Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/62LqqE5a_yjZf_6mz7dfZEH-5ac.roa
File: 62LqqE5a_yjZf_6mz7dfZEH-5ac.roa (raw, json)
Hash identifier: NMtnRf0VbNenHglzs5CjahZ2svNEXyKFz4vdz6iwWKc=
Subject key identifier: EB:62:EA:A8:4E:5A:FF:28:D9:7F:FE:A6:CF:B7:5F:64:41:FE:E5:A7
Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial: 0194D5E2A126621CEAD93AFBBFF6C6A70C47
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/62LqqE5a_yjZf_6mz7dfZEH-5ac.roa
Signing time: Wed 05 Feb 2025 11:33:06 +0000
ROA not before: Wed 05 Feb 2025 11:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213291
IP address blocks: 195.242.0.0/23 maxlen: 24
195.242.7.0/24 maxlen: 24
195.242.8.0/21 maxlen: 24
195.242.16.0/20 maxlen: 24
2a13:5940::/32 maxlen: 32
2a13:5947::/40 maxlen: 48
2a13:5947:130::/48 maxlen: 48
2a13:5947:150::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 18 Feb 2025 11:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:e2:a1:26:62:1c:ea:d9:3a:fb:bf:f6:c6:a7:0c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Validity
Not Before: Feb 5 11:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb62eaa84e5aff28d97ffea6cfb75f6441fee5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:d4:77:87:2e:6e:86:85:18:b4:e0:ec:7d:
d4:1b:71:15:19:ee:b9:a9:2b:40:5f:e8:02:f5:d4:
b8:f3:9c:4b:4b:0d:5b:39:64:0d:ac:ee:e8:db:56:
5e:c9:1e:4a:86:03:3f:1b:71:e6:d7:53:42:04:a3:
c0:08:03:79:b5:18:f9:bf:cc:7c:59:e5:59:b3:9d:
5a:ed:d1:f3:12:72:20:32:6e:bb:85:85:57:a3:87:
4d:b9:9d:4e:3d:00:19:1b:08:75:92:37:7d:c8:b5:
b7:c9:59:1e:58:5e:c0:da:4e:a5:9e:bd:e7:0b:dd:
e7:2f:ad:59:82:32:70:d0:84:8f:eb:74:fb:4f:d6:
22:26:eb:8e:cd:39:43:b7:c5:6d:d2:d3:14:54:9e:
53:10:b0:2e:f5:44:62:6b:b6:5f:8a:8f:bd:a0:7c:
8a:c6:8a:0e:af:77:18:1d:1c:a4:8d:63:17:97:22:
cc:d6:5a:ce:ec:5b:51:a8:f6:e7:ea:15:35:e9:f0:
a0:81:7a:87:8b:d8:4f:cf:67:5a:51:85:06:52:a9:
ad:f9:06:46:94:b9:81:a5:2b:c6:66:6e:94:ff:57:
39:c6:02:71:97:24:7c:e7:14:d0:d9:57:88:b3:6a:
e0:8c:d4:45:10:7e:72:41:eb:1c:b8:39:13:18:72:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:62:EA:A8:4E:5A:FF:28:D9:7F:FE:A6:CF:B7:5F:64:41:FE:E5:A7
X509v3 Authority Key Identifier:
keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/62LqqE5a_yjZf_6mz7dfZEH-5ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.0.0/23
195.242.7.0-195.242.31.255
IPv6:
2a13:5940::/32
2a13:5947::/40
2a13:5947:130::/48
2a13:5947:150::/48
Signature Algorithm: sha256WithRSAEncryption
23:ef:0c:e7:74:e0:32:a8:5f:26:e5:b6:b2:27:97:1d:ca:28:
c8:c5:c3:67:c0:27:1e:db:98:e5:ab:a9:18:0c:60:c0:f3:54:
0b:44:e0:85:a4:6d:2f:0a:e3:e1:aa:8e:e3:61:47:3f:14:bd:
b5:22:39:af:81:e7:d4:cf:fb:4c:4d:47:9f:c6:3f:12:d3:f5:
74:2d:16:75:12:14:f1:e6:d3:ac:10:15:72:43:c7:7f:1a:25:
2d:cb:aa:3a:45:a1:3d:71:a4:18:77:b1:2d:fd:ac:98:d5:7b:
43:a3:e4:d9:c9:53:da:df:b0:6f:09:57:b1:a8:bb:a8:57:7b:
b8:68:62:c0:0c:7c:ab:36:7c:d2:dc:fb:c4:93:12:c2:8a:77:
a6:1c:57:59:84:4c:66:85:c8:1d:11:56:57:ed:f2:af:0a:2a:
a0:c7:5d:ec:7b:11:a4:23:3a:29:60:70:18:4d:41:09:71:a7:
cd:50:3f:b4:e1:2e:fa:9b:7a:e7:5d:f6:70:b4:3f:70:5b:cf:
38:d1:52:77:f1:c5:f5:83:88:bf:35:63:bf:95:c7:28:ca:b0:
dc:22:7f:59:1a:10:a8:85:da:d5:5d:e2:39:64:59:a1:4e:63:
2b:fe:1c:fc:a6:2b:44:59:c9:d3:39:e9:e6:d6:eb:52:a8:6e:
9a:86:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:46:18 2025 by rpki-client