Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/7w98cFyG--5KW205z7Utc_zoMpM.roa
File: 7w98cFyG--5KW205z7Utc_zoMpM.roa (raw, json)
Hash identifier: C5eTFXeWezIoNcxhu1xhL8jlDJeY/zvetefkIWNOFgY=
Subject key identifier: EF:0F:7C:70:5C:86:FB:EE:4A:5B:6D:39:CF:B5:2D:73:FC:E8:32:93
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 019294D4929C4E30D7F0E82C9AAB2CF39863
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/7w98cFyG--5KW205z7Utc_zoMpM.roa
Signing time: Wed 16 Oct 2024 10:16:51 +0000
ROA not before: Wed 16 Oct 2024 10:16:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31693
IP address blocks: 62.244.76.0/24 maxlen: 24
62.244.77.0/24 maxlen: 24
62.244.82.0/23 maxlen: 23
164.138.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 10:38:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:d4:92:9c:4e:30:d7:f0:e8:2c:9a:ab:2c:f3:98:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Oct 16 10:16:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef0f7c705c86fbee4a5b6d39cfb52d73fce83293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:e8:a5:93:2f:13:10:da:0e:8e:aa:af:68:
d0:f2:66:40:9a:92:6e:fe:74:77:c2:89:ab:24:70:
8d:b9:5c:b4:7c:e9:04:b9:01:b6:c7:41:5b:f5:79:
72:d1:40:81:ce:c9:c1:40:bc:97:33:d5:15:0c:0f:
4a:e5:b6:14:ad:6c:ba:1b:2d:8d:74:0a:06:ef:58:
d4:dc:95:55:65:c7:35:2e:11:be:c7:a3:ab:46:2a:
a9:c0:26:af:fd:88:66:d6:78:b4:6b:14:e4:4e:7a:
af:9e:71:54:9c:18:42:11:fc:78:18:10:89:32:ce:
d4:b0:58:63:be:de:f0:42:17:5e:8d:15:22:08:a4:
1f:d1:ee:54:c6:2c:a8:91:3f:4e:80:78:06:bd:b4:
d8:40:d3:f3:08:b5:22:2d:85:f6:e5:97:7a:68:98:
e3:a1:0f:61:22:83:35:78:7b:15:86:e7:d0:40:32:
81:c4:18:7b:ec:77:b7:13:62:d3:62:48:03:95:f5:
15:c6:63:90:bf:51:b3:2f:ed:60:bb:b4:49:0f:d8:
cb:19:a2:a6:c8:6c:68:20:24:70:96:03:13:8c:a3:
1f:ce:30:ac:ce:14:80:b1:36:90:ed:f6:33:4a:1a:
93:b1:7e:75:e5:d4:1c:b1:21:bc:31:1d:69:64:32:
e9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0F:7C:70:5C:86:FB:EE:4A:5B:6D:39:CF:B5:2D:73:FC:E8:32:93
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/7w98cFyG--5KW205z7Utc_zoMpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.76.0/23
62.244.82.0/23
164.138.56.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:fe:f8:74:9b:14:cd:47:ea:dd:08:ef:6e:78:be:17:0d:57:
af:1c:49:54:32:27:2b:12:70:47:89:ee:cd:77:1f:99:3c:e2:
3f:42:fd:70:98:32:ba:33:60:c5:0a:fd:ec:13:9a:01:d4:e0:
74:92:74:8e:1a:6e:4d:1f:9d:7f:0b:85:5a:24:03:43:7c:48:
2e:15:f2:76:6c:29:e1:98:f2:5e:ae:9e:8d:a4:70:27:00:24:
c2:c4:40:7a:df:61:61:bd:25:fe:50:9f:0f:2a:19:d8:d8:3c:
c4:90:c0:30:51:56:32:c7:24:48:36:7b:05:7e:a7:53:38:87:
4f:4b:ab:16:ec:08:57:92:5e:e3:69:a9:6f:e9:83:58:6d:e7:
c0:2f:cd:d4:84:6b:41:a7:5d:27:80:60:b7:69:44:7a:84:b9:
2d:92:95:31:72:3f:09:95:45:de:0e:e6:e9:7e:68:84:12:ed:
a5:1f:2b:d1:68:3a:fa:42:35:75:cc:79:61:18:a7:2a:e6:99:
c5:08:7e:bc:0a:23:17:8f:eb:5f:21:b6:fe:5c:37:57:13:71:
08:5d:88:cf:4a:68:89:8f:f1:5e:a3:f1:5e:54:46:88:f9:ff:
39:65:4f:f6:99:ab:e4:26:fb:1a:1e:02:e8:a5:5b:51:d5:16:
dd:b7:31:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:51:59 2025 by rpki-client