Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qD_9IQkW-8QAOsl1gZRna_crtLk.roa
File: qD_9IQkW-8QAOsl1gZRna_crtLk.roa (raw, json)
Hash identifier: +Hjzx+uqXIekX5cQmBDWzwdJehPITkXFGBCKJ2ouYEg=
Subject key identifier: A8:3F:FD:21:09:16:FB:C4:00:3A:C9:75:81:94:67:6B:F7:2B:B4:B9
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0194C5299DBDC4CBDA4ADDD312F616D29B1D
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qD_9IQkW-8QAOsl1gZRna_crtLk.roa
Signing time: Sun 02 Feb 2025 05:37:06 +0000
ROA not before: Sun 02 Feb 2025 05:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 62.60.162.0/24 maxlen: 24
62.60.196.0/23 maxlen: 24
62.60.199.0/24 maxlen: 24
62.60.222.0/23 maxlen: 24
213.176.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Mar 2025 01:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:29:9d:bd:c4:cb:da:4a:dd:d3:12:f6:16:d2:9b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 2 05:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a83ffd210916fbc4003ac9758194676bf72bb4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:36:09:60:df:cf:fa:97:32:86:b6:90:4d:
b6:84:ff:85:c2:5e:6a:97:21:c4:cd:6c:79:41:0d:
19:78:c6:e7:9c:7c:d0:b4:ce:55:d1:61:0c:74:89:
2d:7d:83:23:bc:20:6b:4e:55:6a:4d:86:b7:d9:c1:
44:48:01:1e:aa:53:40:60:06:a2:ae:d4:7d:80:d2:
aa:4f:7f:49:09:dc:41:d9:1b:05:87:d1:83:4c:d1:
3e:47:44:7b:cd:eb:31:f3:ba:4e:0d:5e:95:f2:b6:
69:11:14:0d:f5:b3:9f:19:49:43:9e:f9:d2:73:8e:
19:40:b4:e5:21:42:92:f2:f7:37:d9:ef:59:ea:27:
2c:33:cf:ee:78:5b:42:1d:27:37:de:00:f8:9c:11:
96:8d:2d:0a:2f:db:7a:d6:31:ca:5b:26:3e:13:17:
9d:14:1c:dc:8e:41:a3:c2:cc:a5:f1:04:d3:22:00:
e5:0e:e8:17:ad:29:2c:fe:78:eb:13:4a:72:50:8e:
28:df:b1:a3:81:4f:4f:67:64:d7:10:0e:fa:9e:e9:
73:cf:ce:06:ea:8f:89:49:67:49:0a:2c:c2:b6:89:
f4:70:3a:65:bc:18:da:c0:59:58:f6:d7:83:09:48:
85:fa:bf:c0:4b:7e:9f:98:a7:75:9a:6c:b8:49:e2:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3F:FD:21:09:16:FB:C4:00:3A:C9:75:81:94:67:6B:F7:2B:B4:B9
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qD_9IQkW-8QAOsl1gZRna_crtLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.162.0/24
62.60.196.0/23
62.60.199.0/24
62.60.222.0/23
213.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
af:26:6d:0e:fa:f9:f3:db:c3:5f:19:52:3c:c1:88:0a:ad:18:
34:8b:bc:a2:54:52:47:0c:02:ec:3a:47:2c:d2:ff:90:67:ae:
2b:33:fc:dd:8a:31:54:bc:db:09:aa:e1:72:57:cf:5b:72:94:
a6:3b:c3:a4:e3:5f:93:68:18:54:be:c4:5b:2a:06:7f:60:a9:
84:be:7a:07:e0:47:25:75:d7:42:6c:93:01:c1:44:b1:b2:9c:
ee:b9:8a:a8:14:bc:43:3f:1c:fa:1d:e8:cd:3c:1f:cb:4c:64:
5e:57:44:6c:41:ab:b9:26:30:8a:46:de:3e:8d:d5:e8:70:28:
ee:83:52:a8:0d:ee:87:51:28:4b:ed:d0:77:1c:0d:3a:b3:17:
a8:fa:2e:4e:2f:cc:67:75:65:e1:2f:2b:4f:67:ac:e6:4e:46:
4a:f7:eb:34:9c:2f:fb:7f:91:25:17:d5:16:02:74:57:67:8b:
d4:fb:49:be:69:1e:36:59:cf:f1:6a:27:77:0a:29:57:a0:98:
39:fc:e2:5f:88:43:6d:b3:a4:8f:73:75:cc:14:2d:b9:a7:b3:
20:58:4c:33:f2:f0:31:ac:ff:a1:d9:3e:49:04:49:ec:16:cd:
1c:6d:0f:c7:26:59:1c:ac:e6:78:31:c1:fe:de:8e:f1:2a:32:
20:8f:1a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:28 2025 by rpki-client