Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9Oxg9zg3rCR-0Y4nnZvnp-eaeKk.roa
File: 9Oxg9zg3rCR-0Y4nnZvnp-eaeKk.roa (raw, json)
Hash identifier: u1exbK5HOrCTiDjdfAfSVuG65jmx5Oan7/S3br9UiG0=
Subject key identifier: F4:EC:60:F7:38:37:AC:24:7E:D1:8E:27:9D:9B:E7:A7:E7:9A:78:A9
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019619E8C6C537ACA648CC95E131CF222D08
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9Oxg9zg3rCR-0Y4nnZvnp-eaeKk.roa
Signing time: Wed 09 Apr 2025 09:36:47 +0000
ROA not before: Wed 09 Apr 2025 09:36:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 62.60.162.0/24 maxlen: 24
62.60.196.0/23 maxlen: 24
62.60.199.0/24 maxlen: 24
62.60.222.0/23 maxlen: 24
213.176.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 12:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:e8:c6:c5:37:ac:a6:48:cc:95:e1:31:cf:22:2d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Apr 9 09:36:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4ec60f73837ac247ed18e279d9be7a7e79a78a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:5f:19:8d:68:6b:a8:9e:ac:2c:79:d7:45:
5f:4e:14:f8:36:d8:e0:63:0c:26:8f:0f:f3:eb:d6:
bb:c2:bf:90:32:a2:8d:fd:af:85:95:10:b6:8e:59:
30:bb:dd:d9:24:47:3c:5d:f1:61:95:44:29:eb:7b:
a1:5a:54:32:fd:5b:5a:b7:cd:07:62:87:0f:42:d6:
c0:c6:9c:a9:2c:e9:70:32:28:c7:d4:dc:93:84:03:
c8:04:1f:26:36:3a:d1:35:77:bc:b2:f2:0f:f1:25:
8a:31:88:e1:e4:aa:05:dd:60:d8:32:ce:d7:96:e7:
8d:ab:74:c9:fb:10:ab:68:2a:0a:86:88:64:08:ed:
18:24:2b:c4:4d:3e:7e:95:61:28:86:c5:c0:cd:e9:
8b:12:5c:fb:40:be:3b:bb:79:63:2a:d6:a8:b4:e0:
30:4c:ae:07:eb:6c:99:0b:bb:23:0e:af:b5:cd:af:
09:35:7f:ed:b7:31:1c:15:ac:f8:a9:6a:6d:50:6b:
8f:90:91:c7:22:a0:35:82:d6:12:4a:e6:bf:f1:3e:
c6:af:64:35:22:48:fd:bc:94:37:dd:2d:58:b0:bc:
f4:d6:5d:5b:c2:9f:53:0d:87:70:4f:14:57:fe:76:
68:dc:c4:0c:61:34:79:3d:26:23:ea:d1:c3:1b:29:
c2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EC:60:F7:38:37:AC:24:7E:D1:8E:27:9D:9B:E7:A7:E7:9A:78:A9
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/9Oxg9zg3rCR-0Y4nnZvnp-eaeKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.162.0/24
62.60.196.0/23
62.60.199.0/24
62.60.222.0/23
213.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
97:45:5c:e0:d3:a0:72:e2:13:97:91:99:b4:7d:1a:6d:ad:6a:
67:63:1f:92:a0:06:54:79:8c:29:1a:4e:24:a3:c3:24:75:ed:
a7:dc:d0:61:bc:5f:c8:0d:15:11:75:67:5b:b9:9f:d7:26:42:
01:fe:ff:36:ae:36:86:d5:6f:62:c2:4c:bf:44:79:c5:d7:ee:
67:9a:d7:de:2d:0f:d9:b4:ae:dc:9c:92:c2:ea:99:b9:55:c7:
36:cd:ca:3f:b1:46:23:7f:9b:c2:fb:53:68:0b:76:90:53:18:
6d:6a:d7:cf:3d:af:9c:17:82:87:c5:37:71:80:ca:3f:da:31:
e8:a4:9c:ab:a1:1b:a5:0a:48:97:55:33:4d:95:b0:52:b3:bd:
22:26:aa:49:f8:5f:45:72:41:5d:5e:cd:04:82:fd:1b:df:c2:
fd:4c:e7:2e:72:22:4e:75:97:db:3b:0e:58:ed:b5:f2:bf:54:
ef:7a:27:f1:42:dd:e4:b6:e7:13:54:81:15:2e:02:39:5c:58:
c1:7f:46:a0:84:f9:f3:c8:96:9e:4f:3f:07:a3:7e:75:ba:bc:
26:04:ba:9f:60:99:8c:75:ae:a1:15:c7:a3:39:d4:0b:ef:5e:
71:d5:2e:1b:0d:fc:44:40:be:d5:c5:10:d1:9e:b0:bf:95:ed:
54:16:71:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:37:11 2025 by rpki-client