Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/osi3tVHq46p8ish11yEqw_TpW3M.roa
File: osi3tVHq46p8ish11yEqw_TpW3M.roa (raw, json)
Hash identifier: /X7Pnm0nvttVQ9w841Ix54pg4/uJTfrbQLaVr+cIcOw=
Subject key identifier: A2:C8:B7:B5:51:EA:E3:AA:7C:8A:C8:75:D7:21:2A:C3:F4:E9:5B:73
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019420D615D5067A05871B96F414043FED50
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/osi3tVHq46p8ish11yEqw_TpW3M.roa
Signing time: Wed 01 Jan 2025 07:48:08 +0000
ROA not before: Wed 01 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 62.68.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 08:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:15:d5:06:7a:05:87:1b:96:f4:14:04:3f:ed:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2c8b7b551eae3aa7c8ac875d7212ac3f4e95b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:e8:e3:9b:98:ed:46:95:f7:ec:50:cf:60:
43:42:41:67:ff:ac:d6:3a:86:51:4c:52:ad:98:6c:
93:a7:83:c3:12:99:ef:a0:fd:a1:1b:3a:74:79:45:
c2:79:1e:d1:7a:11:b3:71:86:22:37:47:39:a1:cb:
d5:6f:c6:31:d6:ea:c8:c8:d5:5f:7f:70:17:13:c6:
37:cb:d8:7f:44:02:28:24:56:16:09:3d:37:ca:37:
fd:83:44:7b:36:4a:e4:3a:11:33:4b:c0:32:4f:20:
89:f5:cd:22:f6:4c:20:c0:3a:c9:9a:ce:ba:38:e4:
db:29:1e:a0:52:01:1a:7d:5a:39:0a:c5:9a:c1:94:
e5:e9:a6:11:fc:94:7e:fe:e6:12:58:2d:00:f8:65:
c8:d6:19:7b:f3:4a:3e:5c:ee:23:e0:38:03:72:9f:
04:f6:05:a6:68:9e:9c:96:78:5c:5f:9c:d4:cb:f4:
f4:37:11:14:b5:8f:84:54:ff:57:8c:4a:55:21:27:
02:31:9b:ff:c3:14:18:61:e4:aa:33:c6:03:ef:dd:
fa:bd:6d:5c:65:31:9d:af:6c:8d:9a:c7:87:0a:17:
10:d5:f5:10:c2:e6:a2:e8:44:4c:30:71:5d:0b:48:
14:24:4a:f6:a6:1c:8e:12:5c:00:e6:0e:a0:65:bc:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C8:B7:B5:51:EA:E3:AA:7C:8A:C8:75:D7:21:2A:C3:F4:E9:5B:73
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/osi3tVHq46p8ish11yEqw_TpW3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.73.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:89:f1:38:8f:01:85:1c:c1:e5:8a:57:23:60:ce:65:5e:ae:
d5:a9:2d:f4:74:41:1f:f6:c9:13:fa:c5:16:8a:6f:ac:96:72:
09:7a:8d:e1:ec:0e:40:80:80:96:1a:da:68:52:fd:06:92:14:
e4:65:25:35:70:15:c7:9f:87:1b:a2:f2:09:7c:88:9f:56:fb:
36:4d:cd:f4:c4:1a:00:ad:52:b6:ff:5a:1a:19:bd:e7:62:7c:
84:20:c6:64:f2:e0:25:ef:4b:9d:bc:a8:6f:3b:e3:45:e8:93:
6a:2c:58:34:87:ad:3e:ec:76:03:2d:c8:f2:3f:c6:29:b6:49:
dd:e8:18:df:a0:bd:13:57:3a:22:7e:b1:ec:e7:19:44:d1:eb:
90:3b:8e:e9:c1:e0:9c:f3:14:1b:dc:76:8d:23:95:32:6f:d9:
6f:54:35:d2:95:de:ec:5c:c0:fb:86:12:92:9b:1d:70:d8:99:
65:07:7c:a3:47:3e:27:46:c5:88:e8:0f:46:49:31:9a:58:b2:
35:cb:6c:ba:5f:fa:ee:43:df:38:cd:ca:d4:3f:88:fe:00:29:
b2:2e:55:30:fd:b8:6f:24:6b:7f:df:9b:bf:38:50:81:7e:3c:
2e:96:d8:78:21:51:8b:31:6e:08:b6:66:fe:1c:a4:0e:d7:40:
f5:b0:de:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:49 2025 by rpki-client