Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/qM6uCNsucSCB33ZQSQpT8OHxAiA.roa
File: qM6uCNsucSCB33ZQSQpT8OHxAiA.roa (raw, json)
Hash identifier: ssEoevGHPFk0B4ZbrriUDtDkaes7h6sl6p+lRYT6SGU=
Subject key identifier: A8:CE:AE:08:DB:2E:71:20:81:DF:76:50:49:0A:53:F0:E1:F1:02:20
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018E38783279F6EF720637EDA16FC1E0F354
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/qM6uCNsucSCB33ZQSQpT8OHxAiA.roa
Signing time: Wed 13 Mar 2024 15:39:45 +0000
ROA not before: Wed 13 Mar 2024 15:39:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 62.138.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:78:32:79:f6:ef:72:06:37:ed:a1:6f:c1:e0:f3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Mar 13 15:39:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8ceae08db2e712081df7650490a53f0e1f10220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4f:58:a9:d0:1d:05:a2:68:60:44:ec:b3:4d:
b5:01:40:17:f6:83:fd:f8:bc:3f:ab:a5:83:1c:fb:
8f:3d:e4:18:39:2b:02:41:75:8d:f2:aa:b1:c3:d9:
5a:07:6a:3d:65:df:9c:e2:fe:92:d7:be:8c:22:27:
62:64:16:f2:ce:16:df:bd:c1:99:81:9f:ef:45:da:
b0:0a:63:98:fb:ba:a8:4e:3c:27:2b:7a:ce:0c:d4:
da:ca:85:4d:d1:9b:13:41:5b:1b:27:2a:78:02:bd:
07:60:7a:43:9c:65:ed:0c:6c:2c:16:67:ef:9b:da:
9f:5e:60:af:67:2d:a9:59:82:b3:a9:f1:ab:b0:d8:
78:1e:8d:58:f0:16:c0:b8:e2:b1:46:15:9b:8b:81:
c4:d9:0a:73:8c:71:42:df:63:7a:4c:d7:ff:d1:44:
a8:ed:bc:a0:9a:51:85:f6:cb:f8:87:0b:a0:d9:ae:
f6:9d:90:98:8e:a6:bc:26:ba:2e:f8:90:0a:84:8d:
9e:d8:5c:54:cd:a4:fd:11:0b:7c:8d:c1:59:0b:a6:
9b:ff:55:90:a2:5a:14:29:34:c8:f6:ff:eb:df:5d:
7e:ad:be:27:56:ba:93:8b:1e:68:5f:84:a6:95:84:
41:43:2e:76:7f:e9:2d:57:20:67:68:15:35:3c:78:
f0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CE:AE:08:DB:2E:71:20:81:DF:76:50:49:0A:53:F0:E1:F1:02:20
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/qM6uCNsucSCB33ZQSQpT8OHxAiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.138.64.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:4f:3e:55:4e:81:72:60:17:ff:f8:c7:7a:23:1d:8a:71:0f:
cc:7f:83:93:58:85:eb:6f:12:05:a3:20:6f:9d:61:ee:6e:86:
77:2a:ba:0a:75:6b:e3:8a:6e:18:e8:4f:f2:f4:9e:1d:46:9f:
d3:dd:dd:5b:12:51:01:50:18:54:19:a2:6d:ca:48:c7:15:bc:
61:fc:c7:8e:f0:92:ad:99:75:ae:fb:8e:e6:1f:0b:84:03:eb:
a3:c0:df:b3:0b:09:e4:99:28:cd:8d:05:82:07:4d:5a:55:40:
64:1c:e0:dd:d3:ba:a6:6e:56:5e:58:7c:4c:58:48:a6:c2:af:
90:37:5d:78:8a:4f:7b:ee:f8:4f:9e:86:2f:ea:70:b5:b6:cd:
9f:ae:d8:52:11:c9:0f:41:dc:0b:7c:43:0b:3e:bd:e8:07:70:
9b:0f:38:58:57:1a:68:7e:24:1a:f8:7f:97:97:94:27:27:be:
02:2a:ff:50:30:fe:c2:b2:fc:a5:80:a5:e3:3f:1f:15:e4:0d:
3b:3a:85:ad:47:cd:c4:bd:3f:be:51:af:bd:17:05:38:89:78:
09:6b:d3:2b:86:51:c0:5a:75:63:57:81:10:2f:fa:8e:3c:46:
13:c9:80:4b:25:84:87:2d:93:cd:f9:da:15:a7:b7:b2:33:6a:
89:80:89:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:09 2025 by rpki-client