Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/_VkO3QoC-jfn5fL9AOOLjyaaWl4.roa
File: _VkO3QoC-jfn5fL9AOOLjyaaWl4.roa (raw, json)
Hash identifier: U72A0BPnaj19wmRNpBc2FJVfvz3Ayqxz6QpwveFrl80=
Subject key identifier: FD:59:0E:DD:0A:02:FA:37:E7:E5:F2:FD:00:E3:8B:8F:26:9A:5A:5E
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019420D6153F6E4CEC818BB151891B0BF81E
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/_VkO3QoC-jfn5fL9AOOLjyaaWl4.roa
Signing time: Wed 01 Jan 2025 07:48:08 +0000
ROA not before: Wed 01 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 62.68.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 08:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:15:3f:6e:4c:ec:81:8b:b1:51:89:1b:0b:f8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd590edd0a02fa37e7e5f2fd00e38b8f269a5a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:51:22:a9:4d:12:dc:a5:29:8a:1c:1f:5c:
db:c6:8a:8a:a7:e7:89:ca:56:e8:90:3b:bd:d1:b2:
26:e2:0c:24:97:c6:67:3c:3c:66:cc:ce:3e:89:31:
76:2d:02:36:28:30:3f:17:26:0d:4c:8d:7e:64:63:
b2:19:c6:dc:43:9d:45:0a:7a:c2:ec:75:3d:af:e3:
9e:78:ae:3a:c9:96:6f:d4:47:de:5c:9e:33:49:99:
48:1d:7d:de:78:3a:fd:4c:2e:21:d7:28:6f:b2:cb:
2e:0e:17:b9:8d:d2:da:24:f6:2c:e0:9c:a1:06:ef:
00:05:d0:56:d6:fd:9a:83:ce:7c:d2:4a:c1:50:7b:
d7:8a:fa:d1:cc:e4:60:e2:f9:7a:a6:5a:7a:2f:d3:
2d:46:8a:ad:5f:03:b6:ee:17:77:ec:7d:10:45:50:
53:64:2b:43:ad:53:a7:97:a3:e7:95:11:da:28:8c:
92:a8:27:f8:45:10:fb:8a:cf:5f:3b:41:77:7a:d9:
a2:fe:29:cf:0d:cd:53:7a:1b:bb:84:e9:fb:52:eb:
a0:cc:68:15:5f:b6:9a:ef:4a:23:4a:19:fe:97:d8:
92:4b:2d:51:38:81:4e:33:15:1b:a3:55:8d:4c:61:
c0:e2:e4:b6:d4:8b:83:ec:3a:75:a2:79:ea:33:4b:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:59:0E:DD:0A:02:FA:37:E7:E5:F2:FD:00:E3:8B:8F:26:9A:5A:5E
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/_VkO3QoC-jfn5fL9AOOLjyaaWl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.73.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:02:b7:c2:b1:b7:b5:fd:85:86:f9:09:ba:a3:b4:e1:c1:7f:
75:38:eb:28:f5:cd:48:0e:1a:93:79:12:af:10:10:6e:9a:01:
5a:6d:01:60:c7:a2:b6:21:0b:64:03:b4:ec:55:78:d7:6a:2d:
e8:10:97:79:3c:8f:bc:d9:d9:64:94:a0:22:13:0c:fd:c3:7e:
b0:10:bb:fe:48:dd:0c:22:ab:11:86:d5:c2:78:bc:ea:02:cf:
fe:f5:c0:78:25:9a:a7:b0:03:65:16:58:2e:92:22:61:af:d8:
54:99:99:29:fb:68:56:09:46:cd:25:a4:bf:14:84:5d:24:8d:
0e:71:cf:aa:09:61:f4:ac:88:8d:6e:04:a6:d7:0b:70:23:cf:
c1:02:28:0c:22:a6:1f:e7:cb:9c:7e:f4:3e:13:2e:08:13:43:
3c:91:bc:6b:0e:ab:00:83:69:23:4c:49:53:52:7c:cc:f0:34:
19:58:70:11:c7:64:92:23:96:c0:1f:0f:e1:fc:e8:0e:a1:4e:
f4:12:a3:da:6d:83:3f:72:8e:50:89:a6:dd:fb:fe:52:5c:a6:
31:8f:22:c6:67:8d:44:09:0e:81:27:e7:1e:5a:d9:75:4f:9c:
07:44:1b:35:b2:05:a2:29:f6:fa:6b:41:22:ff:eb:55:da:1a:
25:9e:99:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:04:07 2025 by rpki-client