Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/em4aDOFNzk2YviIIKmk3cpldGdQ.roa
File: em4aDOFNzk2YviIIKmk3cpldGdQ.roa (raw, json)
Hash identifier: 0VFN7OWK4Bodt/zmTtYsyqjsOgmZU4XCebRrcKch6aM=
Subject key identifier: 7A:6E:1A:0C:E1:4D:CE:4D:98:BE:22:08:2A:69:37:72:99:5D:19:D4
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01943B33830B4AABB1EC1A5208F1479D6789
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/em4aDOFNzk2YviIIKmk3cpldGdQ.roa
Signing time: Mon 06 Jan 2025 10:40:19 +0000
ROA not before: Mon 06 Jan 2025 10:40:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 62.60.240.0/22 maxlen: 24
62.60.252.0/22 maxlen: 24
213.176.112.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Jan 2025 06:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3b:33:83:0b:4a:ab:b1:ec:1a:52:08:f1:47:9d:67:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 6 10:40:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a6e1a0ce14dce4d98be22082a693772995d19d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:8f:5c:f4:a4:58:bc:73:57:31:6a:a8:f6:fa:
8e:4a:c6:95:75:c6:75:b3:bb:ef:ce:94:1e:6f:44:
61:36:22:f7:32:b3:b5:f6:c5:ed:dc:53:c4:e6:e8:
e1:f8:70:83:35:bc:59:ef:c6:29:72:95:aa:60:d4:
14:c8:dd:75:2a:27:c4:2b:b6:ae:f2:78:27:16:c6:
20:56:c0:81:a5:01:2b:c7:f8:2b:23:b7:83:5d:6b:
a7:e6:0e:eb:f5:27:8f:29:4c:e5:49:cc:92:ed:f3:
12:c6:3e:ef:e4:1d:73:fe:62:3b:56:55:01:03:59:
a8:c5:dc:15:92:e1:01:6b:38:8e:a0:dd:d9:53:c8:
a2:3b:d9:a8:ad:ae:9a:5e:5e:14:fe:ce:32:03:13:
27:21:5e:62:68:7d:d9:5d:7b:6f:96:f8:34:1b:de:
da:27:8a:b2:09:6c:ff:fd:f5:22:d1:01:d5:33:c3:
49:ac:fa:ac:e8:f4:23:bb:4c:92:08:67:bd:f6:b6:
9e:54:f1:de:18:05:aa:27:ee:86:1d:ed:e0:d8:1d:
4e:db:05:41:ec:98:73:7b:f1:1e:d8:f5:42:32:f3:
2c:e7:a9:fb:b2:26:3e:fc:90:f8:6c:fd:f7:95:1e:
e9:df:04:38:2a:70:22:da:6f:16:69:55:3f:5d:b8:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6E:1A:0C:E1:4D:CE:4D:98:BE:22:08:2A:69:37:72:99:5D:19:D4
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/em4aDOFNzk2YviIIKmk3cpldGdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.240.0/22
62.60.252.0/22
213.176.112.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:42:db:0d:e8:33:32:ca:d3:7e:51:4a:c2:ac:27:83:3f:d2:
70:1b:97:11:cb:91:e4:32:7f:83:57:55:40:5a:f8:b3:5b:e7:
26:78:cc:f6:d2:bf:23:37:f5:04:7e:66:1e:7a:41:ef:2c:d6:
32:95:69:53:6f:82:6e:ec:80:c1:96:38:f0:46:7e:24:0e:93:
7d:a6:91:e4:08:c3:10:1d:66:04:24:3a:29:4f:ef:20:f4:8b:
eb:fb:6d:d4:53:3f:e2:c1:8b:88:07:d8:f7:ce:fb:b1:69:6e:
c7:8e:f2:01:0c:6c:5c:d3:d2:ff:cf:4d:05:2a:34:e5:e5:91:
0f:58:05:3b:5f:46:6e:8a:ea:34:3e:97:c1:f4:87:6f:18:f4:
db:da:e4:f4:31:a9:b7:43:1a:ef:c3:91:4b:b4:6f:a0:ca:45:
bc:b7:82:a8:57:0c:4b:eb:62:76:d0:e8:fb:8b:df:9d:f7:f6:
c6:36:36:ea:a9:20:92:38:2e:58:94:ca:a4:f4:82:ce:bd:f2:
30:d4:2b:9c:43:35:73:98:c0:f3:13:56:b0:5a:e4:3d:90:9e:
8e:ef:be:7d:af:95:20:6a:b7:4a:4a:d6:09:c0:70:dd:0c:34:
74:3f:ec:cf:9d:da:18:4e:d0:41:18:35:4b:a5:b7:be:03:c3:
ca:42:7e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:24:32 2025 by rpki-client