Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/Qhy1i8a-MEJFQ1X5LBqAAUqjKvI.roa
File: Qhy1i8a-MEJFQ1X5LBqAAUqjKvI.roa (raw, json)
Hash identifier: U4RJTzH3W8zx/79ykuvUQuy+2JUJfFCDFVVCNyWFJhQ=
Subject key identifier: 42:1C:B5:8B:C6:BE:30:42:45:43:55:F9:2C:1A:80:01:4A:A3:2A:F2
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0193F30DC1C8ABE193F4FF963C33E8DF7963
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/Qhy1i8a-MEJFQ1X5LBqAAUqjKvI.roa
Signing time: Mon 23 Dec 2024 10:26:25 +0000
ROA not before: Mon 23 Dec 2024 10:26:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214706
IP address blocks: 62.108.35.0/24 maxlen: 24
62.108.37.0/24 maxlen: 24
62.108.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:0d:c1:c8:ab:e1:93:f4:ff:96:3c:33:e8:df:79:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Dec 23 10:26:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=421cb58bc6be3042454355f92c1a80014aa32af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:93:60:f9:b7:70:39:ba:ce:24:cc:74:f1:
b1:62:3b:05:24:0b:59:28:a0:8d:97:fa:55:88:bb:
89:75:bf:8e:02:fc:2b:27:9c:90:b3:94:83:3a:29:
86:23:09:81:d4:ff:87:5e:8a:32:fc:33:a8:22:d8:
f9:6d:e1:81:38:0d:65:a7:45:13:9a:9b:0c:48:7c:
68:b8:ba:67:59:f1:82:05:23:b1:5d:24:c2:a6:e1:
27:9e:f5:a5:f6:47:4c:1a:61:15:eb:44:75:ee:f7:
cf:65:ce:ed:c3:c7:bb:7f:9c:ff:41:be:52:85:b4:
00:d2:05:47:05:29:ce:46:fe:8f:25:c9:39:09:90:
9a:90:d3:2d:d3:95:5f:14:9c:12:24:3d:07:3c:07:
d9:ea:b5:5e:5e:64:14:49:0e:fc:f3:24:71:d9:52:
5b:24:0d:88:9d:fc:8b:36:56:c2:68:1b:68:0b:6e:
ac:41:9f:3d:2b:b6:16:dd:a4:cf:3c:5b:26:fb:a3:
2e:a8:c6:10:97:a2:3f:71:52:be:02:c3:2f:48:59:
98:11:4d:1f:bd:3f:09:28:15:9d:20:64:c6:d0:2b:
54:26:8c:15:f5:3b:74:2a:23:2d:a7:1d:c5:38:cf:
19:db:4f:9a:fc:17:9d:d2:35:25:2e:60:07:ff:34:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1C:B5:8B:C6:BE:30:42:45:43:55:F9:2C:1A:80:01:4A:A3:2A:F2
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/Qhy1i8a-MEJFQ1X5LBqAAUqjKvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.35.0/24
62.108.37.0/24
62.108.40.0/24
Signature Algorithm: sha256WithRSAEncryption
36:98:76:46:4f:89:16:ea:3f:5c:06:be:1a:92:eb:85:48:fe:
2f:5c:19:ad:06:f8:59:2c:af:f6:f3:cd:7e:9a:75:57:1a:2a:
3d:82:af:df:83:2d:84:1a:42:b4:54:39:04:d6:30:b0:0e:9a:
83:93:5e:c8:1a:85:9a:a6:a1:c9:69:b2:d5:a2:6d:fb:f6:f2:
57:52:23:0c:f3:ed:3d:30:9f:07:e0:61:0f:f9:61:7e:13:3b:
d6:64:60:75:f3:ca:a0:53:b4:0c:67:51:7f:f1:e5:43:ad:e3:
42:de:e5:67:06:8a:09:f3:6e:ea:98:9e:cd:06:1b:02:f4:ff:
cb:63:02:c7:26:33:8e:9c:7e:34:c8:f9:ca:ef:c8:2c:6e:79:
c4:35:bf:1c:9a:0c:06:e2:f0:7b:20:75:90:e8:d5:c1:b9:d6:
0b:36:18:08:38:5f:d7:0d:76:7d:88:09:f0:5f:48:71:1b:50:
9b:9a:a8:22:0f:d5:d6:3f:f1:59:d5:07:cc:71:96:68:e0:48:
61:c3:2b:7e:79:78:d4:62:83:30:c1:29:98:d7:af:e1:17:62:
54:9a:9b:c1:b4:8a:99:dd:0b:dd:77:72:fc:62:bd:f2:4e:fd:
23:0d:08:5f:60:40:2b:63:47:37:c5:29:91:35:a2:55:ff:47:
13:47:8a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:27:25 2025 by rpki-client