Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/f0WQHh1p77Zi9-svb2KxvmGtqKw.roa
File: f0WQHh1p77Zi9-svb2KxvmGtqKw.roa (raw, json)
Hash identifier: vPQvK/7B+mldQ/CM6HzyxA0VvBzrjzMjqLc4TR5SK1w=
Subject key identifier: 7F:45:90:1E:1D:69:EF:B6:62:F7:EB:2F:6F:62:B1:BE:61:AD:A8:AC
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC80167C68042AA539D5731EDDDF4DF93
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/f0WQHh1p77Zi9-svb2KxvmGtqKw.roa
Signing time: Tue 02 Jan 2024 02:29:44 +0000
ROA not before: Tue 02 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208210
IP address blocks: 62.3.50.0/24 maxlen: 24
2a0c:b641:420::/44 maxlen: 48
2a0f:8400::/32 maxlen: 48
2a0f:8401::/32 maxlen: 48
Validation: Failed, certificate revoked on Sun 21 Jan 2024 22:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:67:c6:80:42:aa:53:9d:57:31:ed:dd:f4:df:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f45901e1d69efb662f7eb2f6f62b1be61ada8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fc:66:61:69:47:e9:d2:42:1f:e2:7b:d8:34:
63:41:78:6e:ad:0b:ee:aa:6b:f8:05:e6:5a:37:72:
9d:8a:ff:00:a9:3d:e5:5c:7e:35:33:d8:6b:4f:df:
59:89:36:b4:67:2f:29:3b:93:ac:06:bc:62:47:d5:
ae:99:28:28:52:9b:0d:3d:f4:34:b2:86:36:fa:db:
d1:ea:94:50:dc:5e:78:de:f1:8c:30:bd:aa:b0:4d:
21:94:e8:e9:3f:32:b4:8b:f4:42:fb:57:84:58:ef:
96:87:70:ab:89:98:a8:2d:be:45:0a:5f:46:ae:33:
e6:d4:1a:ae:a4:83:c8:26:5f:92:15:3c:c8:04:82:
1a:65:bc:4a:77:33:4d:6a:d2:4c:64:e5:2b:0d:1b:
5f:b6:2a:03:fe:ba:e4:4e:6d:36:80:8f:37:9f:69:
5f:27:7a:88:17:82:00:01:6b:8e:0e:a3:1f:8a:b4:
70:1d:48:d4:db:90:5c:07:86:eb:be:0c:1d:7c:b7:
9e:e9:6e:bc:33:f5:58:a5:f6:53:82:7f:65:05:b3:
b4:b5:22:fd:85:6c:d2:d2:3c:12:4e:6a:b2:bd:43:
2e:93:f8:87:61:2b:dc:fa:a8:2c:46:f2:4b:0c:ab:
02:2c:ad:b7:ea:a9:96:7f:62:8a:74:8d:0a:31:84:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:45:90:1E:1D:69:EF:B6:62:F7:EB:2F:6F:62:B1:BE:61:AD:A8:AC
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/f0WQHh1p77Zi9-svb2KxvmGtqKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.50.0/24
IPv6:
2a0c:b641:420::/44
2a0f:8400::/31
Signature Algorithm: sha256WithRSAEncryption
7c:1a:f0:5a:74:9f:96:a8:10:f2:21:f6:2a:57:f9:9f:bc:2c:
ab:ee:5d:39:bd:42:dd:d3:51:dd:d8:3d:d1:d2:91:b3:b8:21:
a0:b5:43:da:01:a4:ce:84:73:5e:69:98:89:e8:f9:93:de:f0:
cc:c4:ab:ef:5c:61:69:b4:4a:f3:dc:03:92:d7:7d:c3:d7:bb:
12:b8:bd:72:dc:1f:0a:96:41:36:cf:38:57:d9:08:05:e7:59:
43:95:e7:ae:63:69:b9:ec:37:5e:b8:6b:5e:ef:4f:a7:33:52:
0d:75:28:45:59:95:d7:94:19:35:4e:4d:0f:e4:bb:f0:b5:b5:
fa:b4:70:1f:49:b0:8a:2e:b7:8b:d3:21:e8:1e:06:61:1f:5e:
26:42:6b:e8:7a:b6:74:c6:1b:d1:d0:b6:29:31:eb:36:79:aa:
5a:a2:a6:77:b9:a4:16:d6:a8:f5:d0:13:0f:fd:96:16:57:a4:
8d:d3:ef:28:1a:f5:e6:af:94:7b:bc:71:97:bc:7a:0a:11:94:
bb:cb:91:31:f9:ba:52:f2:ac:5f:50:53:88:fb:4d:9f:4d:09:
ab:92:32:55:71:16:74:51:c7:ab:b7:04:01:92:45:9e:bb:97:
62:ec:a9:77:92:6a:55:db:00:ce:a8:bb:56:76:56:1d:6e:0e:
b6:b2:d7:fe
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzIAWfGgEKqU51XMe3d9N+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwMTAyMDIyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjQ1OTAxZTFkNjllZmI2NjJmN2ViMmY2ZjYyYjFiZTYxYWRhOGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fxmYWlH6dJCH+J72DRjQXhurQvu
qmv4BeZaN3Kdiv8AqT3lXH41M9hrT99ZiTa0Zy8pO5OsBrxiR9WumSgoUpsNPfQ0
soY2+tvR6pRQ3F543vGMML2qsE0hlOjpPzK0i/RC+1eEWO+Wh3CriZioLb5FCl9G
rjPm1BqupIPIJl+SFTzIBIIaZbxKdzNNatJMZOUrDRtftioD/rrkTm02gI83n2lf
J3qIF4IAAWuODqMfirRwHUjU25BcB4brvgwdfLee6W68M/VYpfZTgn9lBbO0tSL9
hWzS0jwSTmqyvUMuk/iHYSvc+qgsRvJLDKsCLK236qmWf2KKdI0KMYRvDQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFH9FkB4dae+2YvfrL29isb5hraisMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvZjBXUUhoMXA3N1ppOS1zdmIyS3h2bUd0cUt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAPgMyMBYE
AgACMBADBwQqDLZBBCADBQEqD4QAMA0GCSqGSIb3DQEBCwUAA4IBAQB8GvBadJ+W
qBDyIfYqV/mfvCyr7l05vULd01Hd2D3R0pGzuCGgtUPaAaTOhHNeaZiJ6PmT3vDM
xKvvXGFptErz3AOS133D17sSuL1y3B8KlkE2zzhX2QgF51lDleeuY2m57DdeuGte
70+nM1INdShFWZXXlBk1Tk0P5LvwtbX6tHAfSbCKLreL0yHoHgZhH14mQmvoerZ0
xhvR0LYpMes2eapaoqZ3uaQW1qj10BMP/ZYWV6SN0+8oGvXmr5R7vHGXvHoKEZS7
y5Ex+bpS8qxfUFOI+02fTQmrkjJVcRZ0UcertwQBkkWeu5di7Kl3kmpV2wDOqLtW
dlYdbg62stf+
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:28 2025 by rpki-client