Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/ofK6yQZuzc7bB5eBkq7OKP_zcIg.roa
File: ofK6yQZuzc7bB5eBkq7OKP_zcIg.roa (raw, json)
Hash identifier: c+2Wvq5riJ3uEcgaHTzuOHvG49EHdwspAWlOwKBAotE=
Subject key identifier: A1:F2:BA:C9:06:6E:CD:CE:DB:07:97:81:92:AE:CE:28:FF:F3:70:88
Certificate issuer: /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial: 018CC6B8484A759ACFFC945C4DB7F951F7BA
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/ofK6yQZuzc7bB5eBkq7OKP_zcIg.roa
Signing time: Mon 01 Jan 2024 20:30:14 +0000
ROA not before: Mon 01 Jan 2024 20:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59992
IP address blocks: 185.62.133.0/24 maxlen: 24
185.62.132.0/24 maxlen: 24
2a03:3e0::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:48:4a:75:9a:cf:fc:94:5c:4d:b7:f9:51:f7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Validity
Not Before: Jan 1 20:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1f2bac9066ecdcedb07978192aece28fff37088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8a:17:56:73:aa:79:3c:f0:00:4b:ca:fb:42:
4c:f9:57:32:8f:c4:32:88:ed:da:d1:4f:8d:98:a8:
2e:5e:b6:95:5a:7e:54:d5:3f:03:71:4a:12:79:1f:
7d:ab:cf:ad:60:15:b8:11:87:90:3b:60:ab:d4:e3:
9c:21:2b:50:b4:db:e1:38:d9:3d:ce:01:10:6b:ba:
25:78:b4:ab:5f:a0:5b:dd:9c:9c:61:43:11:db:3d:
2d:4a:26:6a:63:e3:1f:67:c8:40:2b:1e:e7:6e:80:
74:c4:a9:44:e4:24:59:81:c6:b8:cb:ff:44:ab:cf:
a9:f7:16:78:3f:94:94:5d:01:7b:ae:82:91:c1:7c:
17:12:a8:ab:e6:50:35:6e:ba:37:31:cd:03:9f:b7:
36:91:14:b6:fa:be:19:a8:c9:d2:75:93:d3:97:ae:
1b:c6:29:9f:68:a1:91:8f:b6:c8:cc:74:19:cb:d9:
99:cc:36:ef:be:dd:d6:d1:c1:55:30:03:28:09:16:
1f:f5:95:74:ec:8e:2f:6a:af:34:15:27:20:39:51:
d1:8c:a1:4a:54:77:53:2d:43:92:5c:15:46:05:b6:
55:3f:40:9f:a5:02:e9:c3:8e:6d:a3:eb:64:cb:0d:
0b:64:a1:a0:51:dd:57:e2:d0:9e:cc:47:9b:48:c6:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F2:BA:C9:06:6E:CD:CE:DB:07:97:81:92:AE:CE:28:FF:F3:70:88
X509v3 Authority Key Identifier:
keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/ofK6yQZuzc7bB5eBkq7OKP_zcIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.132.0/23
IPv6:
2a03:3e0::/32
Signature Algorithm: sha256WithRSAEncryption
01:54:97:f3:ef:7a:e4:79:4b:18:ba:6b:2f:7a:38:0b:ea:66:
12:e0:8c:c0:19:2f:12:0f:77:98:47:a7:55:de:22:e7:f3:f8:
cc:84:30:ce:5c:c6:a8:40:0a:4d:44:cb:c5:f8:b9:d2:e0:7f:
dc:88:03:41:39:cc:55:79:5f:b4:81:0f:71:12:c5:9e:b0:64:
c4:35:d8:a7:96:55:b5:b9:a0:f8:56:c0:49:1e:fb:cd:e9:0f:
cb:2f:a2:7f:ec:db:f7:50:07:ea:b6:85:16:8d:18:7c:a3:34:
d5:a8:a4:8c:79:e3:f2:9c:17:c4:29:a1:73:4d:ce:b6:ab:d7:
6d:40:ef:6c:03:22:ef:97:d3:48:dc:23:a0:09:90:c6:50:a1:
54:b5:cc:64:79:6f:bd:1b:9e:1c:18:9b:fa:4c:97:af:3c:0a:
74:19:da:b9:5e:35:ec:d9:e7:31:38:7a:f8:76:a2:6f:10:31:
5a:b6:55:9e:46:0f:6f:56:4e:47:8d:69:f3:d9:f9:59:50:33:
9a:8b:bf:65:1f:2c:c5:de:25:86:1b:68:86:62:84:f6:77:05:
7c:11:f7:70:83:bd:4d:39:4d:a5:30:05:93:8b:66:1b:5d:a4:
50:55:be:68:35:8d:b1:30:2f:1d:b2:9d:07:79:37:d6:52:a4:
4d:36:de:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:41:20 2025 by rpki-client