Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wUJ6f88ovHHX1O0sX_R8-t4jsFc.roa
File: wUJ6f88ovHHX1O0sX_R8-t4jsFc.roa (raw, json)
Hash identifier: 7YJZcHKPsrD5bgzdYsAsY79U4l912dPwiOO6bDtMSJA=
Subject key identifier: C1:42:7A:7F:CF:28:BC:71:D7:D4:ED:2C:5F:F4:7C:FA:DE:23:B0:57
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019619ED1E69EBC38D5CA774E871596A4E4C
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wUJ6f88ovHHX1O0sX_R8-t4jsFc.roa
Signing time: Wed 09 Apr 2025 09:41:32 +0000
ROA not before: Wed 09 Apr 2025 09:41:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215930
IP address blocks: 62.60.188.0/22 maxlen: 24
62.60.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 10:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:ed:1e:69:eb:c3:8d:5c:a7:74:e8:71:59:6a:4e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Apr 9 09:41:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1427a7fcf28bc71d7d4ed2c5ff47cfade23b057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:d6:72:fb:16:36:8b:72:94:2c:d9:29:f5:
5d:32:67:f0:f8:53:8f:c4:06:a1:56:95:2d:a8:a8:
bd:7c:4f:ae:78:fe:c3:0c:aa:e4:84:25:fb:3f:1a:
71:6a:3b:44:f5:47:74:88:52:ea:d1:1b:ea:85:13:
3c:72:6e:ca:be:cf:04:fe:ce:e0:30:ac:77:8a:31:
97:07:f8:6d:16:ba:7d:db:89:8a:9d:00:40:30:d8:
e2:ba:54:d7:2a:2b:f0:a6:05:47:c0:e7:33:36:e9:
54:3e:be:c7:a7:22:73:14:99:56:03:e6:d9:f2:97:
ff:0b:68:ec:38:21:7a:ba:d1:10:16:ce:98:9f:f6:
6b:9d:6b:eb:6a:e1:36:3e:ba:4e:b4:7a:9b:f9:de:
70:95:e5:90:39:3e:68:df:9a:44:53:96:a1:c4:ec:
de:0b:a1:80:08:82:ec:45:9d:25:8a:4a:45:09:3d:
ba:e2:0f:28:4c:e0:16:6b:47:1f:9e:ff:f3:42:91:
1b:38:dc:51:58:d3:39:b4:92:0c:b4:c2:f0:83:33:
9e:1f:7e:f9:76:36:cc:fa:d6:72:20:d2:33:61:2b:
2e:da:33:7d:75:99:90:21:9c:b4:be:f2:95:1f:7a:
28:c4:5a:3e:fe:9b:88:a2:f5:bd:ae:9e:ea:a8:bf:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:42:7A:7F:CF:28:BC:71:D7:D4:ED:2C:5F:F4:7C:FA:DE:23:B0:57
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wUJ6f88ovHHX1O0sX_R8-t4jsFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.188.0/22
62.60.208.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:aa:d1:b8:2e:32:a4:7a:ac:5e:db:2e:4f:90:42:5e:3b:19:
f8:38:91:23:4c:f0:6a:e5:42:3c:dd:d9:7d:e8:dc:6f:ef:8e:
14:03:69:74:ff:fd:1d:87:7e:39:fd:ac:3f:84:e6:95:d5:72:
14:7f:15:f0:97:53:29:79:7d:0e:2f:6f:e9:5a:86:9e:68:d0:
3c:2d:38:98:70:b3:20:d0:77:b9:a3:18:cc:5d:d9:c9:e1:9a:
8b:68:cc:77:26:8f:a7:16:65:b9:10:6a:61:7c:25:12:10:f4:
6e:6b:aa:b4:05:8e:d9:f7:38:ea:44:19:50:87:77:5e:1a:16:
14:6c:b7:52:fc:1b:c4:c4:0b:45:70:94:01:47:02:af:c4:bc:
0d:fe:d9:17:a6:63:70:fd:90:02:9d:ee:2e:50:81:8f:8a:8a:
75:9e:30:12:4c:05:1a:77:f4:63:b9:84:df:88:82:d2:30:a3:
54:8e:93:0e:07:2a:a4:d9:d6:af:4e:0f:f4:e1:4c:11:18:37:
28:ff:18:3a:d9:09:86:32:df:f9:6b:22:dd:7c:88:1d:b7:a8:
56:e0:cb:9a:07:c8:40:ae:28:5b:f6:50:77:16:66:7c:8e:7d:
d4:25:bd:31:bc:b4:8c:d8:15:c3:51:7a:35:00:e6:a9:5b:a0:
eb:d7:3c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:38:42 2025 by rpki-client