Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/EUebC7fmZfYzCx8iOrx0eI3sYmA.roa
File: EUebC7fmZfYzCx8iOrx0eI3sYmA.roa (raw, json)
Hash identifier: 2WcXw9R/Iza7G1kbjJAqpAOXSzoD2ef1A+fZx8E6EKQ=
Subject key identifier: 11:47:9B:0B:B7:E6:65:F6:33:0B:1F:22:3A:BC:74:78:8D:EC:62:60
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019420D6162C76F5ED71684180E8EDCE4B2E
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/EUebC7fmZfYzCx8iOrx0eI3sYmA.roa
Signing time: Wed 01 Jan 2025 07:48:08 +0000
ROA not before: Wed 01 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211936
IP address blocks: 62.68.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 08:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:16:2c:76:f5:ed:71:68:41:80:e8:ed:ce:4b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11479b0bb7e665f6330b1f223abc74788dec6260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:07:35:7f:9d:4a:d3:c6:f3:24:4e:97:68:
18:00:cc:7b:a9:40:cd:26:2f:4d:1c:bd:91:5f:85:
0f:16:00:52:35:b1:96:52:9b:89:63:db:63:ce:7e:
c6:d5:cc:03:53:ac:7b:54:82:02:56:2d:d4:95:9a:
e6:8f:52:fe:fc:04:d6:df:1e:cb:a9:83:87:4f:d1:
c3:3e:a1:4f:60:49:41:9a:1a:99:5d:58:17:e3:1f:
3a:60:47:ca:ba:a9:17:9e:8a:97:2b:f8:af:5b:b4:
dd:0b:22:74:c5:9e:bc:38:53:1a:71:4b:9a:20:46:
3a:1d:24:b8:5b:a0:c8:ad:29:a8:85:09:80:3e:18:
c6:27:21:08:7c:88:42:73:5b:40:c2:c0:db:4a:8a:
d9:b4:67:e4:b6:4f:76:e9:45:8c:a8:eb:15:e6:fd:
13:ae:e8:e9:7b:07:17:ee:66:d3:4e:b6:03:75:ff:
b4:2c:ef:0e:3b:17:54:dd:a1:63:09:54:d6:76:0d:
d5:37:5d:f9:52:89:36:d1:d4:e1:25:3a:b6:d4:1b:
b7:92:d7:3e:84:19:cf:fc:e9:4e:c7:2a:18:63:be:
25:c3:3f:32:08:08:95:4c:87:09:c8:50:01:87:07:
7d:62:73:e2:56:8b:5f:01:80:ea:ea:49:45:bf:c9:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:47:9B:0B:B7:E6:65:F6:33:0B:1F:22:3A:BC:74:78:8D:EC:62:60
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/EUebC7fmZfYzCx8iOrx0eI3sYmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.73.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2e:93:db:4e:29:09:56:87:75:de:3e:2e:54:0b:d3:4d:89:
50:e1:d0:fb:79:39:7e:35:82:cc:7a:c1:3f:9c:e3:20:d9:d7:
4b:ab:01:bc:8c:95:66:75:82:7b:3f:90:ad:45:a2:ff:b0:d8:
e6:0d:34:57:b5:44:0e:2b:e2:eb:a5:9f:0c:89:7c:cb:f8:0b:
32:6f:04:6b:e4:b0:6b:92:5a:08:e7:3e:0e:b0:9e:5a:92:2c:
e4:a1:d6:3e:f0:0d:66:ee:9a:20:50:08:2e:25:13:28:6b:03:
99:2e:2e:a0:c7:60:f3:14:cb:fe:34:26:e0:8c:78:62:5b:30:
2a:3e:57:d4:cf:85:85:68:27:69:3c:2d:81:b7:7d:fb:67:e6:
8b:aa:18:7e:fd:c1:19:fc:92:1d:6d:58:2a:c0:6f:64:0b:56:
47:c9:cc:d5:a9:4e:32:2d:23:9d:1a:43:45:05:0a:5b:ae:14:
9c:ce:88:06:57:d7:a6:ef:50:f3:fa:95:6b:59:3f:c3:37:ec:
5d:8b:4f:ba:c4:03:92:a9:cb:6e:00:eb:77:5b:b9:b2:aa:61:
20:ff:4d:d5:fb:ef:89:9e:e2:55:0d:aa:80:47:24:d8:86:78:
19:be:ac:19:cd:f3:b7:9d:dc:c6:98:05:33:44:a5:b6:02:76:
78:d3:2f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:47:05 2025 by rpki-client