Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/cxOrTbkc7H5rf1QG_mAI0qD5nO4.roa
File: cxOrTbkc7H5rf1QG_mAI0qD5nO4.roa (raw, json)
Hash identifier: n8lgFTJ/DbCQu0yUCqjT2kC2CV5cL5AoJYcnewyIwlE=
Subject key identifier: 73:13:AB:4D:B9:1C:EC:7E:6B:7F:54:06:FE:60:08:D2:A0:F9:9C:EE
Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Certificate serial: 019291020922A18332F8F2045D278D95DBAC
Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/cxOrTbkc7H5rf1QG_mAI0qD5nO4.roa
Signing time: Tue 15 Oct 2024 16:28:02 +0000
ROA not before: Tue 15 Oct 2024 16:28:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31693
IP address blocks: 62.244.76.0/24 maxlen: 24
62.244.77.0/24 maxlen: 24
164.138.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 10:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:91:02:09:22:a1:83:32:f8:f2:04:5d:27:8d:95:db:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8
Validity
Not Before: Oct 15 16:28:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7313ab4db91cec7e6b7f5406fe6008d2a0f99cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:d7:41:e3:38:d1:5c:6d:e8:c9:97:fe:93:
e2:b9:00:30:64:3a:dd:16:df:28:97:af:9a:f7:c1:
ea:11:4b:00:bc:64:c7:c7:6f:39:52:f9:b8:5c:aa:
6d:5f:38:89:e4:a9:b0:8e:31:cc:20:fb:d1:fa:35:
79:8b:48:38:9d:62:7d:3a:3c:2d:ef:ab:b2:19:eb:
4f:40:d1:4b:88:f9:b3:6f:a1:19:b4:ad:a0:c2:31:
ff:2c:cd:b8:5a:7a:de:ce:40:a4:a6:e1:e3:44:29:
df:9c:31:61:a8:3e:da:7d:39:b4:7e:77:09:d2:15:
75:68:a8:63:c6:9c:1f:a6:a1:9f:b3:e4:7f:27:99:
3a:a5:80:5e:f8:7f:a6:4e:fd:ce:0e:93:90:b3:f1:
b6:67:2f:b6:de:91:4f:70:33:b8:3a:ed:e0:65:34:
35:e8:d8:b7:10:17:cd:23:6e:7d:ac:26:76:83:1a:
c6:ab:b7:8b:d5:38:47:db:69:88:de:77:dc:05:d2:
9f:71:6b:cb:16:46:7a:2f:22:78:89:32:b3:d7:9e:
7b:35:5f:7e:47:33:57:72:af:70:e7:7d:63:bd:52:
07:ad:31:bc:5a:dd:26:8e:ba:80:50:94:fc:3d:af:
95:0c:1a:3f:91:d7:1b:f1:63:82:4e:15:fa:54:5d:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:13:AB:4D:B9:1C:EC:7E:6B:7F:54:06:FE:60:08:D2:A0:F9:9C:EE
X509v3 Authority Key Identifier:
keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/cxOrTbkc7H5rf1QG_mAI0qD5nO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.76.0/23
164.138.56.0/21
Signature Algorithm: sha256WithRSAEncryption
07:69:7f:d1:d8:ce:4e:0c:7e:9f:a5:74:d5:b9:07:f6:3d:ab:
a5:ac:b1:7d:29:dd:3b:3c:56:95:f4:d1:c1:72:85:2c:f6:e0:
12:80:10:ad:7c:57:2d:08:a9:83:42:44:a2:c0:72:08:73:c6:
1e:b9:89:47:aa:c1:03:12:aa:96:d4:0d:94:5d:4e:d2:8d:2e:
4c:52:8d:2a:42:c4:7b:6e:33:dc:87:03:8f:50:01:36:bf:4a:
9a:e6:43:e5:13:87:04:5c:e7:ad:e6:48:ba:c9:6a:48:a8:0d:
fa:0b:7c:a5:81:e4:01:b5:76:51:ec:cc:22:d4:9f:83:4a:fe:
d8:5c:b2:55:be:12:36:f4:f7:c0:98:0c:ef:99:40:bd:1b:a6:
f5:5e:11:d6:f7:75:38:ff:0f:ea:45:3a:a1:d6:f6:ee:92:a8:
ef:6a:10:2b:1f:29:c8:94:c0:90:1d:fc:e4:82:b9:20:4c:1b:
8f:25:07:46:dd:fa:ce:4d:e8:83:db:e5:b8:42:6d:e8:6f:4f:
7c:ff:ca:bf:b5:b3:d6:68:6f:f1:0a:d5:ec:aa:7f:7a:4e:ae:
bb:7b:21:0a:b2:35:56:52:fb:58:e5:47:56:43:af:19:34:f3:
b8:5b:06:76:c1:53:91:b1:b9:d2:ed:97:a2:74:18:4b:ea:ac:
84:dd:91:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:43 2025 by rpki-client