36:94:e3:77:a8:c6:36:69:
47:33:88:2c:39:22:dc:75:b9:e4:29:f7:92:75:8a:00:5f:b6:
86:75:91:23:13:ba:61:eb:f2:20:a4:02:89:72:f8:8f:47:e9:
76:1b:0e:34:b3:85:af:e6:ab:0d:a1:00:48:51:4d:ba:3f:8a:
69:83:6d:45:ed:d9:57:1b:9c:90:29:1b:6b:72:42:c2:fd:1d:
c5:59:f1:01:8e:57:7b:9b:63:c6:4f:e9:f4:6c:12:55:8c:e6:
ff:c4:da:9d:8d:69:e7:97:81:f1:67:a1:8b:c3:33:ad:d4:c3:
66:03:5d:f3:0b:25:48:2c:08:fe:20:b2:ad:9f:af:dc:4a:2c:
8f:9f:ac:4d:0c:f1:c3:20:58:bc:ae:3d:dc:22:3e:1e:25:91:
4d:25:28:11:41:1e:11:ca:18:20:94:d1:69:02:79:e7:66:c3:
de:64:d6:63:a0:fe:c3:1e:77:ac:75:44:cf:c8:08:90:70:98:
13:91:7f:cb:89:cc:d6:6f:75:f7:b0:f2:50:df:71:ac:e9:2f:
35:d1:f6:b9:da:e5:e0:f0:81:80:24:85:a3:5e:65:ee:45:7d:
60:45:9a:66:bd:a2:49:98:a4:00:50:a2:f3:e8:5a:52:66:83:
f5:44:e4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:08:34 2025 by rpki-client