Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/PHlNRVDKUIipbh4mmnT-05yfGuk.roa
File: PHlNRVDKUIipbh4mmnT-05yfGuk.roa (raw, json)
Hash identifier: cNnOndFgHo622VA0zpp45ciEzuNlkMaFL1btrNyql2Q=
Subject key identifier: 3C:79:4D:45:50:CA:50:88:A9:6E:1E:26:9A:74:FE:D3:9C:9F:1A:E9
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 01920EEA9A26E0BC6584DF719F92E1528795
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/PHlNRVDKUIipbh4mmnT-05yfGuk.roa
Signing time: Fri 20 Sep 2024 10:11:48 +0000
ROA not before: Fri 20 Sep 2024 10:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8565
IP address blocks: 62.244.76.0/23 maxlen: 23
62.244.100.0/22 maxlen: 24
62.244.104.0/22 maxlen: 22
62.244.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 16 Oct 2024 10:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:ea:9a:26:e0:bc:65:84:df:71:9f:92:e1:52:87:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Sep 20 10:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c794d4550ca5088a96e1e269a74fed39c9f1ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:90:0a:c5:77:09:22:38:03:bf:63:24:03:
ef:a4:cd:24:cc:18:5e:da:af:82:30:20:66:5c:a0:
93:60:94:be:b8:22:0a:3c:f5:ca:09:de:c2:7d:92:
0d:36:ba:20:f2:a0:f5:32:c1:c2:7d:c2:f3:5a:21:
37:4e:f8:b9:17:40:55:d9:48:2c:22:b1:a6:fc:cb:
9a:4a:97:00:ba:d8:d6:d1:b3:8f:85:ee:12:a6:bc:
4a:f6:b6:b4:ff:b1:b7:1f:f8:8f:d0:d0:72:de:58:
00:48:d8:fe:67:4a:3a:45:1a:60:42:15:d8:a8:67:
f1:b7:72:e6:70:8d:cf:ff:da:b6:07:e6:8c:46:65:
bc:2d:c4:49:18:9b:0f:93:c9:a9:de:6b:f4:5f:86:
9b:f7:d5:aa:25:df:38:13:eb:cc:30:23:4e:4b:24:
e5:fe:89:eb:7d:a6:09:30:df:17:49:44:b8:0e:36:
49:2d:79:fe:03:14:4a:9f:05:90:f0:9d:b9:80:fb:
8d:14:f9:14:65:03:9c:62:b4:5f:11:7d:ed:3a:ec:
73:58:5c:59:d1:5c:b3:1b:7c:2d:30:6a:ca:9e:e5:
41:0d:82:d7:7a:d4:cc:19:d2:41:77:74:a4:35:a5:
12:81:05:4b:e2:76:51:e7:29:42:a0:80:80:f2:73:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:79:4D:45:50:CA:50:88:A9:6E:1E:26:9A:74:FE:D3:9C:9F:1A:E9
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/PHlNRVDKUIipbh4mmnT-05yfGuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.76.0/23
62.244.100.0-62.244.107.255
62.244.120.0/22
Signature Algorithm: sha256WithRSAEncryption
77:44:d8:50:05:fa:4f:9a:30:65:c3:cc:f1:ef:90:4c:48:56:
6f:d9:1d:60:02:d7:8b:56:aa:9d:ac:95:5c:2b:cf:6d:04:fe:
65:b3:a0:63:4a:33:cc:f3:01:42:7d:48:96:a5:17:9b:9f:36:
7c:73:84:2e:75:1f:4e:bc:1e:3d:ea:cc:a8:65:dd:f5:b0:c2:
07:82:83:bd:27:a1:34:a2:45:09:0b:de:85:9a:53:fd:d3:b1:
77:d9:e5:12:0a:6e:4f:ef:c3:ab:5a:20:06:32:de:28:a7:e5:
35:ae:5e:9e:80:ef:76:1d:5a:20:64:4e:14:a1:1f:92:cf:bf:
11:50:bf:27:7e:89:51:46:73:90:42:19:c2:04:20:52:8b:cc:
1f:fd:a4:a7:4b:67:c1:85:a2:90:07:15:62:f1:7b:a0:5f:2c:
f4:8e:c2:fd:da:57:d7:3a:47:a4:c2:cf:8a:45:4f:f7:46:4e:
a0:9f:ce:f7:ca:43:b1:f5:33:d6:5e:ab:9b:eb:2f:dd:f9:98:
aa:5c:8e:47:38:8f:0b:49:cd:ae:cf:29:e7:cb:c3:19:c8:3a:
d7:34:46:5f:a8:47:a7:78:dd:34:fa:9b:b1:17:eb:2d:ba:40:
93:09:86:e6:9c:6e:20:80:3b:3d:c6:06:26:95:ee:cd:6c:63:
c3:da:d7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:16 2025 by rpki-client