Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/oE59or5LjZXam8R59JCmbyYAY4M.roa
File: oE59or5LjZXam8R59JCmbyYAY4M.roa (raw, json)
Hash identifier: Odk6iQcHpzLNBhtamxzd6i7YU4DEmOVJ2rp+NLDDr4A=
Subject key identifier: A0:4E:7D:A2:BE:4B:8D:95:DA:9B:C4:79:F4:90:A6:6F:26:00:63:83
Certificate issuer: /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial: 018CC6499E553594BBB4B9E8B29B4F1A3EE5
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/oE59or5LjZXam8R59JCmbyYAY4M.roa
Signing time: Mon 01 Jan 2024 18:29:22 +0000
ROA not before: Mon 01 Jan 2024 18:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210520
IP address blocks: 62.3.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:9e:55:35:94:bb:b4:b9:e8:b2:9b:4f:1a:3e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Validity
Not Before: Jan 1 18:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a04e7da2be4b8d95da9bc479f490a66f26006383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:29:0c:1c:45:56:d7:ae:59:a3:f5:d7:51:
c7:35:84:fa:05:24:8e:7a:63:a0:f3:4c:4f:b0:43:
64:fa:bc:8e:65:dc:04:38:cf:91:78:10:46:d2:f7:
62:0d:47:4c:ba:27:5b:94:c9:01:f8:e9:3f:ad:e3:
1d:65:6c:8f:a9:72:2b:7f:9a:0a:73:f5:40:dd:e7:
34:dc:4a:9d:43:b0:99:aa:8e:99:bb:57:1d:2f:0b:
5f:79:bb:9c:b0:e9:ba:17:5e:b2:1a:40:25:dd:3d:
e8:34:0c:19:56:40:99:48:be:84:7c:00:4c:23:c6:
0e:bf:a5:24:97:0e:d2:26:b9:7a:6b:73:d5:e3:04:
9b:9b:ba:32:fb:9a:46:15:fb:3b:55:66:cd:9f:c2:
9a:9b:7c:32:c0:e9:fe:92:fe:c7:60:33:91:3f:d5:
06:11:85:06:2e:2a:2c:37:d2:a7:0d:1b:2a:99:0d:
86:d2:ae:98:47:3d:af:52:f2:58:f6:44:c1:df:77:
0a:94:a6:b6:68:1a:71:af:c5:c4:0d:6c:4c:78:9e:
4b:58:88:7c:bf:bf:39:a5:ec:5d:99:ff:98:27:1d:
05:f3:a8:fa:de:91:34:1d:cf:2d:58:c8:bc:01:bc:
84:7f:d5:df:72:a8:0f:7b:19:5a:51:f4:33:18:cb:
8f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4E:7D:A2:BE:4B:8D:95:DA:9B:C4:79:F4:90:A6:6F:26:00:63:83
X509v3 Authority Key Identifier:
keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/oE59or5LjZXam8R59JCmbyYAY4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.16.0/24
Signature Algorithm: sha256WithRSAEncryption
29:41:3b:db:7d:a6:68:14:7a:a7:7c:66:55:1a:d3:b8:f6:5b:
9b:5d:35:dc:99:da:91:36:e5:52:34:84:14:16:eb:23:19:d3:
ef:d6:9b:f0:c1:c4:40:36:24:47:89:14:cd:36:74:3a:1a:e1:
6f:b8:0b:68:6f:de:3d:60:3d:29:e1:33:37:63:23:e1:c8:aa:
96:ad:b6:ee:0d:4a:0e:8b:2c:91:57:36:f2:53:16:5d:11:7c:
b7:0f:68:20:c3:60:79:b1:35:d1:f7:b2:14:6a:e4:60:22:33:
00:72:53:2a:6d:5c:dc:5e:36:66:63:98:9e:51:35:9e:6f:2f:
74:a0:7f:ee:28:99:e2:c6:1f:39:a7:ae:fd:b4:94:5b:c2:9a:
04:d6:fd:71:da:e8:5c:cd:86:1c:b4:92:4e:50:36:22:b2:6f:
bf:2b:3f:a1:b5:c7:b7:96:b8:34:32:0e:0a:e9:91:56:3f:cc:
07:09:f4:62:30:18:88:86:cb:3e:c3:fe:61:52:48:4a:4a:f2:
44:e6:53:41:bf:97:d9:2c:d7:a3:d9:1c:30:88:d4:46:48:b2:
ad:15:0c:be:62:64:f3:37:cc:55:c8:fd:8f:4a:2e:7b:bd:82:
bf:2f:a3:6b:5c:10:bc:7a:88:bd:56:5c:75:4f:75:4f:ee:17:
d5:88:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:20 2025 by rpki-client